Your servers,
from inside your AI assistant.
StackPilot App speaks the Model Context Protocol. Connect Claude, Cursor, Copilot, Gemini or any MCP client and let it read your fleet, deploy your sites and provision new servers through 84 scoped, audited tools.
Deploy the latest main to staging, then tell me if queue workers came back up.
deploy_site deploy site: shop-staging
get_deployment_status read
get_service_status read service: supervisor
Release 2026.08.18-3 is live on staging. Two queue workers restarted cleanly, the third took 8 seconds. Nothing in the error log since the swap.
Illustration of a session. Every call is a real tool from the contract below.
Handing an agent your servers,
without handing over the keys.
An AI assistant with shell access is a bad idea. StackPilot App does not give one a shell. It exposes a fixed set of typed tools, each behind a scope, with the dangerous ones gated twice.
Scoped, not root
Every tool declares a scope. A token issued for reading cannot deploy, and a token that can deploy still cannot delete a server or spend money on a new one.
Two-phase confirmation
The 14 tools that can destroy data or spend money return a preview and a confirmation token instead of acting. The agent has to come back with that token, so a stray sentence cannot drop a database.
Dry runs everywhere
46 of the tools accept dry_run, which returns the plan and changes nothing. Ask your assistant what it is about to do, and read the answer before you let it run.
Audited by default
Every call an agent makes is recorded locally with its arguments and outcome, readable from the app or through the list_audit tool. Nothing an assistant does is invisible to you.
Everything the app does,
an agent can do too.
Servers
Prepare a box, install runtimes and services, watch metrics, run a command.
list_serversprepare_serverinstall_runtimeget_metricsrun_commandcontrol_service
Sites and deploys
Deploy, roll back, take a site offline, edit env and crontabs.
deploy_siterollback_site_releaselist_site_releasessave_site_envtake_site_offlinetail_logs
Databases
Create databases and users, grant access, rotate passwords, run a query.
create_databasedb_querygrant_database_accesschange_db_passwordlist_db_usersdrop_database
Cloud and backups
Provision a new VPS on a connected provider, trigger and restore backups.
create_cloud_serverlist_cloud_sizestrigger_backuprestore_backuplist_backup_runsget_restore_status
Web server and SSL
Read and write nginx config, reload it, issue and install certificates.
get_nginx_configsave_nginx_configreload_nginxenable_sslinstall_custom_ssldisable_ssl
Operations and audit
Follow long-running work, cancel it, and read back what an agent did.
get_operationlist_operationscancel_operationget_approval_statuslist_auditget_agent_status
Local by default.
Remote when you need it.
Local (stdio)
Your MCP client launches StackPilot App directly on your machine. Nothing listens on a port, nothing leaves your laptop, and the connection dies with the client.
{
"mcpServers": {
"stackpilot": {
"command": "/Applications/StackPilotApp.app/Contents/MacOS/stackpilotapp",
"args": ["--mcp-stdio"]
}
}
}Remote (HTTPS)
A token-secured endpoint for clients that cannot spawn a local process. Tokens are issued per client, carry their own scopes, and can be revoked from the app the moment you want them gone.
- Per-token scopes and per-token server access
- Revoke any token without touching the others
- Cloud provisioning and backup restores are remote-only
Try it on a real server for 14 days.
AI Access is an optional add-on, included free on the Ultimate plan. Every new account starts with a 14-day Pro trial, so you can wire up your assistant before you decide. Trial terms.
