2ools

app.2oolsv0.3.1Updated Sep 30, 2026

Build, version, review, and export websites, web apps, and games from a conversation.

VerifiedStreamable HTTPWeb executableOther

Installation

In SourceWeft

  1. Open 2ools in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "mcp": {
      "type": "http",
      "url": "https://2ools.app/mcp"
    }
  }
}

README

2ools MCP Server

Remote MCP server for 2ools — build, version, review and export websites, web apps and games from inside the AI chat you already use.

[MCP Registry] [Transport] [Tools]

https://2ools.app/mcp

Your assistant writes the site. 2ools is where it lives: every result becomes a restorable version, previews are shareable links that need no account to open, and the source exports as plain files with no proprietary runtime.

One tool is free and needs no account at all — create_public_preview turns a standalone HTML document your model just wrote into a real, viewable URL. The rest connect over OAuth 2.1 with PKCE and least-privilege scopes.

Quick start

Paste this into the AI client you want to connect:

Connect this client to 2ools (github.com/2ools/mcp-server, MCP endpoint https://2ools.app/mcp). Retrieve https://2ools.app/start non-visibly with an HTTP or web-fetch tool; never navigate the in-app browser to that instructions page. Use this client's in-app browser for every 2ools sign-in and authorization page; never use Chrome, another external browser, or the system browser when this client has an in-app browser or preview pane. The exact OAuth approval URL must be the first 2ools page you visibly open. Before I must act, your only user-facing setup message may be Connecting 2ools in this client's browser…. Do not output insight blocks or narrate setup mechanics. Ask me exactly once to sign in and click Authorize. Do not end your turn while authorization is pending; after it succeeds, keep the 2ools app visibly open in that pane. Fetch https://2ools.app/start and follow its "For your AI" steps exactly.

The live start page is the single current connection ritual for every client. It detects the current client path, keeps OAuth alive, and leaves only sign-in and the Authorize click to the person. Manual MCP configuration is a fallback only for clients that cannot manage their own remote-MCP setup.

After authorization, the initiating context selects the app destination: an exact project's Project OS when its ID is known, the new-project or existing-project workspace flow when that intent is known, and the authenticated MCP workspace for a generic install. The public homepage is never the fallback.

Registry introspection proxy

Registries that require a local stdio process can run the included credential-free proxy. It forwards MCP JSON-RPC traffic to the same verified remote endpoint; it does not mock or reimplement any 2ools tools. It translates the stdio handshake into the remote endpoint's current per-request MCP envelope and returns the live schemas from 2ools.

bash
npm cinpm start

The included Dockerfile runs the same dependency-free proxy for reproducible registry introspection. It intentionally does not perform an interactive OAuth flow. Clients using authenticated workspace tools should connect directly to https://2ools.app/mcp so OAuth remains end-to-end with 2ools.

2ools Skill

For assistants that support repository skills, add or copy the 2ools Skill. It keeps the temporary-preview and OAuth workspace boundaries explicit. Client support for remote MCP and Skill folders varies; the live start page routes each client to its supported flow.

Try it with no account

Ask your assistant:

Write this as one standalone HTML document, create a free 2ools preview, and show me the link.

You get back a real URL that anyone can open. It expires after 24 hours.

What you can do with it

Ask your assistant…It uses
"Open this generated site in 2ools and give me a client-safe preview link"create_public_preview
"Save this conversation as a durable 2ools project"build_from_conversation
"Make the hours bigger and show me the new version"refine_project
"Compare the last two versions"compare_versions
"What changed on this project since Tuesday?"get_project_activity
"Export the source as a zip"prepare_version_export

Tools

43 tools, each with explicit readOnlyHint and destructiveHint annotations so a client can reason about blast radius before calling anything.

Free — no account required

ToolEffectWhat it does
create_public_previewwriteTurn a complete standalone HTML document already created in this chat into a temporary, read-only 2ools preview.

Build and refine

ToolEffectWhat it does
build_from_conversationwriteCreate a new 2ools project from a structured conversation brief and queue one durable build.
refine_projectwriteCreate one protected child version from a saved base version and concrete review feedback.
get_buildread-onlyGet one build's current status, progress, errors, completed version IDs, and protected preview URLs.
cancel_builddestructiveCancel a queued or running non-Agent 2ools build.
compare_versionsread-onlyCompare two saved versions in one project without returning source.
list_build_systemsread-onlyList the Curators, Rulebooks, and Skills this paid account may explicitly apply.

Read a project

ToolEffectWhat it does
list_projectsread-onlyList recent 2ools projects the authenticated account can access, including owned and shared projects.
get_projectread-onlyGet a 2ools project's brief, selected pages, active version, and compact version history.
get_project_contextread-onlyRead one source-free operating packet before acting: the active version, exact frozen Curator snapshot, revision-…
render_project_previewread-onlyRender an interactive, read-only card for one saved 2ools version.
get_project_activityread-onlyRead the attributable project timeline across human work, external MCP agents, builds, versions, feedback, and…
wait_for_project_activityread-onlyWait up to 20 seconds for attributable project events newer than a head_cursor or prior next_cursor.

