Frost

MCP / AI Agents

MCP (Model Context Protocol) lets AI agents like Claude Code and Cursor interact with your Frost instance directly — deploy services, check logs, manage domains, all from your editor.

Each Frost instance exposes an MCP endpoint. Authentication uses OAuth 2.1 with browser-based approval, so there are no tokens to copy-paste.


Connect Claude Code

Add to ~/.claude.json (global) or .mcp.json (project-level):

terminal
{
  "mcpServers": {
    "frost": {
      "type": "http",
      "url": "https://your-frost-server.com/api/mcp"
    }
  }
}

On first use, your browser opens for approval. No tokens to copy.

Connect Cursor

Same config format. Add to your Cursor MCP settings:

terminal
{
  "mcpServers": {
    "frost": {
      "type": "http",
      "url": "https://your-frost-server.com/api/mcp"
    }
  }
}

Available Tools

ToolInputDescription
list_projectsList all projects with service count
get_projectprojectIdGet project details with all services
create_projectnameCreate a new empty project
delete_projectprojectIdDelete project and all resources
list_servicesprojectIdList services with latest deployment status
get_serviceserviceIdGet service config + latest deployment
create_serviceprojectId, name, deployType, ...Create a service
update_serviceserviceId, ...Update service settings
delete_serviceserviceIdDelete a service
deploy_serviceserviceIdTrigger deployment
deploy_projectprojectIdDeploy all services in project
get_deploymentdeploymentIdGet deployment status and details
list_deploymentsserviceId, limit?Recent deployments for a service
rollbackdeploymentIdRollback to a previous deployment
list_env_varsserviceIdGet environment variables
set_env_varsserviceId, varsSet/update environment variables
delete_env_varsserviceId, keysDelete environment variables by key
list_domainsserviceIdList domains for a service
add_domainserviceId, domainAdd a domain
remove_domaindomainIdRemove a domain
get_build_logdeploymentIdGet build/deploy log
get_runtime_logsserviceId, tail?, replica?Get recent container logs

Authentication

Frost uses OAuth 2.1 with PKCE for MCP authentication:

  1. Agent connects to /api/mcp and gets a 401
  2. Discovers auth server via /.well-known/oauth-protected-resource
  3. Registers as a client via /api/oauth/register
  4. Opens your browser — you log in and approve access
  5. Agent gets an access token, stores it locally
  6. All subsequent requests include the Bearer token

Access tokens expire (default: 30 days). You can view and revoke active tokens in Settings → MCP Tokens.

For programmatic/CI access, you can also use x-frost-token header with an API key from Settings.


Example Workflows

Once connected, you can interact with Frost naturally:

  • "Deploy my service" → agent calls deploy_service
  • "Show me the build logs for the latest deployment"get_build_log
  • "Add example.com to my api service"add_domain
  • "What's the status of my project?"list_services
  • "Roll back the last deployment"rollback
  • "Set DATABASE_URL for my backend"set_env_vars