Documentation
Lodestone is a hosted remote MCP connector. One URL gives Claude, ChatGPT, Gemini, Cursor or any other MCP client live access to 21 services and 51 tools, with nothing to install and no server to run.
Connecting an AI client
Sign in at lodestone.studiocorsair.com/login with your email address. There is no password; you get a sign-in link. Your dashboard then shows a personal connector URL.
Claude (web, desktop, mobile)
- Open Settings → Connectors → Add custom connector.
- Paste your connector URL and give it a name.
- Claude prompts you to authenticate. Approve it, and the tools appear.
ChatGPT
- Enable Developer Mode in settings.
- Add a connector with your Lodestone URL and transport Streamable HTTP.
Cursor, VS Code, Windsurf, Cline, OpenCode
Add a remote MCP server with your connector URL and transport Streamable HTTP. In Cursor that is Settings → MCP → Add new global MCP server; in Cline it is MCP Servers → Remote Servers.
Trying it without an account
The demo endpoint needs no sign-in and exposes one tool, live Airbnb search:
https://lodestone.studiocorsair.com/mcp/demoIt is rate-limited per IP, because every call is a live scrape billed to our provider account.
Connector URLs
| URL | Auth | Tools |
|---|---|---|
https://lodestone.studiocorsair.com/mcp | OAuth 2.1 | All 51 |
https://lodestone.studiocorsair.com/mcp?media_gen=off | OAuth 2.1 | 46 — no image or video generation |
https://lodestone.studiocorsair.com/m/<key> | Key in the URL | All 51 |
https://lodestone.studiocorsair.com/mcp/demo | None | 1 (Airbnb search) |
The /m/<key> form is the personal URL shown on your dashboard. It works on every MCP client, including ones with no OAuth support, and it needs no handshake. Treat it as a secret: anyone holding it can call your tools.
The media_gen=off flag
Adding ?media_gen=off to any connector URL removes the five AI image and video generation tools from that connection. They are not listed and they are not callable; a request for one comes back as an error telling you which URL does have them.
This exists because Anthropic's Software Directory Policy does not allow AI image, video or audio generation in a directory-listed connector. Nothing is removed from Lodestone itself: your existing URL keeps all 51 tools, and adding the plain URL as a custom connector is how you use generation from a client that reached us through a directory.
Authentication
Signing in is an emailed magic link. No password is ever set or stored.
Connecting a client to /mcp uses OAuth 2.1 with PKCE. The client discovers the authorization server from the WWW-Authenticate header on a 401, registers itself through RFC 7591 dynamic client registration, and you confirm by email before any token is issued. Metadata is published at:
/.well-known/oauth-protected-resource (RFC 9728)
/.well-known/oauth-authorization-server (RFC 8414)
/oauth/register (RFC 7591)No pre-registration and no client secret are needed. Any compliant MCP client can connect on its own.
Bringing your own keys
Integrations that read the live public web run on Lodestone's provider accounts and need nothing from you. Integrations that act on your accounts need your own credentials, added from your dashboard:
| Integration | What you supply |
|---|---|
| IMAP/SMTP credentials. One-click setup for Gmail, iCloud, Yahoo, Fastmail and Zoho; anything else via custom host and port. | |
| Meta Ads | A Meta access token, plus your ad account and page IDs. |
| Beeper | A Beeper connection, which covers WhatsApp, Telegram, Signal, iMessage, Discord and more at once. |
| Telegram Bot | Your own bot token from BotFather. |
| Typefully | A Typefully API key, which posts to X, LinkedIn, Threads, Bluesky and Mastodon. |
Keys are encrypted at rest with AES-256-GCM and are decrypted only to make your own calls to the provider they belong to. They are never logged and never shared. See the privacy policy.
Turning individual tools off
Every tool can be switched off individually from your dashboard. A disabled tool disappears from tools/list and is refused on tools/call, so the assistant cannot see it or reach it. This is the right lever if you want, say, live search but no send-email capability.
Tool reference
Live web and travel — no keys needed
| Tool | Access | What it does |
|---|---|---|
search_airbnb | read | Live Airbnb listings by location, monthly price ceiling and bedroom count. |
search_amazon | read | Amazon products with price, star rating, review count and Prime badges. Any marketplace TLD. |
search_hotels | read | Booking.com availability and nightly prices for a location and date range. |
search_flights | read | Live fares between two airports, cheapest first, with airline, duration and stops. |
search_places | read | Google Maps places with star rating, review count, category, address, phone and website. |
search_reddit | read | Reddit posts with subreddit, score, comment count and link. |
Social search — no keys needed
| Tool | Access | What it does |
|---|---|---|
search_twitter | read | X posts by query, with operators such as from:, min_faves: and until:. |
twitter_user | read | An X profile: name, bio, follower and post counts, verified status. |
twitter_user_tweets | read | A user's most recent X posts. |
twitter_replies | read | The replies to a specific X post. |
search_instagram | read | An Instagram profile by username. |
search_tiktok | read | TikTok videos by keyword or handle, with play counts. |
search_facebook | read | Public Facebook pages and posts by name or keyword. |
Advertising
search_facebook_ads reads the public Meta Ad Library and needs no key. Everything else here needs your own Meta access token.
