# Hosting MCP Servers: 4 Platforms Compared and What They Automate > Vercel, Cloudflare, Railway and Render all ship official remote MCP servers. I compared endpoints, auth, tool counts and blast radius, and worked out which hosting work is safe to hand to an agent. **Source:** https://mcpplaygroundonline.com/blog/hosting-mcp-servers **Author:** Nikhil Tiwari **Published:** 2026-10-04 **Category:** Comparison **Reading time:** 10 min read **Topics:** hosting MCP servers, Vercel MCP server, Cloudflare MCP server, Railway MCP server, Render MCP server, deployment MCP server, manage deployments with AI agent, read deployment logs with MCP, best MCP server for deploying apps, which hosting platforms have an MCP server, MCP server for DevOps --- TL;DR - **All four platforms run official remote MCP servers:** Vercel, Cloudflare, Railway and Render, each with OAuth - **None of them charge for MCP access.** You pay for what the agent creates — services, databases, domains - Vercel exposes **200+ tools across 28 categories**. Cloudflare covers 2,500+ API endpoints with **just two tools** - **Render is the safest default:** it cannot delete anything, and SQL queries are read-only - Railway's remote server is deliberately small (11 tools). The full toolset, including deletes, is local only - The win is **log and incident triage**, not one-click deploys Table of Contents 1. [What Is a Hosting MCP Server?](#what-is) 2. [The 4 Servers Compared](#servers) 3. [Hosting Operations You Can Automate](#operations) 4. [How to Pick a Server](#how-to-pick) 5. [The Blast-Radius Problem](#blast-radius) 6. [How MCP Playground Helps](#playground) 7. [FAQ](#faq) Every hosting platform you deploy to now has an **official MCP server**. Vercel, Cloudflare, Railway and Render all shipped one. I connected all four. They look alike from the outside. Underneath, they are very different. One exposes over 200 tools. One exposes two. **One will happily buy a domain on your card.** That is the part nobody mentions. A hosting MCP server holds the keys to production, and **an agent does not feel the weight of a redeploy**. So this guide covers two things. What each server can actually do, and which hosting operations are worth handing to an agent at all. Every endpoint below comes from the vendor's own documentation, checked in October 2026. This is not a guide to hosting _your own_ MCP server. For that, see [how to deploy your own MCP server to Vercel, Railway or Render](/blog/deploy-mcp-server-vercel-railway-render-heroku-flyio). ## What Is a Hosting MCP Server? A _hosting MCP server_ exposes a platform's dashboard and API as tools an AI model can call. Deployments, logs, environment variables, domains — all callable from chat. New to the protocol? Start with [what the Model Context Protocol is](/blog/what-is-model-context-protocol). The short version: **MCP is a standard way for a model to discover and call external tools**. The practical difference is context. A dashboard shows you a failed build. **An agent reads the build log, opens the commit, and tells you which import broke.** It does that without you copying a single log line into chat. ## The 4 Hosting MCP Servers Compared Here is the honest comparison. **Endpoints are quoted from each vendor's documentation**, not from a directory listing. Platform Endpoint Auth Can delete? **Vercel** `mcp.vercel.com` OAuth, approved clients only Yes, and can purchase **Cloudflare** `mcp.cloudflare.com/mcp` OAuth or API token Yes — full API **Railway** `mcp.railway.com` OAuth, project-scoped Local server only **Render** `mcp.render.com/mcp` OAuth or API key No None of these servers bill for MCP calls. **The cost is whatever the agent provisions**, which is why the last column matters more than the first. ### 1\. Vercel MCP Server Vercel runs the **largest hosting MCP server I have tested**. The endpoint is `https://mcp.vercel.com` over streamable HTTP, with OAuth. Add it to Claude Code in one line: ``` claude mcp add --transport http vercel https://mcp.vercel.com ``` The tool reference lists **28 categories and more than 200 tools**. Deployments, runtime logs, environment variables, domains and DNS, firewall rules, feature flags, rolling releases, sandboxes and Web Analytics. The ones I use most are `list_deployments`, `get_deployment`, `get_runtime_logs` and `get_runtime_errors`. `web_fetch_vercel_url` is the clever one — it fetches