io.github.valetdotdev/valet

MCPcomunidaden línea
v1.0.0io.github.valetdotdevUnknownActualizado hace 1 m

Get share links, publish and manage websites, artifacts and agents. No account needed.

Estado del endpointen línea
comprobado hace 11 h · 157 ms
100 % de las últimas 5 comprobaciones llegaron a este endpoint
Funciona en
ClaudeCursorCopilotChatGPTGemini

Inferido de los transportes que declara este listado (streamable-http). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.

Indexado automáticamente desde fuentes públicas. Aún sin verificar por su desarrollador en Forge.Reclamar este listado →
hace 1 mÚltima actualización
Paquete
Autorio.github.valetdotdev
LicenciaUnknown
Versión1.0.0
Fuentemcp-registry
Estado de confianza
B
60/100Bueno
✓Listado en el índice de Forge+10/10
—Identidad del publicador verificada+0/30
→ Publicador: este listado no tiene ningún repositorio registrado, así que `forge publish` no puede verificar la propiedad de forma automática. Usa «Reclamar este listado» arriba — en Forge lo revisamos a mano.
—Verificación de dominio+0/10
→ Ahora mismo no está disponible para este tipo de listado: hoy la comprobación de dominio solo se ejecuta para paquetes publicados en npm, así que esta fila todavía no se puede conseguir aquí, sea lo que sea lo que haya alojado en el dominio.
✓Análisis de inyección de prompts · limpio+30/30
✓Análisis de ofuscación / exfiltración · limpio+20/20
EstadoIndexado por la comunidad
PublicadorSin verificar
FirmaSin firmar
Dominio—
Procedencia—
DependenciasSin auditar
Superficie de herramientas16 herramientas · 2 privilegiadas
Análisis de seguridad✓ Limpiovlive · hoy¿Qué tan bien funciona este análisis?
EvaluacionesNinguna
Indexado14 ago 2026

La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.

Herramientas

16 herramientas · 2 privilegiadas
Observado en vivo desde el endpoint del proveedor11h ago

Leído de un handshake MCP real initialize → tools/list contra el endpoint declarado. No se invocó ninguna herramienta: tools/list es la llamada de introspección de solo lectura que el protocolo define para esto. Refleja lo que el servidor anunciaba en ese momento; un endpoint alojado no está fijado a ninguna versión y puede cambiar sin avisar.

  • https://api.valet.dev/mcp16 herramientas · 157 ms
attach_site_connectorAttach an organization connector to a website so pages served from that site can call the connector's tools. Attaching is a grant, and it is wider than it looks: every person who can open the page can call every tool the connector exposes, using the credential Valet holds for it. On a private site…

Attach an organization connector to a website so pages served from that site can call the connector's tools. Attaching is a grant, and it is wider than it looks: every person who can open the page can call every tool the connector exposes, using the credential Valet holds for it. On a private site…

ParámetroTipoDescripción
site*stringRequired. The site's name.
connector*stringRequired. The organization connector's name. It is also the name a page served from the site calls it by.
org_namestringThe Valet organization the site and the connector belong to. Omit to use the organization the account joined first.
call_site_connectorRun one tool on a connector attached to a website and return what the connector answered. It is the sampling step of building a page that calls live data: discover, attach, read the schemas, then call one tool for real before you write any page code. Call it because a schema is not a shape. list_s…

Run one tool on a connector attached to a website and return what the connector answered. It is the sampling step of building a page that calls live data: discover, attach, read the schemas, then call one tool for real before you write any page code. Call it because a schema is not a shape. list_s…

ParámetroTipoDescripción
site*stringRequired. The site's name.
connector*stringRequired. The name the connector is attached under, which is the name a page calls it by.
tool*stringRequired. The tool to run, spelled exactly as list_site_connectors reports it.
argsobjectArguments for the tool, as an object matching the tool's own input schema from list_site_connectors. Omit it for a tool that takes none.
org_namestringThe Valet organization the site belongs to. Omit to use the organization the account joined first.
create_connectorCreate an organization connector from a Valet catalog entry. It is the step after list_catalog_connectors found the entry for the product the user named; attach_site_connector then lets a website's pages call it. It creates an entry whose credential is a secret. Pass each slot the entry asks for i…

Create an organization connector from a Valet catalog entry. It is the step after list_catalog_connectors found the entry for the product the user named; attach_site_connector then lets a website's pages call it. It creates an entry whose credential is a secret. Pass each slot the entry asks for i…

ParámetroTipoDescripción
entry*stringRequired. The catalog entry's name, spelled exactly as list_catalog_connectors reports it.
org_namestringThe Valet organization to create the connector in. Omit to use the organization the account joined first.
secretsobjectThe entry's secret slots, as slot name to value. Valet stores each as an organization secret. A value passed here travels through this conversation; leave it o…
delete_siteprivilegiadaPermanently delete a website and stop serving it. Identify it by name, which requires connecting a Valet account, or by the site_token returned when it was published anonymously — whoever published a site can always take it down. This cannot be undone.

