VibeHost
任意のAIエディタから1つのコマンドで静的サイトやNext.jsアプリをデプロイ — デプロイ、ドメイン、チーム共有のための46のMCPツール。
ドキュメント
VibeHost MCP Server
VibeHost is a deployment platform built for coding agents. The Model Context Protocol (MCP) server lets a connected AI agent deploy your sites, manage releases, and inspect logs through 61 tools. It works with Claude Desktop, ChatGPT, Gemini Spark, Cursor, Claude Code, Codex, Windsurf, and others.
What it does
VibeHost ships a remote MCP server that any MCP-compatible agent can connect to. Once authorised, the agent can create apps, push deployments (tarball over signed URL), promote between channels, roll back, manage custom domains and redirects, stream container logs, gate apps with passwords or share links, and grant per-app or per-team access. Every action runs through the same OAuth-bound permissions the dashboard uses. Agents only see what the signing user can see.
Endpoints
- MCP server:
https://api.vibehost.com/mcp, over the Streamable HTTP transport (the spec's recommended transport since 2025-06). - OAuth 2.1 authorization server metadata:
https://api.vibehost.com/.well-known/oauth-authorization-server(RFC 8414). - Protected resource metadata:
https://api.vibehost.com/.well-known/oauth-protected-resource/mcp(RFC 9728). - Dynamic client registration:
https://api.vibehost.com/api/v1/oauth/register(RFC 7591). New agents register themselves the first time they connect.
Authentication
OAuth 2.1 authorization-code flow with mandatory PKCE (S256). Agents request the mcp scope, plus offline_access if they need a refresh token. Access tokens are 60 minutes; refresh tokens are 30 days with single-use rotation and reuse detection (if the same refresh token is used twice, the entire chain for that client is revoked). Token audience is bound to https://api.vibehost.com/mcp via RFC 8707, so a token minted for VibeHost won't be accepted by another resource server.
Public clients (Claude Desktop, Cursor, ChatGPT, Gemini Spark, Codex, Windsurf, Raycast, Continue, Devin, VS Code, and similar native agents) authenticate via dynamic client registration and PKCE, so they need no client secret. The accepted redirect-URI schemes are: https://, loopback http://localhost and http://127.0.0.1, plus a fixed set of native-agent custom schemes (claude-desktop:, cursor:, vscode:, windsurf:, raycast:, gemini:, continue:, devin:, claude:, claude-code:, codium: ). Confidential clients with a static client_id/secret pair are supported for server-to-server integrations; contact us to provision one.
What your agent can do
The 61 tools fall into the groups below. Read-only tools are marked with (read); tools that change publicly visible internet state (deploys, public URLs, custom domains, password gates) carry openWorldHint: true so the client can prompt for confirmation.
Workspaces & apps
list_workspaces(read) lists the workspaces the OAuth token can reach.list_apps(read) andget_app(read) return apps and their metadata.create_appprovisions a new app (private by default), anddelete_appsoft-deletes one.set_app_visibilitysets an app to public, workspace, or private.
Deploys & releases
check_blobs_missing(read) andrequest_uploadhandle the chunked tarball upload through signed R2 URLs.deploypromotes a manifest to a channel. Returns the deployment with itsstatus; a static deploy is usually alreadyhealthy. Pollget_deploymentonly while it isstarting.get_deployment(read) inspects a release, andget_logs(read) returns its build log or deploy error. VibeHost does not collect runtime logs from Cloudflare.request_deployment_download(read) returns a signed URL to re-download a deployment's tarball. It powersvibehost pull.get_screenshot(read) returns the preview image the previewer worker captures on each healthy deploy.
Draft files
- Some agents, such as ChatGPT's connector, can't make HTTPS requests to
api.vibehost.comthemselves. For them the server keeps a draft tree per app, separate from what is deployed. It starts empty and never copies files from the live deployment.create_filewrites a whole file,edit_filereplaces an exact string in a file already in the draft, anddelete_fileremoves one. list_files(read) andread_file(read) show what the draft holds. Callingdeploywith no manifest ships the draft as the entire release, so a file missing from the draft is missing from the site. Write every file the site needs before deploying.- Each draft file is capped at 1 MB. An agent that can reach the API should upload with
request_uploadinstead. It is faster and skips blobs VibeHost already has.
Channels
list_channels(read),create_channel.promotetakes an existing deployment in one channel and points another channel at the same release bytes (no rebuild). Typical flow: deploy to a preview channel, verify, then promote toproduction.rollbackworks within a single channel and re-points it at one of that channel's earlier deployments.
Access & sharing
list_app_grants(read) shows who has access, by team or by email.grant_app_email_access,revoke_app_email_access,grant_app_team_access, andrevoke_app_team_accessgrant or revoke viewer, deployer, or admin access per recipient.get_app_password_info(read),set_app_password, andclear_app_passwordmanage a shared password gate on top of visibility.list_share_links(read),create_share_link, andrevoke_share_linkmanage anonymous tokenised URLs with an optional TTL.
Folders
- A folder's grants and visibility decide who sees the folder in the Folders list. They never give access to the apps inside. Each app keeps its own visibility and grants.
list_folder_grants(read) shows the email and team grants on a folder.grant_folder_email_access,grant_folder_team_access,update_folder_email_grant,update_folder_team_grant,remove_folder_email_grant, andremove_folder_team_grantmanage them.set_folder_visibilitysets a folder to private or workspace.move_app_to_foldermoves an app into another folder and needs admin on the app and on the target folder. Who can open the app stays the same.