protected preview deployments you already have access to. Two catches. **Vercel only accepts reviewed clients**: Claude, ChatGPT, Cursor, VS Code, Codex, Windsurf, Gemini CLI and a few others. A custom client needs approval. The second is the Billing and Purchases category. **Vercel MCP can now make purchases**, including domains. Keep human confirmation switched on. I covered the most useful workflows in [10 things you can do with the Vercel MCP server](/blog/10-things-you-can-do-with-vercel-mcp-official-server). Tool pages are on our [Vercel MCP server page](/mcp-servers/vercel). ### 2\. Cloudflare MCP Server Cloudflare took the opposite approach. `https://mcp.cloudflare.com/mcp` covers **more than 2,500 API endpoints with just two tools**: search and execute. This is the _Code Mode_ pattern. The model searches the API spec, then writes code against it. Cloudflare says the whole thing costs about 1,000 tokens of context. Listing 2,500 endpoints as separate tools would cost over a million. **That is the clearest fix for [MCP context bloat](/blog/mcp-context-bloat-tool-search) I have seen shipped.** Auth is OAuth by default, or an API token for CI. If you prefer narrow servers, Cloudflare also runs 15+ product-specific ones: - `builds.mcp.cloudflare.com/mcp` — Workers Builds insights - `observability.mcp.cloudflare.com/mcp` — logs and analytics - `bindings.mcp.cloudflare.com/mcp` — KV, R2, D1 and other primitives - `docs.mcp.cloudflare.com/mcp` — product documentation **I connect the narrow ones for triage** and the full API server only when I actually need to change something. Smaller surface, fewer surprises. Setup details are on our [Cloudflare MCP server page](/mcp-servers/cloudflare). Building your own server there instead? See the [Cloudflare Workers MCP guide](/blog/build-mcp-server-cloudflare-workers-guide). ### 3\. Railway MCP Server Railway made the **most careful split** of any platform here. The remote server at `mcp.railway.com` has 11 tools. The local one has the rest. Remote tools: `whoami`, `list-projects`, `create-project`, `list-services`, feature-flag tools, `redeploy`, `accept-deploy` and `railway-agent`. That last one is a multi-step agent that runs on Railway's side. Your model hands it a goal instead of chaining ten calls. OAuth is scoped. **You pick which workspaces and projects the client can see**, and tokens are short-lived. That is better than any other remote server in this list. `accept-deploy` is marked destructive, so clients prompt before running it. The local server (`railway mcp local`) adds `remove_service`, `set_variables`, `get_logs`, `service_metrics`, volumes, buckets and domains. Destructive calls return a preview first and need `confirm: true`. More in [10 things you can do with the Railway MCP server](/blog/10-things-you-can-do-with-railway-mcp-server-official). ### 4\. Render MCP Server Render runs a remote server at `https://mcp.render.com/mcp`. Auth is OAuth, or an API key from Account Settings sent as a header. It can create web services, static sites, cron jobs, Postgres databases and Key Value instances. It can trigger deploys, update environment variables, and fetch logs and metrics. The interesting part is what it **cannot** do. **No deletions. No scaling changes. SQL queries against Postgres are read-only.** I read that list as a feature. It is the only hosting MCP server I would connect to production without a second thought. Render's docs are also honest about one risk: they **do not guarantee secrets stay out of model context**. Environment variable values can end up in the chat. Before you connect any of these to a real account, look at the tools it actually returns. [Test any MCP server free →](/mcp-test-server) ## Hosting Operations You Can Actually Automate This is the part that matters. **Not every hosting task should go through an agent.** The ones that pay off are read-heavy and need data from more than one place. The ones that do not are one-click actions with a big undo cost. ### Failed Deploy Triage The best use case by far. Find the failed deployment, read its build log, match the error to a commit, explain the fix. By hand that is three tabs and a lot of scrolling. **As one prompt, it takes under a minute.