How do I install Misardev?

Misardev supports both local and remote installation. For local use, install it via npm (npx) and add the configuration to your AI app. For remote access, add the server URL to your MCP configuration.

Is Misardev safe to use?

Misardev scored 5.2/10 (moderate risk) in MCP Marketplace's automated security scan. It has 4 high or critical findings to review. It's listed, but review the security report on this page before installing.

What credentials does Misardev need?

Misardev requires the following credentials or environment variables: MISARDEV_API_KEY, MISARDEV_BASE_URL. You can find setup instructions on the server detail page.

What AI apps work with Misardev?

Misardev uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Misardev MCP Server

by Misar AI

Developer ToolsModerate5.2MCP RegistryLocalRemote

Free

Server data from the Official MCP Registry

Create, build and deploy projects, roll back with checkpoints, connect custom domains, and search…

About

Create, build and deploy projects, roll back with checkpoints, connect custom domains, and search…

Remote endpoints: streamable-http: https://api.misar.io/dev/mcp

Security Report

5.2

Moderate5.2Moderate Risk

The MisarDev MCP server is a developer-tools server requiring an API key (MISARDEV_API_KEY or config file) for all actions, with discovery endpoints intentionally unauthenticated and no evident exfiltration, shell execution, or hardcoded secrets in the reviewed code. Its network access to the MisarDev API and deployment/domain tools matches its stated purpose, though destructive operations rely on prompt-level guidance and the output is truncated so the full vendored upsell module and tool implementations could not be fully reviewed. Supply chain analysis found 5 known vulnerabilities in dependencies (1 critical, 3 high severity). Package verification found 1 issue.

10 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

What You'll Need

Set these up before or after installing:

Your MisarDev API key (mdk_…). Create one at https://misar.dev/settings/api-keys.Required

Environment variable: MISARDEV_API_KEY

Override the API base URL. Only needed for self-hosted instances.Optional

Environment variable: MISARDEV_BASE_URL

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

MisarDev MCP Server

Create, build and deploy projects, roll back with checkpoints, connect custom domains, search your code and the web, and work your feed, follows and DMs — from any AI assistant.

80 tools · 5 prompts · 3 resources · 4 agent skills

Works with Claude (Desktop, Code, and web), Cursor, VS Code, Windsurf, Cline, Zed, Gemini CLI, ChatGPT, and any other MCP-compatible client — over stdio or Streamable HTTP.

Install

Smithery (recommended)

npx -y @smithery/cli install misar/misardev-mcp --client claude

Claude Code

claude mcp add misardev -- npx -y @misardev/mcp@latest

Manual (any client)

{
  "mcpServers": {
    "misardev": {
      "command": "npx",
      "args": ["-y", "@misardev/mcp@latest"],
      "env": { "MISARDEV_API_KEY": "mdk_your_key_here" }
    }
  }
}

Ready-made configs for every client live in connectors/.

Remote (no install)

{
  "mcpServers": {
    "misardev": {
      "type": "streamable-http",
      "url": "https://api.misar.io/dev/mcp",
      "headers": { "Authorization": "Bearer mdk_your_key_here" }
    }
  }
}

Authentication

Create an API key at https://misar.dev/settings/api-keys (Settings → API keys) — it starts with mdk_ — and give it to the server in one of three ways: the MISARDEV_API_KEY environment variable, your MCP client's env block, or { "api_key": "mdk_…" } in ~/.misardev/config.json.

Self-hosted instances: set MISARDEV_BASE_URL.

