github JavaScript analyzed 477a235

2ools/mcp-server

github

Remote MCP server for 2ools — build, version, review and export websites, web apps and games from the AI chat you already use. 43 tools, one free and authless.

maintainer
2ools
license
MIT
first seen
2026-08-07
last seen
2026-08-17
releases · 30d
1
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 43 tools
transport streamable-http · http counts 43 tools · 0 res · 0 prompts permission surface via README inference

tools

  • add_project_feedback

    write

  • add_project_pin

    write

  • approve_artifact_version

    write

  • approve_version

    destructive

  • build_from_conversation

    write

  • cancel_agent_run

    destructive

  • cancel_build

    destructive

  • claim_work_assignment

    write

  • compare_versions

    read-only

  • create_public_preview

    write

  • create_version_share_link

    write

  • create_work_assignment

    write

  • decide_work_assignment

    write

  • get_agent

    read-only

  • get_artifact

    read-only

  • get_build

    read-only

  • get_project

    read-only

  • get_project_activity

    read-only

  • get_project_context

    read-only

  • get_version_share_link

    read-only

  • heartbeat_work_session

    write

  • list_approval_requests

    read-only

  • list_artifact_approval_requests

    read-only

  • list_artifacts

    read-only

  • list_build_systems

    read-only

  • list_project_agents

    read-only

  • list_project_feedback

    read-only

  • list_project_pins

    read-only

  • list_projects

    read-only

  • list_work_assignments

    read-only

  • prepare_artifact_download

    read-only

  • prepare_artifact_upload

    write

  • prepare_version_export

    read-only

  • refine_project

    write

  • reject_artifact_version

    write

  • reject_version

    destructive

  • remove_project_pin

    destructive

  • render_project_preview

    read-only

  • resolve_project_feedback

    destructive

  • revoke_version_share_link

    destructive

  • run_project_agent

    write

  • submit_work_session

    write

  • wait_for_project_activity

    read-only

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 477a235 · analyzer v33 · 1w ago

skills & prompt files 1

code evidence vv0.3.1 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 2

filesystem 1

  • fs (weak) 2ools-mcp-server-477a235/tests/skill-contract.test.mjs :2 import { readFile } from "node:fs/promises";

network 1

  • net 2ools-mcp-server-477a235/proxy.mjs :86 const response = await fetch(REMOTE_URL, {