io.github.kochetkov-ma/brewpage-mcp · version 1.16.8 · 4,273 weekly npm downloads · audited 2026-11-03
No issues found
No hidden-instruction or invisible-character findings in any tool, prompt, or resource description.
Checks the directory's published tool requirements that are visible from tools/list. Passing them does not guarantee acceptance.
delete_resourceNot a vulnerability by itself. It tells you what an injected prompt could ask this server to do, so you can decide which tools need approval.
| Name | Title | Hint | Description |
|---|---|---|---|
publish_html | Publish HTML, Markdown, code or JSON page | writes | Publish HTML, Markdown, code or JSON to BrewPage (max 5 MiB). Send namespace=public to be found: gallery + Google, Bing & AI search. Omitted: private. Format omitted -> server detects it. Returns its primary share link a… |
publish_file | Publish file from URL | writes | Upload a file from a URL. Send namespace=public to be found: gallery + Google, Bing & AI search. Omitted: private. Max 5 MiB, video 20 MiB; no password or TTL. Returns its primary share link and owner token. Returns mana… |
update_hosting | Change delivery mode | writes | Change delivery mode for a NEW publication (not a site, not a non-public HTML-format page). Requires owner token; optional expectedVersion = current hostingVersion. Mismatches are reported, not rejected: a stale version … |
delete_resource | Delete publication | destructive | Delete a BrewPage resource (HTML page, site, KV store, JSON document, or file) using the owner token. |
get_page | Read page | read-only | Fetch stored rendered HTML or format-specific code/text by namespace and ID. This reads API content, not the owner-only original-source endpoint or browser viewer. Protected reads use the password header. |
get_stats | Get platform statistics | read-only | Get BrewPage platform-wide usage statistics including page count, file count, and storage usage. Counts use disjoint split: alive_public + alive_private + deleted == total. Optional `tz` shifts the 'today' boundary to th… |
publish_site | Publish site | writes | Publish an HTML site to BrewPage. Send namespace=public to be found: gallery + Google, Bing & AI search. Omitted: private. Single-page: `entryContent`. Multi-page: `files` (`{path, content}` array). Optional `entry` over… |
republish_site | Republish site | destructive | Republish (full-replace) an existing multi-file BrewPage site in place at the SAME URL/ID. Requires owner token. The uploaded bundle becomes the complete new file set — files absent from it are removed, new files added, … |
update_html | Update page | destructive | Update an existing BrewPage HTML, Markdown, code or JSON page. Requires owner token. Returns the updated page metadata. The link and delivery mode never change on update; an advisory deliveryModeReason and delivery notic… |
publish_json | Publish JSON document | writes | Publish a JSON document to BrewPage (max 1 MiB). Accepts a JSON object, array, or a JSON-encoded string containing any valid JSON, including scalars/null. Returns its primary share link and owner token. Returns manageUrl… |
get_json | Read JSON document | read-only | Fetch a published BrewPage JSON document by namespace and ID. |
update_json | Update JSON document | destructive | Update an existing BrewPage JSON document. Requires owner token. Accepts a JSON object, array, or a JSON-encoded string. Old publications (made before 5 October 2026) are read-only: 409 OLD_PUBLICATION_READ_ONLY with cre… |
publish_kv | Publish KV entry | writes | Publish a key/value entry to BrewPage. Creates a KV store; the entry is addressed by (namespace, id, key). Max 1 MiB per value, 1,000 keys per store; the key name `hosting` is reserved. Returns its primary share link and… |
set_kv | Set KV value | destructive | Set or update a key in an existing BrewPage KV store. Requires owner token. The key name `hosting` is reserved. Old publications (made before 5 October 2026) are read-only: 409 OLD_PUBLICATION_READ_ONLY with createUrl to… |
get_kv | Read KV value | read-only | Fetch a value from a BrewPage KV store by namespace, ID, and key. |
get_limits | Get upload limits | read-only | Get the current BrewPage limits (GET /api/limits): request size; per type (html, json, kv, files, sites) max size, counts and TTL default/maximum; profileMaxTtlDays (TTL cap for a token in a profile); site ZIP expansion,… |
search_gallery | Search public gallery | read-only | Search the BrewPage public gallery. Optional filters: text query, pagination, sort, and 'mine' (owner-scoped, requires owner token). |
set_visibility | Set gallery visibility | writes | Hide or show a public publication in the gallery and sitemap. Link unchanged. |
bind_token | Add token to profile | writes | Add an owner token to your BrewPage profile (as publish). Needs an admin token of that profile. |
mint_token | Mint profile token | writes | Mint a new profile token with an admin token; the new token is shown once. Scope publish (default) or admin; expiry 30d, 90d, 1y or never. |
npx mcpvetter scan --liveAdd this to a README:
[](https://mcpvetter.com/servers/brewpage-mcp)Get the MCPVetter verified badge, a re-audit within 24 hours of every npm release, and an email whenever tools, findings, or Claude directory readiness change. $29 per server per month. You prove ownership first, free.