MCP Server

The Sp00ky Cloud MCP server lets any Model Context Protocol client — Claude Code, Cursor, VS Code, and others — drive your Sp00ky Cloud account in natural language. Your AI assistant can list projects, deploy, tail logs, manage environment variables, trigger backups, and more — all through the same API the spky CLI uses.

It’s a remote server hosted at https://api.sp00ky.cloud/v1/mcp (Streamable HTTP), authenticated with a dedicated MCP token. Nothing to install or run locally.

Quick start

Get connected in under a minute.

# 1. Log in (skip if you already have)
spky login

# 2. Create a token and add the server to your editor
spky mcp token

spky mcp token walks you through picking scopes (default: read-only), prints your token once, and offers to register the server with your editor automatically. Then just ask your assistant:

“List my Sp00ky projects.”

Add to your editor

Already have a token? Use spky mcp install, or drop the config in by hand.

# Auto-detects the editor and registers the server.
# Prompts for a token if you don't pass one.
spky mcp install
spky mcp install --token mcp_live_xxx --client cursor

Claude Code

Register the server at user scope (available in every project):

claude mcp add --transport http spooky-cloud \
  https://api.sp00ky.cloud/v1/mcp \
  --header "Authorization: Bearer mcp_live_xxx" \
  --scope user

Verify it’s connected:

claude mcp list

Cursor

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project):

{
  "mcpServers": {
    "spooky-cloud": {
      "url": "https://api.sp00ky.cloud/v1/mcp",
      "headers": { "Authorization": "Bearer mcp_live_xxx" }
    }
  }
}

VS Code

Add to .vscode/mcp.json in your workspace:

{
  "servers": {
    "spooky-cloud": {
      "type": "http",
      "url": "https://api.sp00ky.cloud/v1/mcp",
      "headers": { "Authorization": "Bearer mcp_live_xxx" }
    }
  }
}

Any MCP client

The server speaks Streamable HTTP. Point any client at the endpoint and send the token as a bearer header:

URL:     https://api.sp00ky.cloud/v1/mcp
Header:  Authorization: Bearer mcp_live_xxx
Transport: Streamable HTTP

Tokens

MCP access uses dedicated mcp_live_ tokens — separate from your CLI session and from spk_live_ API keys, so you can issue and revoke them independently. Create them with spky mcp token:

# Read-only token (recommended default)
spky mcp token --read-only --name "claude-laptop"

# Pick exact scopes, skip the prompts, and auto-install
spky mcp token --scopes mcp:read,deployments:write --name "ci-bot" --install

# Full access including the ability to read secret values
spky mcp token --scopes mcp:full,secrets:reveal

List and revoke tokens at any time:

# List your MCP tokens
spky mcp tokens

# Revoke one by ID
spky mcp revoke <token-id>

Scopes & safety

Tokens are read-only by default — your assistant can look but not touch until you grant write scopes. Each tool requires a single scope, and the server only advertises the tools your token is allowed to use.

What your assistant can do

Once connected, these capabilities are available (gated by the scopes above). Tools marked destructive delete or tear down resources.

• Projects — list, get details, create, destroy
• Deployments — status, deploy, finalize, rollback, restart, scale, tear down
• Logs — fetch recent project logs (bounded, non-streaming)
• Environment variables — list, set, delete, bulk-load
• Vault — status, init, enable/disable CI access
• Backups — list, create, restore, check restore status, delete, configure, reset
• Custom domains — list, add, remove
• Repo links — status, recent runs, set up, update, trigger a build, unlink
• Teams — list teams & members, create, invite, remove members/invitations
• Billing — usage, checkout, change plan, billing portal

By default tools act in your personal tenant. Most tools accept an optional tenant_id to act within a specific team/organization.

Example prompts

Things you can ask once the server is connected:

• “Deploy the latest build of my api project.”
• “Show me the last 200 log lines for web, filtered to the ssp service.”
• “What environment variables are set on api? (values stay masked)”
• “Restart web and then tell me its deployment status.”
• “List the backups for api and create a fresh one.”

Troubleshooting

• 401 Unauthorized — the token is missing, malformed, or expired. Mint a new one with spky mcp token and re-add it. The header must be exactly Authorization: Bearer mcp_live_….
• No tools show up — your token’s scopes are too narrow. Create a token with mcp:read (or mcp:full for writes). The server only lists tools your scopes allow.
• claude: command not found — install the Claude Code CLI, or paste the claude mcp add … command / editor config manually (see Add to your editor).
• Secret values come back as ***REDACTED — that’s expected without secrets:reveal. Issue a token with that scope if the assistant genuinely needs raw secrets.

You can sanity-check connectivity from a terminal:

curl -s https://api.sp00ky.cloud/v1/mcp \
  -H "Authorization: Bearer mcp_live_xxx" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'