** ``` Find the most recent failed deployment for project "web" in team "acme". Read the build logs, identify the first real error (not warnings), and tell me which file and commit introduced it. Do not redeploy anything. ``` The last line matters. Without it, a helpful model will "fix" the problem by redeploying the previous build. ### Runtime Error and Log Investigation Vercel's `get_runtime_errors`, Cloudflare's observability server, Render's logs and Railway's local `get_logs` all support this. Ask which routes started failing after the last deploy, grouped by error. **The agent earns its keep on the grouping**, not the fetching. ### Environment Variable Audits Compare preview and production env vars and list what is missing in each. This catches the classic "works in preview, breaks in prod" bug. Ask for **names only, never values**. Secret values in chat history are a leak waiting to happen. ### Database Performance Checks Render's read-only SQL against Postgres turns "the app feels slow" into a ranked list of slow queries and missing indexes. Read-only is exactly right here. **The agent diagnoses; you decide on the fix.** ### Preview Environment Spin-Up Railway's `create-project` and Render's service creation both handle this. It is genuinely useful for throwaway demos. Set a rule in the prompt: anything the agent creates gets a name prefix, so you can find and remove it later. ### What Not to Automate - **Production rollbacks.** Fast is not the same as correct. Roll back by hand after reading what the agent found - **DNS changes.** A wrong record takes down email and the site, and caches keep it wrong for hours - **Scaling.** An agent that scales up to "fix" latency will not remember to scale back down - **Purchases.** Domains and plan upgrades should never sit behind a tool call ### Chaining Hosting With Other Servers The real unlock is pairing a hosting server with something else. **Hosting plus GitHub is the combination I use most.** The agent reads the failed deploy, opens the commit on GitHub, and drafts the fix as a PR. Add Sentry and it can match errors to releases. I wrote up that exact setup in [the AI DevOps stack with GitHub, Cloudflare and Sentry](/blog/ai-devops-github-cloudflare-sentry-stack). ## How to Pick a Hosting MCP Server Usually you do not pick. You use the one for the platform you already deploy to. But if you are choosing a platform partly for agent workflows, ask these: 1. **Do you want an agent near production at all?** Render, because it cannot delete or rescale 2. **Do you need tight scoping?** Railway, with per-project OAuth and short-lived tokens 3. **Do you care about context cost?** Cloudflare's two-tool server, or connect only Vercel categories you need 4. **Do you want the widest coverage?** Vercel — deployments, logs, DNS, firewall, flags and analytics in one server Want to host _your own_ MCP server for free instead? That is a different question — see [free MCP server hosting on Cloudflare and Vercel](/blog/free-mcp-server-hosting-cloudflare-vercel-guide). ## The Blast-Radius Problem Nobody Warns You About SEO MCP servers cost you credits when the agent wanders. **Hosting MCP servers cost you uptime.** A model asked to "fix the failing build" has redeploy, rollback and env var tools sitting right there. It will try them, because they look like fixes. And every one of these servers inherits your full permissions. Vercel says so directly: connecting **grants the AI the same access as your Vercel account**. There is also prompt injection. A deployment log is untrusted text. A crafted log line can tell the agent to do something you did not ask for. Four things that help: - **Keep human confirmation on.** Every client offers it. Do not auto-approve write tools on a hosting server - **Use the narrowest server that works.** Railway remote over Railway local. Cloudflare Observability over the full API - **Say what not to do.** "Do not redeploy" and "names only, no values" in the prompt save real incidents - **Watch the tool calls.** If you cannot see what ran with which arguments, you cannot tell why prod changed The OWASP MCP Top 10 covers this risk class under excessive permissions. Running a community fork of any of these? [Scan your MCP server →](/mcp-security-scanner) ## How MCP Playground Can Help Before connecting a hosting MCP server to your real account, it helps to see exactly what it exposes. [The MCP server tester](/mcp-test-server) lists every tool with its schema, so you can spot the destructive ones. [MCP Agent Studio](/mcp-agent-studio) then runs real prompts and shows each tool call with full JSON input and output. So you see which tool the model reached for and what arguments it built — **before it runs against production**. You can also run the same triage prompt across models side by side. That is a quick way to find one that reads logs instead of reaching for `redeploy`. ## Frequently Asked Questions **Do Vercel, Cloudflare, Railway and Render have official MCP servers?