Spala Public MCP server
online · 100% uptimeai.spala/public-mcp·v1.0.2Discovery, OAuth, project operations, and exact project MCP handoff for Spala backend projects.
0 stars
Reviews
Write oneNobody has reviewed Spala Public MCP yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Spala Public MCP tools (16, 2 write)
write = sends, deletes, buys or postsaccount_setupFreeAUTH REQUIRED; WRITES MISSING ACCOUNT DATA TO THE SPALA CONTROL PLANE. Fills missing first and last name fields and creates the first company or workspace organization when none exists. Invoke only with real account and organization values supplied by the user.
account_statusFreeAUTH REQUIRED; READ-ONLY. Verifies the current public MCP OAuth identity and account readiness. Returns the authenticated identity, available organizations, and exact missing account fields without exposing OAuth or dashboard credentials.
addon_listFreeLists public Spala addons and integrations matching an optional query. Invoke to discover capabilities such as webhooks, outbound HTTP API calls, transactional email, media uploads, and realtime messaging. Returns addon ids, names, descriptions, and tags.
docs_searchFreeSearches the public Spala agent-facing documentation index by query. Invoke for setup, OAuth, installer, public-versus-project MCP, pricing, limits, security, templates, addons, or project handoff questions. Returns ranked docs entries with URLs and summaries.
organization_createwrite actionFreeAUTH REQUIRED; WRITES A NEW SPALA ORGANIZATION FOR THE SIGNED-IN ACCOUNT. Creates an additional company or workspace organization using the supplied name.
project_connectFreeAUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Prepares one accessible Spala project for agent access. Accepts one installer client (codex, roo, claude-code, cursor, a2a); when omitted, returns a client-selection response without executable arguments. Returns a client-specific workspace binding plan: protected one-time bootstrap for Codex, Roo, and Cursor; verifier-bound delegated bootstrap for Claude Code.
project_createwrite actionFreeAUTH REQUIRED; WRITES TO THE SPALA CONTROL PLANE. Creates a real Spala project with the supplied project name in an accessible organization. Accepts an organization id when multiple organizations are available and automatically scopes a sole organization. This operation is not idempotent.
project_get_mcp_manifestFreeAUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Prepares one accessible project and returns its exact platform-provided project MCP manifest URL, MCP URL, and client-specific workspace binding plan. Accepts one installer client (codex, roo, claude-code, cursor, a2a); when omitted, returns a client-selection response without executable arguments.
project_get_public_contextFreeAUTH REQUIRED; READ-ONLY. Returns documented MCP handoff fields for one accessible project without exposing tokens, private source code, unrelated customer data, or executable installer arguments.
project_listFreeAUTH REQUIRED; READ-ONLY. Lists projects accessible to the authenticated Spala user in one organization. Accepts an organization id when multiple organizations are available and automatically scopes a sole organization.
project_selectFreeAUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Compatibility alias for project_connect. Prepares one accessible project and returns the same client-specific workspace binding contract as project_connect.
spala_get_onboardingFreeReturns machine-readable Spala onboarding information for MCP clients. Includes product scope, OAuth metadata, supported installer client identifiers, authenticated project-handoff status, workflow stages, and canonical links.
spala_get_tool_mapFreeReturns a machine-readable routing map for Spala MCP clients. Identifies public and authenticated tools, supported installer clients, OAuth endpoints, project handoff rules, and project-MCP entry points.
spala_helpFreeReturns a human-readable overview of Spala, canonical start URLs, and the boundary between public discovery and project-scoped backend MCPs. Invoke for product, setup, or integration orientation. This read-only tool requires no authentication and does not access or modify project data.
spala_startFreeAUTH REQUIRED; READ-ONLY STARTUP. Invoke after OAuth to begin Spala account or project setup. Returns a versioned startup phase with account readiness, organizations, safely scoped project discovery, and one explicit next action. Reports missing account fields, automatically scopes a sole organization, and returns all accessible choices when multiple organizations exist.
template_listFreeLists public Spala backend templates matching an optional query. Invoke to discover available backend starting points such as marketplace, dashboard API, reservation, inventory, or document management. Returns template ids, names, descriptions, and tags.
