Lodestone

npx add-mcp 'https://lodestone.studiocorsair.com/mcp'

Documentation

Lodestone is a hosted remote MCP connector. One URL gives Claude, ChatGPT, Gemini, Cursor or any other MCP client live access to 21 services and 51 tools, with nothing to install and no server to run.

Connecting an AI client

Sign in at lodestone.studiocorsair.com/login with your email address. There is no password; you get a sign-in link. Your dashboard then shows a personal connector URL.

Claude (web, desktop, mobile)

1. Open Settings → Connectors → Add custom connector.
2. Paste your connector URL and give it a name.
3. Claude prompts you to authenticate. Approve it, and the tools appear.

ChatGPT

1. Enable Developer Mode in settings.
2. Add a connector with your Lodestone URL and transport Streamable HTTP.

Meta Muse

Muse has no connector settings form. You ask it, in a chat, to build a custom connector. Your dashboard's setup page (pick Muse) gives you a prompt to paste; it contains no key.

1. Paste the prompt into a new Muse chat. It points Muse at https://lodestone.studiocorsair.com/mcp?origin=muse over Streamable HTTP, with the header Authorization: Bearer <your key>.
2. When Muse asks for the key, it opens a secure credential prompt, separate from the chat. Paste your Lodestone key there. Never paste your key into the chat: chat text is stored in your history and seen by the model.
3. Muse lists the tools, runs a test search, and saves the connector as a skill.

Muse Code

Export your key as LODESTONE_KEY in your shell profile, then add this to ~/.config/muse/settings.json and run /mcp inside muse:

{
  "mcp_servers": {
    "lodestone": {
      "transport": "streamable_http",
      "url": "https://lodestone.studiocorsair.com/mcp?origin=muse-code",
      "headers": { "Authorization": "Bearer ${LODESTONE_KEY}" }
    }
  }
}

Cursor, VS Code, Windsurf, Cline, OpenCode

Add a remote MCP server with your connector URL and transport Streamable HTTP. In Cursor that is Settings → MCP → Add new global MCP server; in Cline it is MCP Servers → Remote Servers.

Trying it without an account

The demo endpoint needs no sign-in and exposes one tool, live Airbnb search:

https://lodestone.studiocorsair.com/mcp/demo

It is rate-limited per IP, because every call is a live scrape billed to our provider account.

Connector URLs

URL	Auth	Tools
https://lodestone.studiocorsair.com/mcp	OAuth 2.1	All 51
https://lodestone.studiocorsair.com/mcp + Authorization: Bearer <key>	Key in a header	All 51
https://lodestone.studiocorsair.com/m/<key>	Key in the URL	All 51
https://lodestone.studiocorsair.com/mcp/demo	None	1 (Airbnb search)

The /m/<key> form is the personal URL shown on your dashboard. It works on every MCP client, including ones with no OAuth support, and it needs no handshake. Treat it as a secret: anyone holding it can call your tools.

Two ways to add Lodestone

You can add Lodestone from a connector directory in your AI client, or by pasting your own connector URL from your dashboard. They are not identical. A directory listing carries a safe, broadly-applicable default tool set, because each AI platform has its own rules about what a listed connector may do. Your own connector URL carries the full set.

If a tool you expected is missing, you almost certainly added the directory version. Sign in, copy your personal connector URL from the dashboard, and add that as a custom connector instead. Nothing is missing from your account either way. What the Meta Muse directory listing includes is on Lodestone for Meta Muse.

Authentication

Signing in is an emailed magic link. No password is ever set or stored.

Connecting a client to /mcp uses OAuth 2.1 with PKCE. The client discovers the authorization server from the WWW-Authenticate header on a 401, registers itself through RFC 7591 dynamic client registration, and you confirm by email before any token is issued. Metadata is published at:

/.well-known/oauth-protected-resource     (RFC 9728)
/.well-known/oauth-authorization-server  (RFC 8414)
/oauth/register                          (RFC 7591)

No pre-registration and no client secret are needed. Any compliant MCP client can connect on its own.

Bringing your own keys

Integrations that read the live public web run on Lodestone's provider accounts and need nothing from you. Integrations that act on your accounts need your own credentials, added from your dashboard:

Integration	What you supply
Email	IMAP/SMTP credentials. One-click setup for Gmail, iCloud, Yahoo, Fastmail and Zoho; anything else via custom host and port.
Meta Ads	A Meta access token, plus your ad account and page IDs.
Beeper	A Beeper connection, which covers WhatsApp, Telegram, Signal, iMessage, Discord and more at once.
Telegram Bot	Your own bot token from BotFather.
Typefully	A Typefully API key, which posts to X, LinkedIn, Threads, Bluesky and Mastodon.

Keys are encrypted at rest with AES-256-GCM and are decrypted only to make your own calls to the provider they belong to. They are never logged and never shared. See the privacy policy.

Turning individual tools off

Every tool can be switched off individually from your dashboard. A disabled tool disappears from tools/list and is refused on tools/call, so the assistant cannot see it or reach it. This is the right lever if you want, say, live search but no send-email capability.

Tool reference

Live web and travel — no keys needed

Tool	Access	What it does
search_airbnb	read	Live Airbnb listings by location, monthly price ceiling and bedroom count.
search_amazon	read	Amazon products with price, star rating, review count and Prime badges. Any marketplace TLD.
search_hotels	read	Booking.com availability and nightly prices for a location and date range.
search_flights	read	Live fares between two airports, cheapest first, with airline, duration and stops.
search_places	read	Google Maps places with star rating, review count, category, address, phone and website.
search_reddit	read	Reddit posts with subreddit, score, comment count and link.

