Home / MCP registry index / ai.borealhost/mcp
BorealHost
ai.borealhost/mcp in the official MCP registry.
Endpoint https://borealhost.ai/mcp/. Source: github.com/alainsvrd/borealhost-mcp.
The registry describes it as: Agent-native web hosting — deploy sites, manage DNS, register domains, scale infrastructure
We read its 184 tools on 2026-10-21. Nothing in them matched our tool-poisoning rules. It also sets server instructions, text a client puts in front of the model on connect; those were read too.
A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.
Tools it advertises
set_api_key whoami request_api_key claim_api_key list_plans create_checkout update_checkout complete_checkout get_checkout_status list_checkouts cancel_checkout add_site set_site_type get_wallet get_site_status manage_dns install_app get_app_status list_apps list_snapshots create_snapshot create_b2_snapshot delete_snapshot rollback_snapshot get_snapshot_usage schedule_snapshot cancel_scheduled_snapshot list_backups create_backup browse_backup recover_backup_files get_file_recovery recover_backup_database get_database_recovery restore_backup get_metrics scale decommission update_account delete_account list_subscriptions get_billing_portal rotate_key create_api_key list_api_keys revoke_api_key get_ssh_info add_ssh_key list_files read_file write_file upload_file delete_file create_directory list_plugins list_themes manage_plugin manage_theme wp_check_updates wp_update_all and 124 more
Run this server? Show the check in your README
The badge reflects the latest weekly read: 
[](https://lazaretto.dev/mcp-registry/ai-borealhost-mcp)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.