Tools

Tool	Description
`list_projects`	List the projects you own or can access, newest first, with cursor pagination.
`get_project`	Get one project by ID — name, description, settings, visibility, version and deployment fields.
`create_project`	Create a new, empty project (optionally seeded with a file map).
`update_project`	Update a project's name, description, files, settings or visibility.
`delete_project`	Move a project to the trash.
`restore_project`	Restore a project from the trash.
`archive_project`	Archive (archived=true) or un-archive (archived=false) a project.
`duplicate_project`	Copy a project (files and settings) into a new project you own, named after the original.
`get_project_files`	Get a project's file tree with file contents.
`write_project_files`	Create, update or delete files in a project (1–100 per call, each up to 1 MB; paths are relative, no `..`).
`import_artifact`	Import a published Misar artifact page into a project as imported/ARTIFACT_ID.html.
`get_project_knowledge`	Read a project's knowledge — the standing notes (product context, conventions, constraints) the AI builder reads on every change..
`update_project_knowledge`	Replace a project's knowledge (up to 20,000 characters) — the standing notes the AI builder reads on every change.
`get_project_backend`	Show a full-stack project's database backend: whether one is provisioned, its schema name, table count and connection state..
`provision_project_backend`	Provision the database backend for a full-stack project: its own isolated schema, protected by row-level security.
`list_templates`	List the starter templates a new project can begin from, with their IDs, names and categories.
`get_template`	Get one template by ID — its description, stack and the files it would create..
`use_template`	Create a new project from a template.
`deploy_project`	Publish a project to the public internet on the MisarDev runtime (optionally at a chosen subdomain).
`get_deployment_status`	Get a project's current deployment: whether it is live, its URL, subdomain and custom-domain state.
`unpublish_project`	Take a published site offline.
`check_subdomain`	Check whether a subdomain label is free for this project and, if not, get suggestions.
`update_project_subdomain`	Move a project to a new .misar.app address (check it first with check_subdomain).
`list_builds`	List your recent AI builds across all projects, newest first, with status, model and the project each belongs to..
`get_build_status`	Get whether a project currently has a build running and its latest build state.
`cancel_build`	Cancel the build currently running on a project.
`list_checkpoints`	List a project's saved checkpoints (up to 100, newest first) with label, changed paths and timestamp.
`restore_checkpoint`	Restore a project's files to a checkpoint.
`rename_checkpoint`	Give a checkpoint a human-readable label (1–80 characters) so it is easy to find later..
`delete_checkpoint`	Delete one checkpoint from a project's version history.
`get_custom_domain`	Get a project's custom domain, its status, the DNS record the user must set, and whether DNS already resolves to the platform (TLS is issued automatically once it does)..
`set_custom_domain`	Attach a domain the user owns to a published project and provision routing/TLS.
`remove_custom_domain`	Detach a project's custom domain and remove its route.
`lookup_domain`	Look up a domain's public registration data (RDAP): whether it is registered, its registrar and key dates.
`search_workspace`	Search across your projects and the public catalogue (templates, skills, the published gallery) by name and description.
`web_search`	Answer a question from the live web with citations (MisarDev's grounded search).
`create_chat_completion`	Run a one-shot, non-streaming chat completion on MisarDev's OpenAI-compatible model API.
`index_project_code`	Index a project's files for semantic code search (RAG).
`search_project_code`	Semantic search inside an indexed project's code.
`get_code_index_stats`	Get embedding statistics for a project — how many files and chunks are indexed and when..
`clear_code_index`	Delete every embedding for a project.
`upgrade`	Show the current MisarDev plan, how much of each quota (builds, edits, projects) is left this period, and the link to compare plans and upgrade.
`get_usage`	Get detailed usage for the account.
`get_subscription`	Get the account's subscription: plan, status, current period end and whether it cancels at period end..
`list_plans`	List MisarDev's plans with prices, limits and features — what each upgrade would unlock..
`list_notifications`	List your notifications (build finished, deploy failed, invitations…), newest first, with the unread count.
`mark_notifications_read`	Mark every notification as read, clearing the unread badge.
`list_api_keys`	List your API keys — name, prefix, created/expiry dates and IP allowlist.
`create_api_key`	Create a new API key.
`revoke_api_key`	Revoke an API key by ID.
`mark_notification_read`	Mark one notification as read (use mark_notifications_read for all of them)..
`list_audit_log`	List your own audit trail — API-key, deployment and billing events where you were the actor, newest first.
`list_connectors`	List the connectors available on MisarDev and whether each is enabled for you, with its category, status and dashboard path..
`toggle_connector`	Enable or disable a connector by slug (from list_connectors).
`get_feed`	Read your home feed, one keyset page at a time.
`list_posts`	List the public explore grid: every publicly listed post, newest first, with cursor pagination.
`get_post`	Get one public post by ID: caption, author, the project or template it shares, its live URL, and its like, comment and remix counts.
`list_tag_posts`	List the posts carrying a hashtag, newest first, with cursor pagination.
`like_post`	Like a post as yourself.
`unlike_post`	Remove your like from a post.
`save_post`	Save (bookmark) a post, optionally into one of your collections.
`unsave_post`	Unsave a post.
`list_saved_posts`	List the posts you saved, newest save first, with cursor pagination.
`list_post_comments`	List a post's comments: top-level comments newest first, each with its first replies.
`create_comment`	Post a public comment on a post, or a reply to a top-level comment, under the user's own name.
`delete_comment`	Delete a comment you wrote, or one on your own post.
`follow_user`	Follow a builder by handle, so their posts join your following feed.
`unfollow_user`	Stop following a builder by handle.
`list_people_suggestions`	Suggest builders you may want to follow, each with a ready-to-show reason (for example "Follows you" or "Followed by 3 people you follow").
`mute_user`	Mute a builder's posts, stories or both (default both).
`unmute_user`	Unmute a builder, so their posts and stories show again.
`list_dm_threads`	List your direct-message conversations, newest activity first.
`list_dm_messages`	Read one conversation, newest message first, with cursor pagination.
`send_direct_message`	Send a direct message, as the user, to another person.
`mark_dm_thread_read`	Mark a conversation read up to now.
`accept_dm_request`	Accept a message request, moving the conversation into your inbox.
`mute_dm_thread`	Mute a conversation for yourself.
`unmute_dm_thread`	Unmute a conversation, so it counts toward your unread badge again.
`get_dm_unread_counts`	Count your unread conversations and pending message requests: the numbers behind the inbox badge..
`get_story_tray`	Get the story tray: your own ring first, then the builders you follow who have a live story you may see, unseen ones first.