Social search — no keys needed

Tool	Access	What it does
search_twitter	read	X posts by query, with operators such as from:, min_faves: and until:.
twitter_user	read	An X profile: name, bio, follower and post counts, verified status.
twitter_user_tweets	read	A user's most recent X posts.
twitter_replies	read	The replies to a specific X post.
search_instagram	read	An Instagram profile by username.
search_tiktok	read	TikTok videos by keyword or handle, with play counts.
search_facebook	read	Public Facebook pages and posts by name or keyword.

Advertising

search_facebook_ads reads the public Meta Ad Library and needs no key. Everything else here needs your own Meta access token.

Tool	Access	What it does
search_facebook_ads	read	Any advertiser's live Facebook and Instagram ads: copy, call-to-action, landing link, platforms, run dates.
meta_ads_whoami	read	Which Meta identity the saved token belongs to.
meta_ads_list_accounts	read	The ad accounts the token can reach.
meta_ads_account_info	read	Currency, timezone, spend cap and status for one ad account.
meta_ads_list_campaigns / meta_ads_get_campaign	read	Campaigns, with objective, status and budget.
meta_ads_list_ad_sets / meta_ads_get_ad_set	read	Ad sets, with targeting, schedule and budget.
meta_ads_list_ads / meta_ads_get_ad	read	Individual ads and their creative.
meta_ads_insights	read	Performance: spend, impressions, clicks, CPC, CPM, conversions.
meta_ads_list_page_posts	read	Posts on a Facebook Page you manage.
meta_ads_create_campaign	write	Create a campaign.
meta_ads_create_ad_set	write	Create an ad set with targeting and budget.
meta_ads_create_image_ad	write	Create an image ad.
meta_ads_boost_post	write	Boost an existing Page post. Spends money.
meta_ads_update_campaign	modify	Change an existing campaign.
meta_ads_update_ad_set	modify	Change an existing ad set.
meta_ads_set_status	modify	Pause or activate a campaign, ad set or ad.

Email — your own IMAP/SMTP credentials

Tool	Access	What it does
email_list_recent	read	Recent messages in a mailbox.
email_search	read	Search by sender, subject, date or body text.
email_read	read	The full body of one message.
email_send	modify	Send a message. Irreversible, so it always asks first.

Messaging — your own connection

Tool	Access	What it does
beeper_list_chats	read	Your chats across WhatsApp, Telegram, Signal, iMessage, Discord and more.
beeper_read_chats	read	Messages in a chat.
beeper_search	read	Search messages across every connected network at once.
beeper_send_message	modify	Send a message. Irreversible, so it always asks first.
telegram_get_bot_info	read	Which bot the saved token belongs to.
telegram_get_chat	read	Details of a chat your bot is in.
telegram_read_recent_updates	read	Recent updates delivered to your bot.
telegram_send_message	modify	Send a message as your bot.

Publishing — your own Typefully key

Tool	Access	What it does
typefully_whoami	read	Which Typefully account the saved key belongs to.
typefully_post	modify	Publish or schedule to X, LinkedIn, Threads, Bluesky and Mastodon at once.

Image and video generation

Five free generations per provider per month run on Lodestone's own keys; there is nothing to bring.

Tool	Access	What it does
generate_image_nano_banana	write	Google Nano Banana (Gemini 3 Pro Image). Best for photorealism, legible text in the image, and compositional prompts. Around 30 to 40 seconds.
generate_image_flux	write	FLUX1.1 [pro]. Fast and sharp, good for art, product shots and concept art.
generate_image_seedream	write	ByteDance Seedream 4.5. High resolution, strong on people and cinematic scenes.
generate_video_veo	write	Google Veo 3 Fast, with generated audio. Around 60 seconds.
generate_video_kling	write	Kling 2.5 Turbo Pro. Smooth cinematic motion, and the slowest tool here at roughly 90 seconds.

Read-only vs write tools

Every tool declares an MCP annotation: a human-readable title, plus readOnlyHint or destructiveHint. Clients use these to decide what needs confirming, so the 35 read-only tools run without asking you on every call while anything that sends, spends or changes state prompts first.

• read reads data and changes nothing.
• write creates something new. Nothing existing is changed or deleted.
• modify changes existing state, or sends something outward that cannot be recalled.

Limits and pricing

Free to start, no card. Free-tier integrations run on Lodestone's provider keys. Image and video generation gives five free generations per provider per month. Integrations that touch your own accounts need your own credentials from the first call, and the cost of those calls is between you and that provider.

The unauthenticated demo endpoint is rate-limited per IP per hour. Signed-in connectors are not.

Data handling

• Lodestone runs as a single Cloudflare Worker. There is no separate database of your message or email content.
• Each tool call is logged with its arguments, the result returned, a timestamp and the latency, kept for up to 12 months for operating the service and answering support requests.
• API keys you add are encrypted at rest with AES-256-GCM and are never logged.
• Lodestone does not read your AI client's memory, chat history, conversation summaries or files. It only sees the arguments a tool call passes it.

Full detail in the privacy policy and the terms.

Support

Email jordan@alastor.space. A machine-readable summary of everything on this page lives at /llms.txt.