openship Adds 6,470 Stars in a Week — a Self-Hosted Deploy Platform Whose MCP Endpoint Exposes Only Opt-In Routes, With Permission Checks Per Call

GitHub·medium signalXBlueskyLinkedInCopy link

oblien/openship (8,660 stars, +6,470 this week — 75% of its total in seven days, Apache 2.0, 393 commits) points at a repo and then builds, ships, routes, and TLS-terminates the app with built-in CI/CD, offered as desktop app, web dashboard, and CLI. The agent-relevant design decision is its MCP endpoint: 'only routes that opt in are exposed as MCP tools,' with permission checks on every call rather than a blanket grant. That allowlist-by-default posture is the right pattern for handing an agent deploy authority, and it is rare enough in MCP servers to be worth copying.