Agent interface
Bounded tools, not a remote shell.
The local stdio MCP server gives coding agents the deployment operations they need while keeping credentials out of the registration and model-visible arguments.
Available tools
| Tool | Purpose |
|---|---|
login_status | Check authorization and return the recovery path when setup is incomplete. |
list_projects | List projects visible to the current bounded credential. |
create_project | Create a project record before a separate deployment. |
deploy_project | Upload and deploy a directory with structured stage results. |
project_status | Read the active release, recent versions, URL, and project options. |
get_logs | Read bounded, redacted build or runtime logs. |
rollback | Activate a retained immutable release. |
delete_project | Permanently delete an app, only when the user explicitly asks. The first call deletes nothing and returns a preview and a one-time code; the second call needs that code and the exact slug. |
configure_database | Explicit legacy/persistence path. Do not call by default. Dropping a database uses the same two-call confirmation as delete_project. |
list_env | List a project’s environment variable names. Secret values are never returned. |
set_env | Set environment variables, optionally write-only secrets, and optionally apply them to the live release. |
unset_env | Remove environment variables, optionally applying the change to the live release. |
import_env | Upload a local dotenv file in one atomic change. The MCP server reads the file itself, so values never enter the conversation; the result lists names only, and platform-owned names are skipped. |
Registration
rightside install claude
rightside install codex
rightside doctor --jsonRegistrations use the server name rightside and executable rightside-mcp.
Credential boundary
The MCP registration stores only the operations origin, credential-file path, and executable. The mode-0600 credential is read locally at runtime. The bearer token is not embedded in Claude or Codex configuration.