Prompts

Reusable workflows your client exposes as slash-commands.

Prompt	Description
`ship_a_project`	Take a project from a template to a live, verified deployment.
`undo_a_bad_change`	Roll a project back to an earlier checkpoint and, if it was live, redeploy.
`deployment_health`	Review recent builds and deployments and say what needs attention.
`search_the_codebase`	Answer a question about a project from its indexed code.
`usage_and_keys_audit`	Review plan usage and API keys for anything unexpected.

Resources

Read-only context an agent can attach without spending a tool call.

URI	Description
`misardev://projects`	Your active projects, newest first — the IDs every other tool takes..
`misardev://templates`	Available starter templates, so a new project begins from a real one..
`misardev://plan`	Current plan and remaining builds, edits and projects this period — the baseline for any quota question..

Agent skills

Bundled in skills/ — guidance an agent loads when a task matches.

Skill	Use when
`connect-custom-domain`	Attach a domain the user owns to a published MisarDev project and walk them through the DNS record until TLS is live. Use for "use my own domain", custom domain setup, or a domain that is not serving yet.
`search-the-codebase`	Answer questions about a MisarDev project from its indexed code, citing the files used. Use when asked how something works, where code lives, or to explain part of a MisarDev project.
`ship-a-project`	Create a MisarDev project from a template and publish it, verifying the address before and the live site after. Use when asked to start, build, launch or deploy a project in MisarDev.
`undo-a-bad-change`	Roll a MisarDev project back to an earlier checkpoint and, if it is published, redeploy the restored version. Use when the user says a change broke something, wants the previous version back, or asks to undo.

Safety

Destructive and irreversible actions are annotated (destructiveHint) so clients can prompt before running them. The skills instruct agents to confirm before anything that sends mail, publishes content, or is otherwise visible to other people.

Discovery (initialize, tools/list, prompts/list, resources/list) never requires credentials, so registries can index the server without one. Every action does.

Reviews

No reviews yet

Be the first to review this server!

4.8

Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.