One endpoint. Connect the chatbot you already use — Claude, ChatGPT, Cursor, Codex — and it can survey any repository, repair what the survey finds, and harvest the whole tree into a sealed capability ledger. This server does the deterministic work and hands back the method, so the only model in the loop is the one you are already talking to.
Connect in three steps
1 · Add the endpoint
https://shpbl.com/mcp
This door speaks OAuth. Your client registers itself, opens a sign-in page, and you approve it once — no key is ever typed into a client or a prompt.
2 · Sign in and bind your key once
Signing in proves who you are; it does not prove what you bought. Bind your subscription key to your account at your account and every agent you connect afterwards carries your tier automatically. Stage one needs none of this — the free tools answer any caller.
3 · Client cannot sign in? Use the key-only door
https://shpbl.com/api/public/mcp
Authentication None, transport Streamable HTTP, plus one request header: Authorization: Bearer shpbl_mcp_YOUR_KEY. Same twelve tools. If your client cannot send headers either, pass the key as the tool's optional key argument.
Is it working?
Paste your key once. This page checks it exactly as the tools do and answers in one line: tier, status, calls used this month, and whether pull requests are switched on.
The three stages
Stage One
Evaluate
Free — no key
evaluate_repo
The repository as it actually is: file and byte counts, language spread, the spine files to read first, and the risk signals the tree gives up on its own. Then the evaluation protocol your agent carries out.
Stage Two
Fix
$29/mo · Practitioner
fix_repo
A repair order for the files you name, ranked by what fails silently first, with unified diffs to apply, the guard that should catch each fault next time, and what was left alone and why. Your agent writes the repairs; you approve every change.
Stage Three
Harvest
$79/mo · Governor
harvest_repo
The whole tree in stable batches, with the harvest protocol, the eight component classes, the six verification axes and a citable run seal. Your agent folds a capability ledger you can inherit from.
Stage All of it
Run the gauntlet
$79/mo · Governor
run_gauntlet
One tool that conducts the whole method the way the downloadable kit does: survey, a library comparison before the work starts, the evaluation, the repair order, the full batched harvest, a second library comparison against what you harvested, the branded HTML report, then the pull request and the contribution path. One call to plan it, one call per step to walk it.
Replace OWNER/REPO with the repository, or ask your agent to call list_repos and pick from the list. Paid stages page their material: tell your agent to walk every part before it concludes.
Or let your agent read the manual
Every fact on this page is published in one machine-readable file. Paste this to your assistant and it connects itself:
Read https://shpbl.com/llms.txt and connect to the SHPBL MCP server
described in it, then explain in plain language what it can do for me.
Full client reference — Claude, ChatGPT, Cursor, Codex
Claude.ai (web or mobile)
Settings → Connectors → Add custom connector
Sign-in door (recommended)
URL https://shpbl.com/mcp
Auth OAuth — Claude registers itself and asks you to sign in
Key-only door
URL https://shpbl.com/api/public/mcp
Auth None
Transport Streamable HTTP (under Advanced)
Under “Request headers” press Add header:
Header name Authorization
Value Bearer shpbl_mcp_YOUR_KEY
Claude Desktop / Claude Code
Settings → Connectors, or claude_desktop_config.json
Add a remote server of transport type “streamable HTTP”
url = "https://shpbl.com/mcp" # OAuth
transport = "http"
# or the key-only door:
# url = "https://shpbl.com/api/public/mcp"
# headers = { Authorization = "Bearer shpbl_mcp_YOUR_KEY" }
The exact prompts to say, stage by stage
Evaluate · Free — no key
“Use the SHPBL MCP server to evaluate github.com/OWNER/REPO, then follow the protocol it returns.”
Fix · $29/mo · Practitioner
“Use the SHPBL MCP server's fix_repo to repair the findings in github.com/OWNER/REPO. My key is set as a request header, so call it without a key argument. Walk every part, then give me the repair order, the diffs and the guards.”
Harvest · $79/mo · Governor
“Use the SHPBL MCP server's harvest_repo on github.com/OWNER/REPO. My key is set as a request header, so call it without a key argument. Walk every batch in order, carry the ledger forward, then restate the run seal.”
Run the gauntlet · $79/mo · Governor
“Use the SHPBL MCP server's run_gauntlet on github.com/OWNER/REPO. My key is set as a request header, so call it without a key argument. Start with no step to get the run card, walk every step in order, then close the run and give me the HTML report.”
Tiers and what each one opens
Evaluate · Evaluate
Free
No key required
Point your agent at any public repository and get the survey, the signals, and the evaluation protocol. No key, no card.
·Deliberately: `evaluate_repo` also reads a PRIVATE repository, free and unmetered, when a `github_token` is passed or the SHPBL GitHub App is connected to your key — the first move has to reach your own code. It is paced at 60 calls a minute per key rather than charged.
·`list_repos` — real repository names, and whether a pull request can be opened
·Seven volumes: titles, messages, epigraphs, seals, read and download links
·Editions, licences and pricing
·Public downloads with byte sizes
·Published evaluation case studies
·`selfcheck_mcp` — the server audited against its own six axes, live, pass/fail
Practitioner · Fix
$29/mo
5,000 calls / month
Repair what the evaluation found. The verbatim source of the files you name, with the remediation protocol your model works to.
·Everything in Evaluate
·`fix_repo` — paginated verbatim source plus the remediation protocol and its discipline
·`library_document` — any volume in full, the catalog outline, the report template, the standing order
·`library_search` — search the engineered component ledger by capability, name, ID, class or API surface
·`write_to_repo` — land finished work as a branch and a pull request, never the default branch
·5,000 tool calls a month
·One key per subscription, rotatable on request
Governor · Harvest
$79/mo
50,000 calls / month
Harvest the whole repository into a sealed capability ledger — every batch, every class, every verification axis, cited.
·Everything in Practitioner
·`harvest_repo` — the entire tree in stable batches, with the harvest protocol and a citable run seal
·Component classes and the six verification axes
·`library_search` at Governor reach — full catalog rows by ID, plus the 6,479-row discovery vault
·`run_gauntlet` — one runner for the whole method: survey, library comparison, audit, repair, harvest, HTML report, write-back
·`submit_capability` — offer a harvested capability to the curation queue for human review
·50,000 tool calls a month
·Priority handling on key and licence questions
Write back to a repository
On a paid key, install the official SHPBL GitHub App on the repositories you choose and the tools can open pull requests instead of handing you text to copy. Nothing is ever pushed to your default branch.
Have a Practitioner or Governor key in the field above.
Click Connect on GitHub and pick the account and the repositories.
Authorize. You return here with “Connected.”
Ask your agent to use fix_repo or write_to_repo; it opens a pull request for you to merge.
Paste your key in the field above first.
What this grants, and what it does not
We never ask for a personal access token and store no credential of yours.
Access is scoped to the repositories you tick, with permission to write files and open pull requests. Nothing more.
Each run mints a one-hour token and drops it. You revoke the whole thing in your GitHub settings in one click.
Each key is separate: another subscriber installs the app on their own account with their own key, and never reaches your repositories.
Installed the app straight from GitHub? GitHub does not send us your key in that case — press Already installed — bind it once.
Prefer to install nothing? Your agent can pass a one-off github_token on the call instead — used once, never stored — or simply hand you the diffs.