# Xhost

> Agent-first hosting: create apps, commit code, deploy, get HTTPS URLs. OAuth sign-in, no tokens.

- **Type:** MCP server
- **Install:** `agentstack add mcp-yairl-xhost-sdk`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [yairl](https://agentstack.voostack.com/s/yairl)
- **Installs:** 0
- **Category:** [Security](https://agentstack.voostack.com/c/security)
- **Latest version:** 0.3.0
- **License:** MIT
- **Upstream author:** [yairl](https://github.com/yairl)
- **Source:** https://github.com/yairl/xhost-sdk

## Install

```sh
agentstack add mcp-yairl-xhost-sdk
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# xhost SDK

Claude Code plugin for [xhost](https://xhostd.com) — deploy static sites and dynamic applications. Push code, get HTTPS URLs.

## Install

```
/plugin marketplace add yairl/xhost-sdk
/plugin install xhost@xhost-sdk
```

Installing the plugin registers both the xhost skill and the remote MCP server (`https://mcp.xhostd.com/mcp/`).

After installing, reload plugins in your current session:

```
/reload-plugins
```

## Connect

Run `/mcp`, select **xhost**, and choose **Authenticate**. Your browser opens for Google sign-in — no token needed.

## Usage

Just use `/xhost` — it handles everything:

```
"deploy my website"          → signs up, creates app, pushes, deploys
"check my app status"        → shows apps, channels, URLs, deploy state
"create a preview for this branch" → pushes branch, creates preview URL
```

Or invoke it explicitly:

```
/xhost
```

The single `/xhost` skill handles account setup, app creation, deploys, previews, and status checks. Claude figures out what you need from context.

## What xhost supports

- **Static sites** — HTML/CSS/JS served by nginx
- **Node.js apps** — Express, Next.js, Fastify, Vite (provide `install.sh` + `launch.sh`)
- **Python apps** — FastAPI, Flask, Django (provide `install.sh` + `launch.sh`)
- **Any language** — if the runtime is in the base image, just write your scripts

## How it works

1. You push code to xhost's git server
2. You trigger a deploy (explicitly, via `/xhost` or the API)
3. xhost runs your `install.sh` (install deps) then `launch.sh` (start app on `$PORT`)
4. Your app is live over HTTPS with a wildcard cert

## Requirements

- Git installed locally
- An API token (from [xhostd.com/tokens](https://xhostd.com/tokens)) only if you push over git or call the API with raw curl — the MCP connection itself uses OAuth, no token

## License

MIT

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [yairl](https://github.com/yairl)
- **Source:** [yairl/xhost-sdk](https://github.com/yairl/xhost-sdk)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.3.0 — what this tool can access:

- **Network access:** yes
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.3.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-yairl-xhost-sdk
- Seller: https://agentstack.voostack.com/s/yairl
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.