Custom domains
list_custom_domains(read),add_custom_domain,verify_custom_domain,remove_custom_domain.verify_custom_domainqueries public DNS resolvers for your CNAME / TXT records.add_custom_domainandremove_custom_domainchange VibeHost's view of the domain.list_custom_domainsis read-only.
Redirects
list_redirect_rules(read),add_redirect_rule,remove_redirect_rule, andbulk_import_redirect_rulesmanage per-app redirect and rewrite rules, which Cloudflare Workers serve.
Team & workspace management
list_teams(read) lists the teams in a workspace with each team's id and slug, which the team tools take.list_workspace_members(read),remove_workspace_member.list_team_members(read),remove_team_member.list_workspace_invitations(read),invite_to_workspace,revoke_workspace_invitation.invite_to_workspacereturns an invite link for you to forward.list_team_invitations(read),invite_to_team,revoke_team_invitation.invite_to_teamreturns an invite link for you to forward. VibeHost sends no invitation email for either.
Example agent prompts
Once your agent is connected to https://api.vibehost.com/mcp, these prompts work as written. The agent calls multiple tools in sequence; you usually don't pick tool names manually.
- "Deploy the contents of
./distto a new VibeHost app calledlanding-v2and give me the URL."
→create_app→check_blobs_missing→request_upload→deploy→get_deployment. - "Share
landing-v2with bob@example.com as a deployer."
→get_app→grant_app_email_access. (Email grants persist until revoked; for time-bounded access usecreate_share_linkwith a TTL instead.) - "Roll
landing-v2production back to the previous release."
→list_channels+get_deployment→rollback. - "Add the custom domain
landing.example.comtolanding-v2and tell me what CNAME I need to set."
→add_custom_domain→verify_custom_domain(returns the expected CNAME and TXT records). - "Show me the last 50 log lines from
landing-v2's current production deployment."
→list_channels→get_deployment→get_logs.
Read / write capabilities
The server both reads and writes. 22 of the 61 tools are read-only, the ones marked (read) above. That is every tool prefixed list_, get_, or check_, plus read_file and request_deployment_download. The other 39 write or change state. The write tools are annotated with destructiveHint (delete / revoke / clear) and openWorldHint (for changes to publicly visible internet state, such as deploys, share links, custom domains, and password gates) so MCP clients can surface a confirmation prompt before calling.
Data & privacy
VibeHost's privacy policy also applies to access through MCP. Tool calls use the same accounts and permissions as the dashboard, with OAuth tokens issued for MCP. The database stores OAuth refresh tokens as hashes.
The draft file tools store files on VibeHost. A file written with create_file or edit_file is saved to the app's draft tree, in the same storage as files uploaded for deploys, and stays there after you deploy. Reading or changing the draft takes permission to deploy the app.
verify_custom_domain looks up DNS records through public resolvers, so it declares openWorldHint: true and clients can warn users before calling it.
Support
- Support: contact@vibehost.com
- Privacy concerns: contact@vibehost.com
Last updated: 2026-10-12.
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://gntc.com/#organization","name":"GNTC","url":"https://gntc.com/","logo":{"@type":"ImageObject","url":"https://gntc.com/logo-512.png","width":512,"height":512},"description":"Agentic Enterprise AI. GNTC builds enterprise AI agents, not tools that need clicking.","sameAs":["https://www.wikidata.org/wiki/Q140278791"]},{"@type":"WebSite","@id":"https://vibehost.com/#website","name":"VibeHost","url":"https://vibehost.com/","description":"Deploy AI-built apps to a private team URL. Free static hosting for sites built with Claude Code, Cursor, Codex, and ChatGPT.","publisher":{"@id":"https://gntc.com/#organization"},"about":{"@id":"https://gntc.com/#product-vibehost"}},{"@type":"SoftwareApplication","@id":"https://gntc.com/#product-vibehost","name":"VibeHost","url":"https://vibehost.com/","applicationCategory":"DeveloperApplication","operatingSystem":"Web","description":"Deploy AI-built static sites and Next.js apps to private team URLs via CLI, MCP, or Chrome extension. Works with Claude Code, Cursor, Codex, ChatGPT, and 10+ coding agents.","datePublished":"2026-05-28","offers":[{"@type":"Offer","name":"Free","price":"0","priceCurrency":"USD"},{"@type":"Offer","name":"Business (monthly)","price":"20","priceCurrency":"USD","priceSpecification":{"@type":"UnitPriceSpecification","price":"20","priceCurrency":"USD","billingDuration":"P1M"}},{"@type":"Offer","name":"Business (annual)","price":"199","priceCurrency":"USD","priceSpecification":{"@type":"UnitPriceSpecification","price":"199","priceCurrency":"USD","billingDuration":"P1Y"}}],"publisher":{"@id":"https://gntc.com/#organization"},"sameAs":["https://www.wikidata.org/wiki/Q140278813","https://x.com/vibehost_com","https://www.linkedin.com/showcase/getvibehost/","https://theresanaiforthat.com/ai/vibehost/"],"softwareHelp":{"@type":"CreativeWork","url":"https://docs.vibehost.com/"},"disambiguatingDescription":"VibeHost at vibehost.com is a deployment platform for apps built with AI coding agents, operated by GNTC Inc. It is not a VPS, dedicated-server, shared-hosting, or reseller provider, and is unrelated to other companies using a similar name."}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"VibeHost MCP Server","description":"How to connect AI coding agents to VibeHost via the Model Context Protocol. Deploy static sites and Next.js apps, manage releases, and stream logs through 61 MCP tools.","author":{"@id":"https://vibehost.com/#organization"},"publisher":{"@id":"https://vibehost.com/#organization"},"mainEntityOfPage":"https://vibehost.com/docs/mcp","inLanguage":"en","proficiencyLevel":"Beginner"}