Kuailian MCP — Watchlist

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Follow-up value is specific to Kuailian stdio publication to a keyed hosted API: Do project keys and public-URL publication keep private draft files outside the upload boundary?

Reviewed Oct 5, 2026 · Documentation review; complete setup workflow not independently tested

Best fit

Publish generated webpages to live shareable Chinese-language hosting URLs.

What we know

Publish AI-generated web pages to a live, shareable URL from Cursor or Claude Code. This profile is based on verified official documentation where listed; unresolved operational details are explicitly marked.

Maintenance / activity evidence

@kuailian/mcp-server 0.1.5 published 2026-08-04T06:17:43.572Z

Tracking evidence observed Oct 5, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: medium.

Verification gaps / watch-outs

Installation and comprehensive security have not been independently audited.
API-key-scoped public web publishing, bounded by agent-created pages Writes: Publish live webpages; Modify agent-created published pages.
Kuailian account API key generated in MCP settings; exact environment variable binding needs package confirmation
Sensitive access: Published HTML, API key, Account identity

Potential high-impact side effects: Publish live webpages, Modify agent-created published pages.

Full authority, access and evidence limits are available in Review context and Access & risk.

All limitations / Review context

Do project keys and public-URL publication keep private draft files outside the upload boundary?

The bounded review of the publisher's documented Kuailian stdio publication to a keyed hosted API and release notices identified no disclosed material condition preventing an accurately scoped public tracking entry. The resource's operational permissions remain uncertainty; this assessment does not certify installation safety.

Potential high-impact side effects: Publish live webpages, Modify agent-created published pages.
API-key-scoped public web publishing, bounded by agent-created pages
Kuailian account API key generated in MCP settings; exact environment variable binding needs package confirmation
Uploaded page HTML is hosted by Kuailian and publicly reachable by URL.
Reviewed write actions: Publish live webpages; Modify agent-created published pages
Sensitive access: Published HTML, API key, Account identity
Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
Runtime behavior, dependencies and undisclosed vulnerabilities were not independently audited.
Documented tool authority and any remote data handling must be checked before installation or use.
Tool inventory, client matrix and permissions completeness were not requirements for this Radar tracking review.
repositoryIdentity: no confirmed package-to-repository binding
cost: plans, pay-per-call charges, and payment authorization details
exact Kuailian API-key environment variable
Account registration needs a mainland China phone number
Published content is externally accessible
MCP cannot pay for subscription upgrades
User-created pages in the web app are intentionally outside MCP modification authority
Exact env var for Kuailian authentication requires checking code/client snippet; no automatic payment authority.

Original activity observations

@kuailian/mcp-server 0.1.5 published 2026-08-04T06:17:43.572Z

Technical identity

npm/@kuailian/mcp-server

Exact implementation source: https://www.npmjs.com/package/@kuailian/mcp-server ↗
Reviewed resource type: MCP Server
Package identity: npm:@kuailian/mcp-server

Evidence & Sources

Evidence basis: Recorded source evidence
Setup runtime verification: Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed Oct 5, 2026 · Latest source observation Oct 8, 2026

Package registry ↗
@kuailian/mcp-server
Recorded package identity, distribution or download evidence.
Includes references whose attribution is not established.
Evidence source ↗
link.3ceng.cn/
Source material retained for this review.
Includes references whose attribution is not established.

Setup · Watchlist

Install & Agents

Publisher instructions.

Source evidence observed Oct 14, 2026.

Additional setup details required — see the specific gaps below.

