Documentation
¶
Overview ¶
Command firstboot-mcp is the Model Context Protocol server for the Firstboot cloud platform.
It gives a model sixteen tools over one account: list and read resources, see the catalog and the account's own limits, create and power and resize and delete servers, deploy and roll back and inspect apps, set DNS and firewall rules, and search the platform's documentation.
It is exactly as dangerous as the token it holds ¶
The server authenticates with one API token and can do nothing that token cannot. That boundary is enforced by the API rather than by this process, which is the point: a bug here cannot widen it. Three classes of thing are closed to every token whatever its scopes, and they are the three that matter most with a model in the loop -- credentials on the wire (an app's environment, a database's password), interactive root (a container shell, a VM console), and personal data (a domain's registrant profile). None of them can reach a chat transcript through this server, because none of them can reach this server.
So the token is the security decision, and it belongs to the person creating it. Give it the narrowest scopes the work needs. `destroy` is the one to think about twice: without it delete_server simply fails, which is a fine outcome for a server that answers questions about an account.
Running it ¶
FIRSTBOOT_API_URL=https://api.example.com \ FIRSTBOOT_TOKEN=pat_... \ firstboot-mcp
It speaks over stdin and stdout, which is what an MCP client launches it for.
Source Files