Stacktree Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Stacktree Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for stacktr.ee. Publish HTML artifacts from any MCP client (Claude Desktop, Claude Code, Cursor, Continue, etc).
Add to your MCP client config:
{
"mcpServers": {
"stacktree": {
"command": "npx",
"args": ["-y", "stacktree-mcp"],
"env": { "STACKTREE_API_KEY": "stk_live_..." }
}
}
}Generate an API key at <https://app.stacktr.ee>.
| Tool | What it does |
|---|---|
publish_html | Publish HTML; returns { url, id, expires_at, ... }. |
update_site | Replace HTML of an existing site in place; URL is preserved. |
delete_site | Hard delete a site. |
set_password | Add or clear a basic-auth password. |
set_expiry | Set hours-from-now expiry, or null for never. |
set_agentation | Toggle the on-page Agentation feedback toolbar. |
list_sites | List sites owned by this API key. |
Every site gets an unguessable https://stacktr.ee/p/{token}/ URL. Pass public_slug to opt into https://{slug}.stacktr.ee/.
pii_check defaults to warn — common secrets and PII shapes (emails, SSNs, credit cards, OpenAI/GitHub/Stripe API key prefixes) are flagged in the response. Pass block to refuse uploads that match.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.