MCP.Market

Spala Public MCP server

online · 100% uptime
by spala.ai·ai.spala/public-mcp·v1.0.2

Discovery, OAuth, project operations, and exact project MCP handoff for Spala backend projects.

B75/100grade B
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed Spala Public MCP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Spala Public MCP tools (16, 2 write)

write = sends, deletes, buys or posts
  • account_setupFree

    AUTH REQUIRED; WRITES MISSING ACCOUNT DATA TO THE SPALA CONTROL PLANE. Fills missing first and last name fields and creates the first company or workspace organization when none exists. Invoke only with real account and organization values supplied by the user.

  • account_statusFree

    AUTH REQUIRED; READ-ONLY. Verifies the current public MCP OAuth identity and account readiness. Returns the authenticated identity, available organizations, and exact missing account fields without exposing OAuth or dashboard credentials.

  • addon_listFree

    Lists public Spala addons and integrations matching an optional query. Invoke to discover capabilities such as webhooks, outbound HTTP API calls, transactional email, media uploads, and realtime messaging. Returns addon ids, names, descriptions, and tags.

  • docs_searchFree

    Searches the public Spala agent-facing documentation index by query. Invoke for setup, OAuth, installer, public-versus-project MCP, pricing, limits, security, templates, addons, or project handoff questions. Returns ranked docs entries with URLs and summaries.

  • organization_createwrite actionFree

    AUTH REQUIRED; WRITES A NEW SPALA ORGANIZATION FOR THE SIGNED-IN ACCOUNT. Creates an additional company or workspace organization using the supplied name.

  • project_connectFree

    AUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Prepares one accessible Spala project for agent access. Accepts one installer client (codex, roo, claude-code, cursor, a2a); when omitted, returns a client-selection response without executable arguments. Returns a client-specific workspace binding plan: protected one-time bootstrap for Codex, Roo, and Cursor; verifier-bound delegated bootstrap for Claude Code.

  • project_createwrite actionFree

    AUTH REQUIRED; WRITES TO THE SPALA CONTROL PLANE. Creates a real Spala project with the supplied project name in an accessible organization. Accepts an organization id when multiple organizations are available and automatically scopes a sole organization. This operation is not idempotent.

  • project_get_mcp_manifestFree

    AUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Prepares one accessible project and returns its exact platform-provided project MCP manifest URL, MCP URL, and client-specific workspace binding plan. Accepts one installer client (codex, roo, claude-code, cursor, a2a); when omitted, returns a client-selection response without executable arguments.

  • project_get_public_contextFree

    AUTH REQUIRED; READ-ONLY. Returns documented MCP handoff fields for one accessible project without exposing tokens, private source code, unrelated customer data, or executable installer arguments.

  • project_listFree

    AUTH REQUIRED; READ-ONLY. Lists projects accessible to the authenticated Spala user in one organization. Accepts an organization id when multiple organizations are available and automatically scopes a sole organization.

  • project_selectFree

    AUTH REQUIRED; IDEMPOTENT PROJECT CONNECTION WRITE. Compatibility alias for project_connect. Prepares one accessible project and returns the same client-specific workspace binding contract as project_connect.

  • spala_get_onboardingFree

    Returns machine-readable Spala onboarding information for MCP clients. Includes product scope, OAuth metadata, supported installer client identifiers, authenticated project-handoff status, workflow stages, and canonical links.

  • spala_get_tool_mapFree

    Returns a machine-readable routing map for Spala MCP clients. Identifies public and authenticated tools, supported installer clients, OAuth endpoints, project handoff rules, and project-MCP entry points.

  • spala_helpFree

    Returns a human-readable overview of Spala, canonical start URLs, and the boundary between public discovery and project-scoped backend MCPs. Invoke for product, setup, or integration orientation. This read-only tool requires no authentication and does not access or modify project data.

