Mcp

DataEcho platform overview: what it can host, auth state of this connection, docs links. Call this first if unsure.

Start sign-in: email a one-time code to the user. Follow with verify_login_code.

Complete sign-in with the emailed code. Returns the apiKey ONCE — configure it as the `Authorization: Bearer <key>` header of this MCP connection (and/or save to ~/.artifact/credentials for the CLI scripts). Never echo it into chat.

Deploy files to a live URL. No slug → create a NEW site (works without auth; anonymous sites expire in 24h — always show the user the claimUrl). With slug → UPDATE that site (complete snapshot: send ALL files). A Dockerfile in the files makes it a server-side app (auth required; listen on process.en

Make a previously-anonymous site permanent under the authenticated account (requires auth + the claimToken from publish_site).

List all sites owned by the authenticated account.

Full-text search across the authenticated account's sites (names, metadata, and text content).

Full details + current file manifest of an owned site.

Patch site settings without redeploying: viewer title/description, SPA mode, TTL, password (string sets, null removes).

Permanently delete an owned site. Irreversible — confirm with the user first.

Build/run status of a container app deployed via publish_site with a Dockerfile. Poll until status is `live` or `failed`.

List the authenticated account's private cloud drives.

Create a new private drive.

List files in a drive (by drive name or drv_… id), optionally under a path prefix.

Read a file from a drive. Text comes back as utf-8 `content`; binary as `contentBase64`. Files over 1 MB are refused (use the skill scripts).

Write/overwrite one file in a drive (ETag-safe: pass ifMatch to assert the version you read, otherwise the current version is used automatically).

Delete one file from a drive.

Move/rename a file inside a drive.

Mint a scoped drive access token for another agent (perms read|write, optional path prefix + TTL like `7d`). The secret is returned ONCE.

List active share tokens of a drive (secrets are never shown again).

Revoke a drive share token.

Version timeline of a drive (every write is a restorable version).

Restore a drive to a prior version (commits a new version; nothing is lost).

List account variable NAMES (values are write-only — they are injected into proxy calls and container apps, never read back).

Create/update a write-only account secret (uppercase name). Injected as env vars into container apps and as ${VAR} into proxy calls. Optionally pin which upstream hosts may receive it.

Delete an account variable.