dropthehassle-mcpSAFE
Let your AI put your site live on your own domain
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
How do I get my site online with my AI? Add this server and say "publish this site": your AI makes it live on a free HTTPS link, with no account needed.
# Claude Code
claude mcp add dropthehassle -- npx -y dropthehassle-mcp@latest
# Cursor: add to .cursor/mcp.json
{
"mcpServers": {
"dropthehassle": {
"command": "npx",
"args": ["-y", "dropthehassle-mcp@latest"]
}
}
}Or skip the install and use the hosted connector: https://dropthehassle.com/mcp (no token for a first deploy). From a terminal, the same thing is npx -y dropthehassle@latest deploy.
What your AI can do:
- Publish the site on a free HTTPS link (
deploy_site), with no account, and give you a claim link. - Check whether a domain name is free and what it costs (
search_domain), straight from the domain registry. - Hand you a payment link for your own .com: €19 / $19 a year, including VAT in the EU, the same every year. You pay on Stripe's page, and the site then goes live on the domain with HTTPS and no DNS setup.
- Hand you a payment link for a real mailbox on that domain: it sends and receives, read in the dashboard webmail or any mail app over IMAP/SMTP. €5 / $5 a month, including VAT in the EU.
It cannot spend money. You open the link and pay. A DropTheHassle payment link is always on checkout.stripe.com. In the ChatGPT and Claude directory apps, buying happens on dropthehassle.com.
Got a server part too? Keep it on AWS, Google Cloud, DigitalOcean or your own server, and your AI links it to your site in one step.
Package `dropthehassle-mcp` 0.5.1 in this repo (MIT, Node.js 18+). Registry name: io.github.bosmdavid-gif/dropthehassle.
Prices are written as €19 / $19. Contact: [email protected].
Try it without an account
deploy_site works without a token. The site goes live on a free link with HTTPS and the reply contain
0a3017c46daeOBSERVED · 2026-10-10Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add dropthehassle-mcp --env DTH_TOKEN=${DTH_TOKEN} -- npx -y [email protected]Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (3)
server = require('../../cli/bin/dth-mcp.js'); // a checkout of the repoThe same server is published at `https://dropthehassle.com/mcp` (streamable HTTP). A client `mcp.json` can point at that URL instead of running `npx`. Send the token as a Bearer header. Without the he
Gates applied: no_behavioural_pass.
0a3017c46daefull audit observations/trust-audit/mcp-server/bosmdavid-gif__dropthehassle-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | 0a3017c46dae | SAFE | B | 89 | first audit |
Questions
What is the dropthehassle-mcp MCP server?
Let your AI put your site live on your own domain
Is dropthehassle-mcp safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does dropthehassle-mcp need?
It reads DTH_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does dropthehassle-mcp run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as dropthehassle-mcp at 0.5.1.
How current is this page?
The grade is for one exact copy of the source (0a3017c46dae), read on 2026-10-10. The repository is watched and re-audited when it changes.