+** Yes. All four run official remote MCP servers with OAuth: Vercel at mcp.vercel.com, Cloudflare at mcp.cloudflare.com/mcp, Railway at mcp.railway.com and Render at mcp.render.com/mcp. Railway also ships a local server with a larger toolset. **Do hosting MCP servers cost anything?+** No platform charges for MCP access itself. Vercel MCP is available on all plans, for example. You pay for whatever the agent creates or changes — new services, databases, or domains bought through Vercel's purchase tools. **Which hosting MCP server is safest to connect to production?+** Render. Its MCP server cannot delete resources or change scaling, and its Postgres queries are read-only. Railway's remote server is also small, with short-lived tokens scoped to the projects you choose. **Can an MCP server deploy my app?+** Yes. Vercel, Railway and Render all expose deploy or redeploy tools, and Cloudflare can deploy Workers through its API server. Automate deploys to preview environments freely, but keep human confirmation on for anything that touches production. **Why does the Cloudflare MCP server only have two tools?+** It uses the Code Mode pattern. Instead of one tool per API endpoint, the model searches the API spec and writes code that calls it. That covers more than 2,500 endpoints for roughly 1,000 tokens of context, instead of over a million. **Is this the same as hosting my own MCP server?+** No. These are MCP servers that let an agent manage your hosting account. Hosting your own MCP server means deploying a server you wrote to a platform like Vercel, Cloudflare Workers or Railway so clients can connect to it remotely. ## Conclusion Vercel, Cloudflare, Railway and Render all ship official remote MCP servers. They range from Render's no-delete design to Vercel's 200-plus tools with purchases. Use the server for the platform you already deploy to. Point it at log triage and audits first, and keep a human on every write. Before you connect one to a real account, list its tools and watch a few calls run. [Test any MCP server free →](/mcp-test-server) ## Frequently asked questions ### Do Vercel, Cloudflare, Railway and Render have official MCP servers? Yes. All four run official remote MCP servers with OAuth: Vercel at mcp.vercel.com, Cloudflare at mcp.cloudflare.com/mcp, Railway at mcp.railway.com and Render at mcp.render.com/mcp. Railway also ships a local server with a larger toolset. ### Do hosting MCP servers cost anything? No platform charges for MCP access itself. Vercel MCP is available on all plans, for example. You pay for whatever the agent creates or changes — new services, databases, or domains bought through Vercel's purchase tools. ### Which hosting MCP server is safest to connect to production? Render. Its MCP server cannot delete resources or change scaling, and its Postgres queries are read-only. Railway's remote server is also small, with short-lived tokens scoped to the projects you choose. ### Can an MCP server deploy my app? Yes. Vercel, Railway and Render all expose deploy or redeploy tools, and Cloudflare can deploy Workers through its API server. Automate deploys to preview environments freely, but keep human confirmation on for anything that touches production. ### Why does the Cloudflare MCP server only have two tools? It uses the Code Mode pattern. Instead of one tool per API endpoint, the model searches the API spec and writes code that calls it. That covers more than 2,500 endpoints for roughly 1,000 tokens of context, instead of over a million. ### Is this the same as hosting my own MCP server? No. These are MCP servers that let an agent manage your hosting account. Hosting your own MCP server means deploying a server you wrote to a platform like Vercel, Cloudflare Workers or Railway so clients can connect to it remotely. --- _Canonical page: https://mcpplaygroundonline.com/blog/hosting-mcp-servers — MCP Playground (mcpplaygroundonline.com), the free browser-based tool for testing MCP servers and building AI agents._