All projects
ResearchRoadmap

Actions exposed over MCP

Publish the site's Actions layer as an MCP server, so an external agent can use it — without opening more than it should.

Updated

Roadmap

The Actions layer makes the site agent-operable. The open question is how far to open it to agents we do not control.

The research is about the boundary: what can be exposed safely, what requires an identity, and what has no business in a public tool. The default is that a write Action stays unexposed until the question is settled.

Technologies

  • MCP
  • TypeScript
  • Cloudflare Workers

Milestones

0 / 4
  1. Upcoming —Inventory: which Actions are exposable, which are not
  2. Upcoming —Read-only MCP server
  3. Upcoming —Guardrails: usage ceilings, logging, tool scope
  4. Upcoming —Writes, if and only if the inventory concludes it is safe