Skip to main content
slipway ships a first-party Model Context Protocol server, so a coding agent can drive your projects directly. An agent can deploy a project, get a live URL, read logs, run commands to verify its work, check how much capacity is left, and tear it down. On the hosted platform the endpoint is https://mcp.slipway.sh/mcp. Settings → MCP in the console shows the exact endpoint for your installation.

Create a token

In the console, open Settings → MCP, which requires admin, and choose New token. Give it a name, a role and optionally an expiry. The token is shown once, immediately after you create it. If you lose it, revoke it and make a new one. Tokens are scoped to a single organization and can be revoked at any time from the same page.

Connect Claude Code

Connect Cursor

Add the server to .cursor/mcp.json in the project, or to ~/.cursor/mcp.json globally:

Connect Claude Desktop

Add an HTTP MCP server with the same URL and an Authorization: Bearer YOUR_TOKEN header. The same shape works for any MCP client that supports HTTP servers with custom headers.

Roles

A token’s role caps what its agent can do. Each tool requires at least the role shown. Give an agent the lowest role that lets it do its job. An agent that only inspects builds needs viewer. For a coding agent, developer is the usual choice and the default.

Renamed and merged tools

The tool surface was reorganized around workspace / project / service. If you have prompts, scripts or saved instructions that name the old tools, this is the mapping:

The tools

Every tool, with the minimum role each requires. The full reference, grouped and with each tool’s arguments, is at slipway.sh/agents/tools.

Discovery

Create

Compose

Deploy and watch

Manage

Configuration

Platform

Logs and exec

Saving a variable or secret does not restart anything: deploy afterwards for the change to reach the running pods. Both tools say so in their response. get_deployment_logs is clamped by your plan’s history window, the same as the console. See Plans. For a worked end-to-end session, see How to let a coding agent deploy and test its own code.

Security

  • Tokens are stored hashed. The plaintext exists only at create time.
  • Every tool is scoped to the token’s organization, so an agent cannot reach another organization’s data.
  • exec_in_service runs arbitrary commands in your pods, and set_secret writes credentials. Keep tokens to the minimum role, use short expiries on shared machines, and revoke anything you are unsure about.