# profullstack/mcp-server [Health: Active]

**Category:** 🔗 Aggregators  
**Repository:** https://github.com/profullstack/mcp-server  
**GitHub Stars:** 45  
**npm Downloads (last month):** 720  
**Views:** 4  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/profullstack-mcp-server

## Description
A comprehensive MCP server aggregating 20+ tools including SEO optimization, document conversion, domain lookup, email validation, QR generation, weather data, social media posting, security scanning, and more developer utilities.

## Tools
Capabilities this server exposes over MCP:

- **template** — A template for creating new MCP server modules
- **readme-badges** — Generate shields.io badges and update README.md with idempotent markers
- **craigslist** — Search across all Craigslist sites with filtering by categories
- **seo-ranking** — SEO ranking checker using ValueSERP API
- **wcag** — WCAG compliance testing module using Pa11y for MCP server
- **fleet_list_services** — List the Profullstack fleet: every product with its URL, category, and which surfaces it has (API, MCP, llms.txt, installer, PWA). Filter by category or by a surface.
- **fleet_get_service** — Everything about one Profullstack service by domain, URL or name: surfaces, MCP endpoint, npm packages, pwamart install page, auth.
- **fleet_search_services** — Search the Profullstack fleet by what you need, e.g. "podcast directory" or "webhooks".
- **fleet_get_auth** — How to sign in to any Profullstack service: CoinPay OAuth (OIDC) issuer, discovery URL, scopes, PKCE and callback path.
- **scanner** — Web application security scanning module for MCP server
- **social-post** — MCP module for social media posting using @profullstack/social-poster
- **social-login** — MCP module for social media posting using @profullstack/social-poster
- **social-status** — MCP module for social media posting using @profullstack/social-poster
- **social-platforms** — MCP module for social media posting using @profullstack/social-poster
- **social-supported-platforms** — MCP module for social media posting using @profullstack/social-poster
- **social-sample-content** — MCP module for social media posting using @profullstack/social-poster
- **social-validate-content** — MCP module for social media posting using @profullstack/social-poster
- **social-posting-stats** — MCP module for social media posting using @profullstack/social-poster
- **social-module-info** — MCP module for social media posting using @profullstack/social-poster
- **webhook_verify** — Timing-safe, replay-resistant webhook signature verification for Stripe, GitHub, Slack, Shopify, Twilio and generic HMAC
- **fake_json** — MCP module that generates fake JSON responses for any endpoint using OpenAI
- **tides-currents** — Tides and Currents module using NOAA CO-OPS API for marine navigation data
- **crypto-badge** — Generate crypto payment badges using PayBadge API with support for Bitcoin, Ethereum, Solana, USDC and custom configurations
- **link-shortener** — Link Shortener module using hynt.us API for creating short URLs
- **datamart_search** — Search Datamart near a place: public library branches, public schools and colleges within a radius, plus government services. Give one origin (zip, lat+lng, address, or city+state); default is ZIP 95032 within 20 miles.
- **resource_get** — Get one Datamart resource by id: a provider (e.g. "us.loc") or a directory record (library branch, school, college).
- **resource_capabilities** — What Datamart can and cannot do for a provider, per operation: directory_only, public_read, … or unsupported with the reason.
- **provider_status** — Configuration and health of Datamart providers (configured or not, last success/error), separate from capability.
- **gov_services_search** — Find government services Datamart knows (IRS, Data.gov, California BizFile, FTB, DMV, EDD) with official links and what Datamart can do for each.
- **datagov_search** — Search the Data.gov catalog (dataset metadata from federal, state, local and tribal publishers). Cursor-paginated.
- **datagov_get_record** — Get the Data.gov catalog (harvest) record for one dataset, by the harvest_record_id from datagov_search.
- **datagov_list_organizations** — List Data.gov publishing organizations with their slugs and dataset counts.
- **libraries_search** — Public library branches within a radius (IMLS FY2024 survey). Bookmobiles excluded unless type includes "bookmobile". Distance is straight-line; card eligibility is reported separately.
- **library_get** — One public library outlet by Datamart id (e.g. "us.ca.lib.ca0164-002").
- **loc_search** — Search Library of Congress digital collections on loc.gov. Optionally limit to a format (photos, maps, books…) or a collection slug.
- **loc_list_collections** — List or search Library of Congress digital collections.
- **loc_get_item** — Metadata for one Library of Congress item, including rights notes and a link to the original record.
- **loc_get_resource_links** — Files and resource links (images, PDFs, full text) for one Library of Congress item, with its rights notes.
- **education_search** — Public schools (pre-K-12 sites, from NCES) and public colleges/universities (IPEDS) within a radius. Proximity is not enrollment eligibility.
- **education_get** — One school site or college campus by Datamart id.
- **contracts_sources** — Official government contract-opportunity sources for federal, California, Santa Clara County and City of Santa Clara buyers. Datamart does not index opportunities yet (Phase B); this lists where to look and what is planned.
- **qr-generator** — QR Code Generator module for generating QR codes from text input
- **lighthouse** — Lighthouse performance audit MCP module for website speed assessments
- **weather** — Weather data and imagery module using the National Weather Service API
- **backlinks** — Automated backlink discovery and submission tool for SEO optimization
- **email_checker** — An MCP server module for checking email validity using the un.limited.mx API
- **news-aggregator** — A news aggregator module for MCP server that parses RSS feeds and scrapes websites
- **check_domain_availability** — Domain availability checker and brainstorming tool using tldx CLI
- **generate_domain_suggestions** — Domain availability checker and brainstorming tool using tldx CLI
- **get_tld_presets** — Domain availability checker and brainstorming tool using tldx CLI
- **bulk_domain_check** — Domain availability checker and brainstorming tool using tldx CLI
- **linkchecker** — An MCP server module for checking links using linkinator
- **convert2doc** — Document conversion module using convert2doc.com API for converting between various document formats