Install / connect
Publisher instructions
KUAILIAN_API_KEY required; publisher JSON stdio registration.
publisher install or stdio launch · Publisher instructions
npx -y @kuailian/mcp-server
Configure / authenticate
MCP100 setup guide
Register `@kuailian/mcp-server` stdio with KUAILIAN_API_KEY set in MCP client environment. Other API URLs are optional publisher defaults.
claude desktop or cursor mcpServers json · MCP100 composed guide
{ "mcpServers": { "kuailian": { "args": [ "-y", "@kuailian/mcp-server" ], "command": "npx", "env": { "KUAILIAN_API_KEY": "kl_live_REPLACE" } } } }
Check connection
Suggested check
Use publisher `kuailian_get_quota` after authentication to check account/quota without publishing a site.
Remove / uninstall / revoke
MCP100 setup guide
If you added this integration to Claude Code under the registration name `kuailian`, run `claude mcp remove kuailian` to unregister that client entry. In Claude Desktop, Cursor, VS Code or another host, delete/disable the corresponding named MCP registration in that host's settings and restart/reconnect. If you installed an npm package globally or operate a separate HTTP server, uninstall/stop it with its original deployment method. This does not delete user data or revoke service credentials.
MCP client unregister, stopping hosted processes, package uninstall, OAuth disconnect and token revocation are distinct actions.
A claude mcp remove command is only valid for Claude Code when the local registration actually has that name. Other MCP hosts require their own UI/config cleanup.
Separate credential guidance / limitations: Kuailian keys are generated at link.3ceng.cn → MCP tab. Official package README does not specify revoke/rotate steps; this cannot be inferred from its site-delete tooling.
Remove client registration · Claude Code only · MCP100 composed guide
claude mcp remove kuailian

Official Documentation & Sources

What it does

Publish AI-generated web pages to a live, shareable URL from Cursor or Claude Code. This profile is based on verified official documentation where listed; unresolved operational details are explicitly marked.

Capability: Cloud & DevOps
Resource type: MCP Server
Best fit: Publish generated webpages to live shareable Chinese-language hosting URLs.

Representative uses

Publish HTML pages
Get public share links
Update agent-created pages

Limitations

Account registration needs a mainland China phone number
Published content is externally accessible
MCP cannot pay for subscription upgrades
User-created pages in the web app are intentionally outside MCP modification authority
Exact env var for Kuailian authentication requires checking code/client snippet; no automatic payment authority.

Reviewed access

Access & risk

Review the exact access boundary before connecting this MCP to accounts, credentials, or sensitive data.

Authentication: Kuailian account API key generated in MCP settings; exact environment variable binding needs package confirmation
Permissions: API-key-scoped public web publishing, bounded by agent-created pages
Data handling: Uploaded page HTML is hosted by Kuailian and publicly reachable by URL.
Cost: Not documented in the reviewed sources
Risk and cautions: Potential high-impact side effects: Publish live webpages, Modify agent-created published pages.

Access scope and cautions

Write actions: Publish live webpages Modify agent-created published pages
Sensitive access: Published HTML API key Account identity
Risk level: high

FAQ

Based on reviewed evidence as of 2026-10-08. Watchlist tracking is not a recommendation or a security certification.

Which tasks are documented for this implementation?

The reviewed tasks include: Publish HTML pages; Get public share links; Update agent-created pages.

What authentication is documented?

Kuailian account API key generated in MCP settings; exact environment variable binding needs package confirmation

Can it modify data or perform write operations?

Documented write actions include: Publish live webpages; Modify agent-created published pages. Recorded permission boundary: API-key-scoped public web publishing, bounded by agent-created pages

What data-handling boundary should I consider?

Uploaded page HTML is hosted by Kuailian and publicly reachable by URL. Recorded sensitive-access context: Published HTML; API key; Account identity.

What limitations and risks should I check before use?

Potential high-impact side effects: Publish live webpages, Modify agent-created published pages. Account registration needs a mainland China phone number. Published content is externally accessible. MCP cannot pay for subscription upgrades. User-created pages in the web app are intentionally outside MCP modification authority. Exact env var for Kuailian authentication requires checking code/client snippet; no automatic payment authority. Runtime behavior, dependencies and undisclosed vulnerabilities were not independently audited. Documented tool authority and any remote data handling must be checked before installation or use.