Is io.github.bitfiction/staticbot safe to use?

io.github.bitfiction/staticbot has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.

How do I install io.github.bitfiction/staticbot?

io.github.bitfiction/staticbot supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.bitfiction/staticbot do?

io.github.bitfiction/staticbot provides 1 tool: Documentation. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.bitfiction/staticbot?

io.github.bitfiction/staticbot is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.bitfiction/staticbot actively maintained?

io.github.bitfiction/staticbot is actively maintained - last commit was 2 days ago. It has 1 GitHub stars.

io.github.bitfiction/staticbot

@staticbot/mcp

Deploy websites, migrate app backends, and run continuous sync with explicit approval gates.

1 51/wk 1 tool GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 2d ago

Works with most clients

Transport: stdio, http

1 tool · ~31 tok

Grade A · 0.0% of 200K ctx

MCPpedia last refreshed this data 18h ago

Edit this pageView history

io.github.bitfiction/staticbot is an MCP server that deploy websites, migrate app backends, and run continuous sync with explicit approval gates. Its tool list has not been published yet over stdio and http, requires no API key, and scores 87/100 on MCPpedia's security, maintenance and efficiency rubric.

DevOps

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "staticbot": {
      "env": {
        "STATICBOT_API_KEY": "sk-your-api-key-here"
      },
      "args": [
        "-y",
        "@staticbot/mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-bitfiction-staticbot)](https://mcppedia.org/s/io-github-bitfiction-staticbot)

Read me

What io.github.bitfiction/staticbot does

Deploy websites, migrate app backends, and run continuous sync with explicit approval gates.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y '@staticbot/mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

87/100across 5 weighted dimensions

How we score →

0255075100

−13

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @staticbot/mcp against OSV.dev.

Inventory

Tools (1)

Click any tool to inspect its schema.

~31 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.bitfiction/staticbot safe to use?: io.github.bitfiction/staticbot has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.bitfiction/staticbot?: io.github.bitfiction/staticbot supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.bitfiction/staticbot do?: io.github.bitfiction/staticbot provides 1 tool: Documentation. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.bitfiction/staticbot?: io.github.bitfiction/staticbot is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.bitfiction/staticbot actively maintained?: io.github.bitfiction/staticbot is actively maintained - last commit was 2 days ago. It has 1 GitHub stars.

Similar servers

Others in devops

View all →

Mcp Gitlab96

MCP server for using the GitLab API

2.1k 12

io.github.zenml-io/mcp-zenml93

MCP server for discovering, reading, and changing ZenML resources with compact generic tools

49 17

io.github.dynatrace-oss/dynatrace-managed-mcp92

MCP server for Dynatrace Managed to access logs, events, and metrics.

34 2

Mcp Server Azure Devops91

An MCP server for Azure DevOps

400 33

MCP Security Weekly

Get CVE alerts and security updates for io.github.bitfiction/staticbot and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

DevOps

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "staticbot": {
      "env": {
        "STATICBOT_API_KEY": "sk-your-api-key-here"
      },
      "args": [
        "-y",
        "@staticbot/mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-bitfiction-staticbot)](https://mcppedia.org/s/io-github-bitfiction-staticbot)

Read me

What io.github.bitfiction/staticbot does

Deploy websites, migrate app backends, and run continuous sync with explicit approval gates.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y '@staticbot/mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

Staticbot MCP server

Give Codex, Claude, Cursor, and other MCP-compatible agents safe access to Staticbot. The server exposes typed tools for deploying websites, migrating application backends, and operating continuous sync while Staticbot keeps credentials and long-running workflow state outside the model context.

Two ways to connect

Connect the hosted server — no install, no API key. Point an MCP client that supports remote servers with OAuth at:

https://mcp.staticbot.dev/mcp

You sign in to Staticbot, choose what to grant, and the client stores the connection. If you do not have a Staticbot account yet, one is created when you first connect.

Run it locally — for clients that launch MCP servers as a local process. Needs Node.js 20 or newer and a Staticbot API key from app.staticbot.dev/developer.

Both expose the same tools. The hosted server acts as the person who authorized it and never sees an API key; the local server uses the API key you give it.

Install as a Codex plugin

This repository is also a Codex plugin. Its manifest bundles the Staticbot MCP server with four intent-focused skills:

deploy-web-app-with-staticbot deploys a repository without making the agent choose a cloud provider. Staticbot analyzes the repo, classifies the workload, and selects the supported AWS or Cloudflare target plus its customer-owned or Staticbot-managed ownership model.
migrate-vibe-coded-app moves Base44, Lovable, Bolt, or Firebase backends to customer-owned Supabase infrastructure with discovery and approval gates.
sync-vibe-coded-app keeps migrated projects synchronized while preserving destructive-change review.
live-migrate-ai-built-app cuts a live Lovable or Base44 app over to the migrated stack during a planned maintenance window: test migration, cutover plan, maintenance page, source write freeze, fresh final copy, verification, and domain switch. The builder-specific freeze steps are in live-migrate-lovable-app and live-migrate-base44-app.

The general staticbot skill remains available as a direct REST API fallback.

Add the public GitHub marketplace, then install Staticbot:

codex plugin marketplace add bitfiction/staticbot-mcp
codex plugin add staticbot@staticbot

Restart the ChatGPT desktop app or Codex after adding the marketplace if Staticbot does not appear immediately. This preview plugin uses the local MCP transport, so set STATICBOT_API_KEY in the environment that launches the app. The hosted OAuth connection at https://mcp.staticbot.dev/mcp remains the lowest-friction option when you only need MCP tools rather than the bundled skills.

Install as a Claude Code plugin

Claude Code does not require Staticbot to be accepted into a central plugin registry. Add the self-hosted marketplace directly from this GitHub repository, then install the plugin:

/plugin marketplace add bitfiction/staticbot-mcp
/plugin install staticbot@staticbot

Set STATICBOT_API_KEY in the environment that launches Claude Code. The plugin starts the published @staticbot/mcp package with npx and inherits that environment; STATICBOT_API_URL remains optional for self-hosted or local Staticbot APIs.

The installed skills are namespaced by the plugin. For example, use /staticbot:deploy-web-app-with-staticbot, /staticbot:migrate-vibe-coded-app, /staticbot:sync-vibe-coded-app, or /staticbot:live-migrate-ai-built-app. Restart Claude Code or run /reload-plugins after installation if the plugin is not immediately available.

Configure your MCP client directly

Hosted (OAuth)

For clients that support remote MCP servers, add https://mcp.staticbot.dev/mcp and authorize when prompted. The client discovers where to sign in from the server itself; there is nothing to copy or paste, and no credential is stored on your machine.

Local (API key)

Add the published package to your pro

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

87/100across 5 weighted dimensions

How we score →

0255075100

−13

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @staticbot/mcp against OSV.dev.

Inventory

Tools (1)

Click any tool to inspect its schema.

~31 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.bitfiction/staticbot safe to use?: io.github.bitfiction/staticbot has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.bitfiction/staticbot?: io.github.bitfiction/staticbot supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.bitfiction/staticbot do?: io.github.bitfiction/staticbot provides 1 tool: Documentation. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.bitfiction/staticbot?: io.github.bitfiction/staticbot is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.bitfiction/staticbot actively maintained?: io.github.bitfiction/staticbot is actively maintained - last commit was 2 days ago. It has 1 GitHub stars.