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "mcp-server": {
    "command": "npx",
    "args": ["-y","@profullstack/mcp-server"],
    "env": {
      "OPENAI_API_KEY": "",
      "STABILITY_API_KEY": "",
      "ANTHROPIC_API_KEY": "",
      "SCANNER_API_TOKEN": "",
      "README_BADGES_API_TOKEN": "",
      "README_BADGES_ROOT": "",
      "CORS_ORIGINS": "",
      "CSRF_PROTECTION_ENABLED": ""
    }
  }
}
```

**Requires environment variables:** `OPENAI_API_KEY`, `STABILITY_API_KEY`, `ANTHROPIC_API_KEY`, `SCANNER_API_TOKEN`, `README_BADGES_API_TOKEN`, `README_BADGES_ROOT`, `CORS_ORIGINS`, `CSRF_PROTECTION_ENABLED` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What profullstack/mcp-server does

profullstack/mcp-server is a modular MCP application that exposes a broad collection of developer and data-access modules through one server. Its model layer supports text generation, speech-to-text, image generation, and streaming inference through OpenAI, Anthropic, Stability AI, and Hugging Face integrations.

The utility modules cover several distinct workflows. SEO ranking uses ValueSERP, WCAG testing uses Pa11y, tides and currents data comes from NOAA CO-OPS, and Data.gov search provides cursor-paginated catalog results. Other modules search Craigslist, shorten links through hynt.us, create crypto payment badges, generate fake JSON with OpenAI, scan web applications, and verify webhook signatures for Stripe, GitHub, Slack, Shopify, Twilio, or generic HMAC payloads.

The fleet tools are specific to Profullstack services: they list products and surfaces, retrieve service details, search by capability, and explain CoinPay OAuth authentication. Social modules provide posting, login, status, platform information, content validation, sample content, statistics, and module metadata through `@profullstack/social-poster`.

## How it works

The project uses a dynamically loaded module architecture. Modules can have their own packages and metadata, while the core server provides routing, model management, logging, status endpoints, health checks, and metrics. Model workflows select or activate a provider model, then send inference requests to the active or explicitly named model.

The application uses ES modules throughout. It starts an HTTP service on port 3000 by default and includes Docker and Docker Compose support. A hosted deployment is available through Fronteir AI.

## Setup and configuration

Run the application with Node.js 18 or newer and pnpm 10 or newer:

```bash
pnpm install
pnpm start
```

Use `pnpm dev` for development with automatic reloads. Configuration is loaded from `.env`; the project includes a sample environment file. Add provider keys for the model features you intend to use, such as `OPENAI_API_KEY`, `STABILITY_API_KEY`, and `ANTHROPIC_API_KEY`. Hugging Face model support is also listed among the integrations.

For containerized deployments, build the image and publish port 3000:

```bash
docker build -t mcp-server .
docker run -p 3000:3000 mcp-server
```

## Tools and capabilities

- Generate and update README shields.io badges using protected, contained paths.
- Search Craigslist, check SEO rankings, run WCAG tests, and scan web applications.
- Post to supported social platforms and inspect posting status, capabilities, and statistics.
- Search Datamart, retrieve resources, inspect provider capabilities, and find government services.
- Search Data.gov datasets and query NOAA marine navigation data.
- Verify signed webhooks with timing-safe, replay-resistant checks.
- Generate crypto badges, shorten links, and create OpenAI-backed fake JSON responses.
- Manage models and run text, image, and speech-to-text inference.

## Limitations and notes

There is no global authentication layer. Any client that can reach the server port can call module routes unless a module-specific control applies, so deployments beyond localhost should sit behind an authenticating reverse proxy.

Scanner and README badge routes accept bearer or API-key tokens when their corresponding token variables are configured. If those variables are unset, the routes remain open and the server logs a warning. The server also restricts selected outbound requests to public addresses and applies CSRF checks to state-changing requests with foreign `Origin` headers. Browser origins can be configured with `CORS_ORIGINS`; clients that omit `Origin`, including command-line and server-to-server clients, are unaffected.

_Full upstream README: https://allmcps.com/mcp/profullstack-mcp-server/readme_