just-publish

just-publish is a skill for Codex from just-done/just-publish-mcp. It costs 155 tokens per session (1,201 once invoked), scanned A, original, MIT.

A publishing tool that uploads a static website—HTML, CSS, JavaScript, images, and fonts—to a public URL without a login or build step. A static website has no server-side code.

In plain words
What is it for?
Use it to publish, host, share, or update a static site. An index.html file at the project root and an email address are required.
Why use it?
It turns finished website files into a shareable live site without requiring hosting setup.

Skill for Codex

Written for Codex: agents/openai.yaml present.

Good fit Use it to publish, host, share, or update a static site. An index.html file at the project root and an email address are required.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/just-done/just-publish-mcp/just-publish
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add just-done/just-publish-mcp --skill just-publish
Clone the repo
git clone --depth 1 https://github.com/just-done/just-publish-mcp

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for just-publish

README.md
[![agentmods](https://agentmods.dev/badge/skills/just-done/just-publish-mcp/just-publish/github.svg)](https://agentmods.dev/skills/just-done/just-publish-mcp/just-publish)
Your own site
<a href="https://agentmods.dev/skills/just-done/just-publish-mcp/just-publish"><img src="https://agentmods.dev/badge/skills/just-done/just-publish-mcp/just-publish/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for just-publish

Your own site · 80×15
<a href="https://agentmods.dev/skills/just-done/just-publish-mcp/just-publish"><img src="https://agentmods.dev/badge/skills/just-done/just-publish-mcp/just-publish.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 155 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,201 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00155 $0.01201
Opus 5 $0.00077 $0.00600
Sonnet 5 $0.00031 $0.00240
Haiku 4.5 $0.00015 $0.00120

Measured 12d ago against content hash 018eca68594c, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

just-publish scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/just-publish/SKILL.md · 94 lines

How it starts

The opening of the file, as written. The whole thing — 94 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Just Publish — put a static website online

Just Publish (https://justpublish.ai) turns static files into a live website at https://{slug}.justpublish.site/. Publishing is free, needs no login and no build step. The only credential is the edit_token returned by the first deploy — store it; it is the sole way to update that exact site later.

When to use this skill

The user says things like:

  • "publish this site" / "put this online" / "make this a website"
  • "give me a link for this" / "I want a URL I can share"
  • "host what we just built"
  • "update my site" (one previously published with Just Publish)

The site must be static: HTML, CSS, JS, images, fonts — no server code, no SSR, no build step.

Do NOT use it when the user needs a backend (APIs, databases, Next.js/Nuxt SSR), wants to buy or manage a domain (that is a registrar's job), or wants to change a site that was not published with Just Publish — without its edit_token there is nothing you can do.

Publish a new site

  1. Collect the site's files. index.html at the root is required — a deploy without it is rejected.
  2. Ask the user for their email if you don't have it (required). Publishing itself works immediately and needs no login — but a new site starts unverified, and Just Publish emails a verification link. This is not optional housekeeping: a brand-new site must be verified within about an hour or it is automatically taken down. You must relay this to the user (see "After publishing"). Verifying also lets them recover and manage the site if the edit_token is lost.
  3. Confirm with the user before the first publish of a new site — deploying makes the files public on the internet, and a verification email will follow.
  4. Call the deploy MCP tool on https://mcp.justpublish.ai/ (Streamable HTTP, no auth required to connect):
    • files: array of { path, content, encoding? } — text files as plain strings; binary files base64-encoded with "encoding": "base64".
    • email: the user's email address.
  5. The result carries the live url, the site_id, the edit_token, and verify_required. When verify_required is true (it is for every new site), the user must verify — relay the verify-to-keep step under "After publishing".

Read the full file on GitHub · 94 lines

Files

What ships with it

4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 12d ago First seen · 94 lines · 155 tokens per session scan A 018eca68594c

Subscribe to this mod's changes

just-publish is a skill published in the GitHub repository just-done/just-publish-mcp (1 stars, last pushed 2d ago), licensed MIT. It adds 155 tokens to every session and 1,201 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

agentcore-investigation

Investigate Bedrock AgentCore runtime sessions via CloudWatch Logs Insights — resolve session/trace IDs, query OTEL spans, filter noise, build timelines. Use when debugging AgentCore agent sessions, tracing tool calls, or analyzing latency.

awslabs/mcp · 52 tokens

n8n-self-hosting

Deploy a production self-hosted n8n end-to-end to a fresh Linux VM over SSH, using Docker Compose behind a Caddy reverse proxy with automatic HTTPS. Use whenever the user wants to self-host, install, set up, provision, or deploy n8n on their own server/VPS/box (Hetzner, DigitalOcean, AWS EC2, bare metal, etc.) — in…

czlonkowski/n8n-mcp · 265 tokens

cloud-run

Manage Cloud Run services and jobs.

GoogleCloudPlatform/cloud-run-mcp · 10 tokens

frontmcp-deployment

Use when deploying, building for production, packaging, or shipping a FrontMCP server. Covers build targets (node, cli SEA binary, browser, embeddable SDK, mcpb archive for Claude Desktop, serverless) and deploying to Vercel (with Vercel KV), AWS Lambda (API Gateway, SAM, CDK), Cloudflare Workers (KV, D1, Durable…

agentfront/frontmcp · 210 tokens

zdx-investigate-multi-app-outage

Diagnose a multi-application outage scoped to one location by correlating ZDX alerts, affected devices, and shared cloud-path hops. Identifies the devices affected at a specific office, compares the per-application network path across multiple SaaS apps to surface the common network bottleneck, and produces an…

zscaler/zscaler-mcp-server · 155 tokens

dynatrace-managed

Set up and query Dynatrace Managed (self-hosted) through the Dynatrace Managed MCP server - configuring cluster connections and API tokens, choosing the right environment when several are configured, and building entity selectors for logs, metrics, events, problems, security vulnerabilities and SLOs. Use when the user…

dynatrace-oss/dynatrace-managed-mcp · 101 tokens