Public scan report
scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 2618ms17/20
- Tool poisoning16 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 2 write-action tools with no auth3/15
- Maintenancelast push 2 days ago15/15
- Maintainer identitynamespace and repository owner differ; website matches verified namespace6/10
Findings (1)
- highWrite-action tools reachable without authentication
auth.open-write
How Spala Public MCP compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 75/100
- higher than 45% of 48,255 servers
- Tools
- 16
- the typical server has 7
- Tools that change things
- 13%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote server answers 100%
- Response time
- 124 ms
- faster than 78% of 30,031 servers
What its tools let an agent do: 13 read · 1 create · 2 change
Install Spala Public MCP in Claude Code, Cursor or VS Code
claude mcp add --transport http public-mcp https://mcp.spala.ai/mcp
What the publisher says
From the Spala Public MCP repository's README, as published. We do not edit it. Read it on GitHub
mcp.spala.ai Public MCP
Standalone public MCP front door for Spala agent discovery.
Agent intent boundary
- Once a user asks to use Spala, Spala is the workspace backend provider. Do not scaffold or substitute another backend, database/auth platform, or local API server unless the user explicitly requests comparison, migration, or integration with an existing backend.
- An install/connect/configure/setup request is setup only. Complete authentication, account data, project creation or selection, project MCP binding, and connection verification, then stop. Do not write application code or mutate backend resources.
- Continue into implementation only after a separate build/change request and after account setup plus project MCP verification are complete. Until then, do not inspect application files or perform planning, design generation, scaffolding, coding, testing, or QA. Frontend code may be local after the gate; database, auth, APIs, and server-side logic must use the Spala project MCP.
This service is intentionally separate from the Spala platform/project runtime. The production public MCP is served from:
https://mcp.spala.ai/mcpLive discovery URLs
- MCP endpoint: https://mcp.spala.ai/mcp
- Install manifest: https://mcp.spala.ai/mcp/install-manifest
- OAuth protected-resource metadata: https://mcp.spala.ai/.well-known/oauth-protected-resource
- OAuth authorization-server metadata: https://mcp.spala.ai/.well-known/oauth-authorization-server
- Public profile: https://spala.ai/mcp-profile/
- Smoke test: https://spala.ai/mcp-smoke-test/
- Native agent integrations: https://github.com/spala-ai/agent-integrations
- NPM installer: https://www.npmjs.com/package/@spala-ai/mcp-install
- Postman workspace: https://www.postman.com/paul-8c16afeb-1705125/spala-public-mcp/overview
- Postman documentation: https://documenter.getpostman.com/view/54332390/2sBY4QtKjd
Tools
The server exposes 16 tools. Every tool publishes a display title, description, input schema, and behavioral annotations through tools/list.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Spala Public MCP: common questions
- Is Spala Public MCP server safe?
- Mostly: it is graded B (75/100). Read the Spala Public MCP safety report
- How do I install Spala Public MCP?
- It runs remotely at mcp.spala.ai. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Spala Public MCP need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Spala Public MCP maintained?
- The last commit was 42 days ago (2026-09-23). The latest release is v1.0.2.
- Is Spala Public MCP up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Spala Public MCP?
- Servers from other publishers that do the same job: Memorix MCP server.
- How does Spala Public MCP compare with other MCP servers?
- safety score 75/100 (higher than 45% of 48,255 servers); tools 16 (the typical server has 7); tools that change things 13% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Spala Public MCP
Same job from other publishers: the closest match first, then the best rated.
MemorixLocal-first project memory with legacy MCP and 2026 discovery compatibility.not reviewedEstablishedB