# deploy

Deploy or update a project on Deloc. If an app with the same name already exists, it will be updated in place — do NOT delete and recreate apps. Redeploying preserves the same URL and settings. Set password to a string to use that password, or to true/

Agent View of the PolicyLayer registry record for `deploy`. HTML page: https://policylayer.com/tools/deloc-mcp/deploy

## Facts

- Tool: `deploy`
- Server: Deloc (`delocdev/deloc-mcp`) — https://policylayer.com/tools/deloc-mcp.md
- Homepage: https://github.com/delocdev/deloc-mcp
- Risk category: Execute (High risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "deploy",
    "arguments": {}
  }
}
```

## Why deploy is rated High

The deploy tool executes a deployment operation that launches live infrastructure and modifies external state (creates or updates projects on Deloc, generates public URLs, applies settings). While not immediately destructive (redeployment preserves URLs), it is an Execute operation because it runs code/triggers external services whose side effects depend on what is deployed.

From the tool's own definition: "Tool description states 'Deploy or update a project on Deloc' and 'get a live URL back' — this triggers external deployment operations whose effects depend on arguments (project name, code, settings, password)."

## Use case

AI agents invoke deploy to trigger actions in Deloc. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Deloc:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "deploy": {
      "limits": [
        {
          "counter": "deploy_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Deloc (44)

- `delete_action` — Destructive — https://policylayer.com/tools/deloc-mcp/delete-action.md
- `delete_action_secret` — Destructive — https://policylayer.com/tools/deloc-mcp/delete-action-secret.md
- `delete_app` — Destructive — https://policylayer.com/tools/deloc-mcp/delete-app.md
- `delete_dashboard_query` — Destructive — https://policylayer.com/tools/deloc-mcp/delete-dashboard-query.md
- `delete_data_connection` — Destructive — https://policylayer.com/tools/deloc-mcp/delete-data-connection.md
- `delete_oauth_credential` — Destructive — https://policylayer.com/tools/deloc-mcp/delete-oauth-credential.md
- `disable_app` — Destructive — https://policylayer.com/tools/deloc-mcp/disable-app.md
- `logout` — Destructive — https://policylayer.com/tools/deloc-mcp/logout.md
- `run_dashboard_query` — Execute — https://policylayer.com/tools/deloc-mcp/run-dashboard-query.md
- `test_action` — Execute — https://policylayer.com/tools/deloc-mcp/test-action.md
- `test_oauth_credential` — Execute — https://policylayer.com/tools/deloc-mcp/test-oauth-credential.md
- `bigquery_get_table_schema` — Read — https://policylayer.com/tools/deloc-mcp/bigquery-get-table-schema.md
- `bigquery_list_datasets` — Read — https://policylayer.com/tools/deloc-mcp/bigquery-list-datasets.md
- `bigquery_list_projects` — Read — https://policylayer.com/tools/deloc-mcp/bigquery-list-projects.md
- `bigquery_list_tables` — Read — https://policylayer.com/tools/deloc-mcp/bigquery-list-tables.md
- `check_bigquery_connection` — Read — https://policylayer.com/tools/deloc-mcp/check-bigquery-connection.md
- `get_account` — Read — https://policylayer.com/tools/deloc-mcp/get-account.md
- `get_action_logs` — Read — https://policylayer.com/tools/deloc-mcp/get-action-logs.md
- `get_app` — Read — https://policylayer.com/tools/deloc-mcp/get-app.md
- `list_action_secrets` — Read — https://policylayer.com/tools/deloc-mcp/list-action-secrets.md
- `list_actions` — Read — https://policylayer.com/tools/deloc-mcp/list-actions.md
- `list_apps` — Read — https://policylayer.com/tools/deloc-mcp/list-apps.md
- `list_dashboard_queries` — Read — https://policylayer.com/tools/deloc-mcp/list-dashboard-queries.md
- `list_data_connections` — Read — https://policylayer.com/tools/deloc-mcp/list-data-connections.md
- `list_data_files` — Read — https://policylayer.com/tools/deloc-mcp/list-data-files.md
- `list_oauth_credentials` — Read — https://policylayer.com/tools/deloc-mcp/list-oauth-credentials.md
- `suggest_deploy_options` — Read — https://policylayer.com/tools/deloc-mcp/suggest-deploy-options.md
- `connect_bigquery` — Write — https://policylayer.com/tools/deloc-mcp/connect-bigquery.md
- `create_action` — Write — https://policylayer.com/tools/deloc-mcp/create-action.md
- `create_dashboard_query` — Write — https://policylayer.com/tools/deloc-mcp/create-dashboard-query.md
- …and 14 more: https://policylayer.com/tools/deloc-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=deloc-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/deloc-mcp