  • spala_startFree

    AUTH REQUIRED; READ-ONLY STARTUP. Invoke after OAuth to begin Spala account or project setup. Returns a versioned startup phase with account readiness, organizations, safely scoped project discovery, and one explicit next action. Reports missing account fields, automatically scopes a sole organization, and returns all accessible choices when multiple organizations exist.

  • template_listFree

    Lists public Spala backend templates matching an optional query. Invoke to discover available backend starting points such as marketplace, dashboard API, reservation, inventory, or document management. Returns template ids, names, descriptions, and tags.

Public scan report

scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 2618ms17/20
  • Tool poisoning16 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 2 write-action tools with no auth3/15
  • Maintenancelast push 2 days ago15/15
  • Maintainer identitynamespace and repository owner differ; website matches verified namespace6/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Spala Public MCP compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
75/100
higher than 45% of 48,255 servers
Tools
16
the typical server has 7
Tools that change things
13%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
124 ms
faster than 78% of 30,031 servers

What its tools let an agent do: 13 read · 1 create · 2 change

Install Spala Public MCP in Claude Code, Cursor or VS Code

claude mcp add --transport http public-mcp https://mcp.spala.ai/mcp
Add to Cursor

What the publisher says

From the Spala Public MCP repository's README, as published. We do not edit it. Read it on GitHub

mcp.spala.ai Public MCP

Standalone public MCP front door for Spala agent discovery.

Agent intent boundary

  • Once a user asks to use Spala, Spala is the workspace backend provider. Do not scaffold or substitute another backend, database/auth platform, or local API server unless the user explicitly requests comparison, migration, or integration with an existing backend.
  • An install/connect/configure/setup request is setup only. Complete authentication, account data, project creation or selection, project MCP binding, and connection verification, then stop. Do not write application code or mutate backend resources.
  • Continue into implementation only after a separate build/change request and after account setup plus project MCP verification are complete. Until then, do not inspect application files or perform planning, design generation, scaffolding, coding, testing, or QA. Frontend code may be local after the gate; database, auth, APIs, and server-side logic must use the Spala project MCP.

This service is intentionally separate from the Spala platform/project runtime. The production public MCP is served from:

https://mcp.spala.ai/mcp

Live discovery URLs

  • MCP endpoint: https://mcp.spala.ai/mcp
  • Install manifest: https://mcp.spala.ai/mcp/install-manifest
  • OAuth protected-resource metadata: https://mcp.spala.ai/.well-known/oauth-protected-resource
  • OAuth authorization-server metadata: https://mcp.spala.ai/.well-known/oauth-authorization-server
  • Public profile: https://spala.ai/mcp-profile/
  • Smoke test: https://spala.ai/mcp-smoke-test/
  • Native agent integrations: https://github.com/spala-ai/agent-integrations
  • NPM installer: https://www.npmjs.com/package/@spala-ai/mcp-install
  • Postman workspace: https://www.postman.com/paul-8c16afeb-1705125/spala-public-mcp/overview
  • Postman documentation: https://documenter.getpostman.com/view/54332390/2sBY4QtKjd

Tools

The server exposes 16 tools. Every tool publishes a display title, description, input schema, and behavioral annotations through tools/list.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Spala Public MCP: common questions

Is Spala Public MCP server safe?
Mostly: it is graded B (75/100). Read the Spala Public MCP safety report
How do I install Spala Public MCP?
It runs remotely at mcp.spala.ai. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Spala Public MCP need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Spala Public MCP maintained?
The last commit was 42 days ago (2026-09-23). The latest release is v1.0.2.
Is Spala Public MCP up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Spala Public MCP?
Servers from other publishers that do the same job: Memorix MCP server.
How does Spala Public MCP compare with other MCP servers?
safety score 75/100 (higher than 45% of 48,255 servers); tools 16 (the typical server has 7); tools that change things 13% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Spala Public MCP

Same job from other publishers: the closest match first, then the best rated.

  • Memorix
    Local-first project memory with legacy MCP and 2026 discovery compatibility.
    B