Review and approval

ToolEffectWhat it does
list_approval_requestsread-onlyList exact saved versions waiting for a separately delegated reviewer.
approve_versiondestructiveUse separately delegated review authority to approve one saved version and make it the project's active version.
reject_versiondestructiveUse separately delegated review authority to reject one saved version.

Feedback and shared notes

ToolEffectWhat it does
list_project_feedbackread-onlyRead page-anchored review feedback for versions in a project, with explicit human or external-agent attribution.
add_project_feedbackwriteAdd an attributable review comment to a saved project version.
resolve_project_feedbackdestructiveOwner-only review decision that resolves or reopens one saved feedback item.
list_project_pinsread-onlyRead shared workspace notes and http(s) links, with explicit attribution.
add_project_pinwriteAdd an attributable note or safe http(s) link to the shared project workspace.
remove_project_pindestructiveRemove one shared workspace pin.

Export and sharing

ToolEffectWhat it does
prepare_version_exportread-onlyCreate a five-minute download URL for an exact saved version.
get_version_share_linkread-onlyRead the durable sharing state and current URL for one exact saved version.
create_version_share_linkwriteCreate or recover a durable public or code-protected link for one exact saved version.
revoke_version_share_linkdestructiveDisable every existing public or code-protected URL for one exact saved version.

Artifacts

ToolEffectWhat it does
list_artifactsread-onlyList durable project artifacts and each latest immutable version without returning stored bytes.
get_artifactread-onlyRead one artifact's immutable version history, provenance, attribution, digests, and review states without…
prepare_artifact_uploadwriteCreate a five-minute PUT URL for exact bytes.
prepare_artifact_downloadread-onlyCreate a five-minute download URL for one immutable artifact version.
list_artifact_approval_requestsread-onlyList exact artifact versions awaiting or carrying a human review decision.
approve_artifact_versionwriteApprove one pending immutable artifact version and make it current.
reject_artifact_versionwriteReject one pending immutable artifact version with useful feedback.

Agents

ToolEffectWhat it does
list_project_agentsread-onlyList the authorizing account's built-in Agents assigned to one readable project.
get_agentread-onlyRead one Agent's saved Limits, trigger, immutable revision summaries, and redacted append-only run traces.
run_project_agentwriteQueue real execution for a project-linked Agent the person already test-ran and armed.
cancel_agent_rundestructiveStop one queued or running Agent execution and close its durable run history.

Work assignments

ToolEffectWhat it does
list_work_assignmentsread-onlyList durable project work contracts, bounded attempts, leases, budgets, and result references.
create_work_assignmentwriteCreate a durable assignment with acceptance criteria and hard step, time, and spend ceilings.
claim_work_assignmentwriteAtomically claim one open assignment and receive a five-minute renewable lease plus an immutable budget snapshot.
heartbeat_work_sessionwriteRenew the authenticated worker's active lease without widening its immutable step, time, or spend ceilings.
submit_work_sessionwriteEnd the authenticated worker's lease and submit typed result references for a separate review decision.
decide_work_assignmentwriteComplete submitted work or reopen it with useful feedback.

Authentication

AccessMethodScopes
create_public_previewnone — genuinely authless—
Everything elseOAuth 2.1 authorization code + PKCE (S256)least-privilege, consented per connection

The authorization server publishes RFC 8414 and RFC 9728 discovery documents at /.well-known/oauth-authorization-server and /.well-known/oauth-protected-resource, supports RFC 7591 dynamic client registration, rotates refresh tokens with family revocation on replay, and stores only token digests.

Review authority is deliberately separate from build authority. projects:build lets an agent produce candidate versions; approve_version and reject_version require projects:approve, which is excluded from default grants. An agent that can build cannot sign off on its own work unless a human explicitly delegates that.

Design notes

Source never travels through the model transcript. Exports and artifact downloads are five-minute signed URLs bound to the action, the account and the exact version. The MCP response carries metadata and links, not bytes — so a large site does not consume the context window, and generated source is not replayed into a provider log.

Shared previews run in an opaque-origin sandbox. A shared page is served under a CSP sandbox with connect-src 'none', so a site built by a model cannot read the viewer's cookies, storage, or reach the network.

External agent output enters review, not production. An artifact uploaded by an outside agent is stored immutably and marked pending; it cannot become the current version until a human with review authority approves that exact digest.

Interactive previews use MCP Apps. render_project_preview returns a real interactive card via ui://2ools/project-preview-v1.html rather than a wall of text.

Links

Registry

Published to the official Model Context Protocol registry under the domain-verified namespace app.2ools/mcp.

bash
curl "https://registry.modelcontextprotocol.io/v0/servers?search=2ools"

Status

The endpoint is live in production. Health, including the exact deployed release:

bash
curl https://2ools.app/api/health

License

MIT — see LICENSE. This repository holds the server's public manifest and documentation; the 2ools application itself is a hosted product.

Source: README.md at commit 477a235

Tools

0
Tool metadata has not been indexed yet.

Version history

1
  1. v0.3.1LatestSep 16, 2026