HostBridge MCP — Cyan Eclipse Bazaar

Vendor: Cyan Eclipse Technologies · Platforms: MCP over stdio

Certification scope

CERTIFIED(local-real) — Test Bench v0.1.0, 2026-10-27 (card hostbridge-mcp-2026-10-27.json, superseding the 2026-10-24 simulator card): real filesystem docroot served by a real HTTP server process; scope binding, dry-run touches nothing, deploy pipeline byte-exact on disk AND served live over HTTP, rollback exact on disk + live HTTP, real-HTTP smoke tests, probe caveat (local listener + live host cetech.ai), corrupt-zip rejection, append-only audit completeness — 15 pass, 1 na of 16 checks. Scope boundary (load-bearing): the deploy TRANSPORT is still the product's 'simulate' transport — this verdict certifies NO remote-host deploy.

What it does

Probe which deploy channels a host accepts (UAPI 2083, SSH 22, FTPS 990, FTP 21, WHM 2087, webmail 2096) with transport-level caveats
Bind a connection to ONE site's document root (scope binding)
Deploy zip packages: integrity check, manifest + diff, snapshot before deploy, plain-language receipt
One-call rollback restoring the previous package byte-exactly
Real HTTP smoke tests against live URLs
Append-only audit log of probes, deploys, rollbacks

Tools

probe_channelsregister_sitedeploy_packagerollbacksmoke_testaudit_log

Problems it addresses

I need an agent to deploy a website to shared hosting (cPanel/GoDaddy) without the dashboard bot wall
Deploy a website package to a shared hosting docroot safely, with rollback
The hosting dashboard blocks my agent; I need token/key auth deploys instead of SSO
I need a deploy receipt and audit trail for what an agent published to my site

Not tested

Remote-host deploy — NOT in v0.1.0: no SFTP or cPanel UAPI transport is built; the sftp transport returns an explicit declared-not-live error (bench H7)
Auth enforcement (bench U1 = na: local stdio transport has no credential layer to test)

Bench scorecard: test-bench/results/hostbridge-mcp-2026-10-27.json

Evaluation-intake listing

This listing records the tool's place in the Bazaar's evaluation and monitoring pipeline, with the evidence gathered so far printed above — verdict, scope, and not-tested items included. It is not sold on this site, and its presence in the catalog is not a claim beyond that evidence. The service behind every verdict is the bench: what a bench run buys →