Security eyes on an OAuth flow
Looking for someone who enjoys finding the part everyone else assumed was fine.
FOUNDING BUILDOPEN SOURCE
Q Site MCP
A confined MCP gateway for building and maintaining one website without handing an AI a general-purpose shell.
WHAT IT IS
Q Site MCP lets an AI client inspect, stage, preview and safely promote website changes inside one confined domain root. It deliberately avoids arbitrary shell commands, arbitrary SQL and unrestricted remote fetches.
PROOF
- Running in production on qmanufacture.com
- Running the Rebellion website itself
- Preview → promote → rollback deployment model
CAPABILITIES / THEMES
MCPweb infrastructuresecurityself-hosted
THIS BUILD NEEDS
Move it forward.
Offer help →
Break Q Site on weird shared hosting
Real hosting environments wanted. Edge cases and boring infrastructure are especially useful.