Permanently delete a website and stop serving it. Identify it by name, which requires connecting a Valet account, or by the site_token returned when it was published anonymously — whoever published a site can always take it down. This cannot be undone.

ParámetroTipoDescripción
namestringGive this or site_token. The site's name, which requires a connected Valet account.
site_tokenstringGive this or name. The token returned when the site was published anonymously; it identifies that one site.
org_namestringThe Valet organization the site belongs to. Omit to use the organization the account joined first.
detach_site_connectorDetach a connector from a website, so pages served from that site can no longer call it. The connector itself is left in place for the rest of the organization, and nothing else about the site changes. This is how the grant attaching made is taken back. While a connector is attached, everyone who…

Detach a connector from a website, so pages served from that site can no longer call it. The connector itself is left in place for the rest of the organization, and nothing else about the site changes. This is how the grant attaching made is taken back. While a connector is attached, everyone who…

ParámetroTipoDescripción
site*stringRequired. The site's name.
connector*stringRequired. The name the connector is attached under, which is the name a page calls it by.
org_namestringThe Valet organization the site belongs to. Omit to use the organization the account joined first.
get_connector_clientGet how a page served from a Valet site talks to the connectors attached to it. It is the pair to get_design_system: consult that tool for the artifact's identity, this one for how it talks to its connectors. Call it before writing any page code that fetches from a connector. Returns the same-orig…

Get how a page served from a Valet site talks to the connectors attached to it. It is the pair to get_design_system: consult that tool for the artifact's identity, this one for how it talks to its connectors. Call it before writing any page code that fetches from a connector. Returns the same-orig…

No se publicó ningún esquema de entrada para esta herramienta.

get_design_systemGet the identity brief to follow before you build or substantially rewrite an artifact. Returns the caller's organization design system when it has one, otherwise the Valet default. Honor an artifact form the user requests. Otherwise choose the artifact form and treatment from its audience, job, an…

Get the identity brief to follow before you build or substantially rewrite an artifact. Returns the caller's organization design system when it has one, otherwise the Valet default. Honor an artifact form the user requests. Otherwise choose the artifact form and treatment from its audience, job, an…

ParámetroTipoDescripción
org_namestringThe Valet organization whose design system to read. Omit to use the organization the account joined first.
anonymousbooleanSet true only when building an explicitly anonymous site. No organization is consulted and the Valet default is returned. Omit for the account-first path.
get_siteGet one website's URL, access mode, version, and expiry. Identify it by name, which requires connecting a Valet account, or by the site_token returned when it was published anonymously. A password-protected site reports that it is gated and never its visitor password. Read the password from the Va…

Get one website's URL, access mode, version, and expiry. Identify it by name, which requires connecting a Valet account, or by the site_token returned when it was published anonymously. A password-protected site reports that it is gated and never its visitor password. Read the password from the Va…

ParámetroTipoDescripción
namestringGive this or site_token. The site's name, which requires a connected Valet account.
site_tokenstringGive this or name. The token returned when the site was published anonymously; it identifies that one site.
org_namestringThe Valet organization the site belongs to. Omit to use the organization the account joined first.
list_attachable_connectorsList the organization connectors a website can hold — the discovery step before attach_site_connector. Only connectors a page can actually call appear: HTTP MCP servers reached over the sse or streamable-http transport. Command connectors and stdio MCP servers are excluded by definition — they run…

List the organization connectors a website can hold — the discovery step before attach_site_connector. Only connectors a page can actually call appear: HTTP MCP servers reached over the sse or streamable-http transport. Command connectors and stdio MCP servers are excluded by definition — they run…

ParámetroTipoDescripción
sitestringA site to mark already-attached connectors against. Omit for the plain organization-wide list.
org_namestringThe Valet organization whose connectors to list. Omit to use the organization the account joined first.
list_catalog_connectorsList the connectors Valet curates — the catalog an organization creates a connector from. Reach for it when list_attachable_connectors returned nothing that serves the data a page needs: the organization has no connector for it yet, and this says whether Valet has an entry for the product and what…

List the connectors Valet curates — the catalog an organization creates a connector from. Reach for it when list_attachable_connectors returned nothing that serves the data a page needs: the organization has no connector for it yet, and this says whether Valet has an entry for the product and what…

ParámetroTipoDescripción
org_namestringThe Valet organization a connector would be created in. The catalog is the same for every organization; this names the one the answer points the next step at.…
list_site_connectorsList the connectors attached to a website, each with the tools a page served from that site can call. Read it before writing a page that calls one: the tool names and argument schemas it returns are what the page's own calls have to match, and guessing them produces a page that fails on its first c…

List the connectors attached to a website, each with the tools a page served from that site can call. Read it before writing a page that calls one: the tool names and argument schemas it returns are what the page's own calls have to match, and guessing them produces a page that fails on its first c…

ParámetroTipoDescripción
site*stringRequired. The site's name.
org_namestringThe Valet organization the site belongs to. Omit to use the organization the account joined first.
list_sitesList the websites in a Valet organization: name, URL, access mode, and when each was last published. It is the way to recover a site's name when an earlier publish has scrolled out of the conversation. Requires connecting a Valet account.

