Muse brief

Komers MCP Sites for Muse

Komers MCP Sites lets a person ask Muse to build, publish and manage a website, with forms, bookings and a shop, without writing code or managing hosting.

Connect in Muse

MCP server URL: https://app.udx.my/mcp
Authentication: OAuth 2.1, scope sites
Client ID: d4908bec-d806-4801-933f-3ebb196047af (public, shared by everyone). Client Secret: leave empty
Redirect URI registered for this client: https://agent.meta.ai/api/hatch/oauth/callback
Sign in with your email and a 6-digit code (valid 10 minutes), or with Google, then allow access.
Step-by-step guide: https://app.udx.my/connect#muse

Technical details

Endpoint: https://app.udx.my/mcp (Streamable HTTP)
Allowed hosts: app.udx.my (API and sign-in) and *.udx.my (draft previews and live sites)
Issuer: https://app.udx.my/ · Authorize: https://app.udx.my/authorize · Token: https://app.udx.my/token
Dynamic Client Registration (RFC 7591): https://app.udx.my/register · Revoke: https://app.udx.my/revoke
Authorization code with PKCE S256. Access tokens last 1 hour; refresh tokens 30 days.
Auth guide for agents: https://app.udx.my/auth.md · Metadata: https://app.udx.my/.well-known/oauth-authorization-server
OpenAPI: https://app.udx.my/openapi.json
Tool labels follow the server annotations: readOnlyHint is a read, destructiveHint is a sensitive write, everything else is a write.

What Muse must do

Call whoami before the first change in a conversation, and site_guide before writing pages.
Call get_capabilities before promising a feature.
Call list_sites first and do not create a duplicate site.
Show the draft with preview_site and get the owner's approval before publish_site.
Never guess a business name, price, address, phone number, delivery or returns policy. Ask the owner.
Never approve a review on its own judgement.
Confirm with the owner before deleting, unpublishing, cancelling a booking, revoking access or any other destructive action.
Never ask for card details. To buy credits, give the owner the link from get_topup_link.
After a failed or timed-out change, read the current state before trying again.

Credits

New accounts get 20 free credits. A published site costs 5 credits per 30 days and renews automatically.
Credit packs: RM15 = 15 credits, RM30 = 35 credits, RM50 = 75 credits. Payment happens on the payment provider's page, never in chat.
If credits run out at renewal, the owner is emailed and the site is unpublished after 3 days. Pages and data are kept.

Limits

10 sites per account, 200 files per site, 5 MB per file.
20 collections and 10000 records per site.
Accounts are for people aged 18 and over. HTTP 429 means wait a minute and retry.

Data and support

Komers MCP Sites never receives card, bank or e-wallet details.
Anything Muse reads through the connector, including visitors' form messages, is handled by Muse under its own privacy policy.
Privacy: https://app.udx.my/privacy · Terms: https://app.udx.my/terms · Support: https://app.udx.my/support
Email: hello@komers.io
Operator: UDEXMEDIA (M) SDN. BHD. (202201008644 (1454341-M))