Servidor MCP que permite a Claude Desktop desplegar sitios web estáticos mediante contenedores Docker
Server has 5 tools with complete schemas and descriptions in Spanish. Naming follows verb_noun pattern (create_html, deploy_server, stop_server, server_status, list_html_files). Descriptions are present (avg ~120 chars) and explain WHAT and WHEN. However, descriptions lack actionable error guidance and recovery hints. Parameters have types and constraints (filename regex, port min/max), but descriptions are minimal for some params. No output schemas documented, LLMs cannot predict response structure. Error handling is absent from visible code; no guidance on retryability or failure modes. Security concern: create_html accepts arbitrary filenames with regex validation only, path traversal risk if regex is bypassable. Overall: solid foundation but missing production-grade error handling and output documentation.
Crea un archivo HTML en el directorio www/. Acepta contenido HTML personalizado. El archivo será servido automáticamente cuando el servidor esté activo.
Despliega un servidor web Nginx en Docker para servir los archivos HTML del directorio www/. El servidor será accesible en http://localhost:PORT (default: 8080)
Lista todos los archivos HTML en el directorio www/. Útil para ver qué archivos están disponibles para servir.
Verifica el estado actual del servidor web Docker. Muestra si está activo, en qué puerto, y estadísticas básicas.
Detiene y elimina el contenedor Docker del servidor web. Los archivos HTML permanecen en el directorio www/.
No output schemas documented. LLMs cannot predict response structure for server_status or list_html_files. Breaks downstream tool chaining and forces agents to guess field names.
Error handling absent from visible code. No guidance on retryability, failure modes, or recovery steps. E.g., if Docker is not installed, what error does deploy_server return? How should the agent respond?
create_html filename validation uses regex only (^[a-zA-Z0-9_-]+\.html$). No server-side path traversal check. Malicious input like '../../../etc/passwd.html' could bypass regex if not validated in implementation.
Parameter descriptions are minimal. 'Nombre del archivo' and 'Contenido HTML completo' lack format guidance. E.g., content param should specify max length, encoding, or forbidden tags.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 54 | 2026-07-28+ | v2 |
No idempotency guarantees documented. If deploy_server is called twice with same port, does it fail, reuse the container, or create a duplicate? Agents need to know if retries are safe.