List the websites in a Valet organization: name, URL, access mode, and when each was last published. It is the way to recover a site's name when an earlier publish has scrolled out of the conversation. Requires connecting a Valet account.

ParámetroTipoDescripción
org_namestringThe Valet organization to list. Omit to use the organization the account joined first.
publish_sitePublish files as a live website on the public internet, served over HTTPS. Use it when a report, essay, slide-like narrative, dashboard, marketing surface, or other static artifact reads better at a live URL than as conversation text. Honor an artifact form the user requests. Otherwise choose the a…

Publish files as a live website on the public internet, served over HTTPS. Use it when a report, essay, slide-like narrative, dashboard, marketing surface, or other static artifact reads better at a live URL than as conversation text. Honor an artifact form the user requests. Otherwise choose the a…

ParámetroTipoDescripción
files*arrayRequired. The site's files. One file named index.html is the minimum; add more for stylesheets, scripts, or further pages.
title*stringRequired. What the site is called, written for a person: 'Q3 Migration Audit', not a hostname. It labels the site wherever it is listed, so write the same thin…
description*stringRequired. One sentence saying what the site holds, for a person deciding whether to open it. It is shown beside the title wherever the site is listed.
namestringThe site's name, which becomes the last segment of its URL, https://<org>.valet.run/<name>. Omit to have one generated. Naming a site that already exists repub…
org_namestringThe Valet organization to publish into. Omit to use the organization the account joined first.
idempotency_keystringAn opaque key of your choosing. Repeating a call with the same key returns the first call's result instead of publishing a second site, which makes a retry saf…
site_tokenstringThe token an earlier anonymous publish returned. Give it back to update that same site instead of creating another.
anonymousbooleanSet true only when the user explicitly wants a temporary public site without account ownership. Omit for the account-first path, which connects a Valet account…
rename_siteprivilegiadaRename a website and move it to https://<org>.valet.run/<new-name>. The old address stops serving the site and its name becomes available to another site or app in the same organization. Requires connecting a Valet account.

Rename a website and move it to https://<org>.valet.run/<new-name>. The old address stops serving the site and its name becomes available to another site or app in the same organization. Requires connecting a Valet account.

ParámetroTipoDescripción
name*stringRequired. The site's current name.
new_name*stringRequired. The site's new name. It also becomes the last path segment of the new URL.
org_namestringThe Valet organization the site belongs to. Omit to use the organization the account joined first.
set_site_accessSet who can reach a website: public serves it to anyone who has the link, private serves it only to members of the organization that owns it, and password serves it to anyone who enters a shared visitor password. Requires connecting a Valet account. Password mode takes the password as the password…

Set who can reach a website: public serves it to anyone who has the link, private serves it only to members of the organization that owns it, and password serves it to anyone who enters a shared visitor password. Requires connecting a Valet account. Password mode takes the password as the password…

ParámetroTipoDescripción
name*stringRequired. The site's name.
mode*stringRequired. The access mode. public serves the site to anyone who has the link. private serves it only to members of the organization that owns it. password serv…
passwordstringThe shared visitor password. Required for password mode and rejected for the others. Anyone who enters it can open the site, so a site's owner passes it to who…
org_namestringThe Valet organization the site belongs to. Omit to use the organization the account joined first.
share_siteShare a website with specific people by email, whether it is private or password-protected — sharing does not change who else can reach it. Each address is mailed a link from Valet that opens the site; the recipient needs no Valet account of their own, only the link, so anyone holding the email can…

Share a website with specific people by email, whether it is private or password-protected — sharing does not change who else can reach it. Each address is mailed a link from Valet that opens the site; the recipient needs no Valet account of their own, only the link, so anyone holding the email can…

ParámetroTipoDescripción
name*stringRequired. The site's name.
org_namestringThe Valet organization the site belongs to. Omit to use the organization the account joined first.
emails*arrayRequired. The email addresses to share the site with, at most 10 at a time. Sharing again with an address that already has access re-sends the same link rather…
messagestringAn optional note included in the email, shown to the recipient as a quote beside the link. At most 500 characters.
expires_in_secondsintegerHow many seconds from now the link stops working if nobody has opened it yet. Omit, or pass 0, for a link that never expires this way.
access_ttl_secondsintegerHow many seconds of access the first open starts, after which the link stops working. Omit, or pass 0, for access that never expires this way. Composes with ex…

16 de 16 herramientas publicaron una descripción.

Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.

Acerca de

Get share links, publish and manage websites, artifacts and agents. No account needed.

Palabras clave
mcp
Alternativas
Comparando superficies de herramientas…

Sin cobertura de dependencias

Esta entrada no publica ningún paquete de npm, así que Forge no tiene un árbol de dependencias para ella. Es una carencia de cobertura, no una afirmación de que no tenga dependencias.