| Tool | Access | What it does |
|---|---|---|
search_facebook_ads | read | Any advertiser's live Facebook and Instagram ads: copy, call-to-action, landing link, platforms, run dates. |
meta_ads_whoami | read | Which Meta identity the saved token belongs to. |
meta_ads_list_accounts | read | The ad accounts the token can reach. |
meta_ads_account_info | read | Currency, timezone, spend cap and status for one ad account. |
meta_ads_list_campaigns / meta_ads_get_campaign | read | Campaigns, with objective, status and budget. |
meta_ads_list_ad_sets / meta_ads_get_ad_set | read | Ad sets, with targeting, schedule and budget. |
meta_ads_list_ads / meta_ads_get_ad | read | Individual ads and their creative. |
meta_ads_insights | read | Performance: spend, impressions, clicks, CPC, CPM, conversions. |
meta_ads_list_page_posts | read | Posts on a Facebook Page you manage. |
meta_ads_create_campaign | write | Create a campaign. |
meta_ads_create_ad_set | write | Create an ad set with targeting and budget. |
meta_ads_create_image_ad | write | Create an image ad. |
meta_ads_boost_post | write | Boost an existing Page post. Spends money. |
meta_ads_update_campaign | modify | Change an existing campaign. |
meta_ads_update_ad_set | modify | Change an existing ad set. |
meta_ads_set_status | modify | Pause or activate a campaign, ad set or ad. |
Email — your own IMAP/SMTP credentials
| Tool | Access | What it does |
|---|---|---|
email_list_recent | read | Recent messages in a mailbox. |
email_search | read | Search by sender, subject, date or body text. |
email_read | read | The full body of one message. |
email_send | modify | Send a message. Irreversible, so it always asks first. |
Messaging — your own connection
| Tool | Access | What it does |
|---|---|---|
beeper_list_chats | read | Your chats across WhatsApp, Telegram, Signal, iMessage, Discord and more. |
beeper_read_chats | read | Messages in a chat. |
beeper_search | read | Search messages across every connected network at once. |
beeper_send_message | modify | Send a message. Irreversible, so it always asks first. |
telegram_get_bot_info | read | Which bot the saved token belongs to. |
telegram_get_chat | read | Details of a chat your bot is in. |
telegram_read_recent_updates | read | Recent updates delivered to your bot. |
telegram_send_message | modify | Send a message as your bot. |
Publishing — your own Typefully key
| Tool | Access | What it does |
|---|---|---|
typefully_whoami | read | Which Typefully account the saved key belongs to. |
typefully_post | modify | Publish or schedule to X, LinkedIn, Threads, Bluesky and Mastodon at once. |
Image and video generation
Not available on a connection using ?media_gen=off. Five free generations per provider per month run on Lodestone's own keys; there is nothing to bring.
| Tool | Access | What it does |
|---|---|---|
generate_image_nano_banana | write | Google Nano Banana (Gemini 3 Pro Image). Best for photorealism, legible text in the image, and compositional prompts. Around 30 to 40 seconds. |
generate_image_flux | write | FLUX1.1 [pro]. Fast and sharp, good for art, product shots and concept art. |
generate_image_seedream | write | ByteDance Seedream 4.5. High resolution, strong on people and cinematic scenes. |
generate_video_veo | write | Google Veo 3 Fast, with generated audio. Around 60 seconds. |
generate_video_kling | write | Kling 2.5 Turbo Pro. Smooth cinematic motion, and the slowest tool here at roughly 90 seconds. |
Read-only vs write tools
Every tool declares an MCP annotation: a human-readable title, plus readOnlyHint or destructiveHint. Clients use these to decide what needs confirming, so the 35 read-only tools run without asking you on every call while anything that sends, spends or changes state prompts first.
- read reads data and changes nothing.
- write creates something new. Nothing existing is changed or deleted.
- modify changes existing state, or sends something outward that cannot be recalled.
Limits and pricing
Free to start, no card. Free-tier integrations run on Lodestone's provider keys. Image and video generation gives five free generations per provider per month. Integrations that touch your own accounts need your own credentials from the first call, and the cost of those calls is between you and that provider.
The unauthenticated demo endpoint is rate-limited per IP per hour. Signed-in connectors are not.
Data handling
- Lodestone runs as a single Cloudflare Worker. There is no separate database of your message or email content; nothing a tool returns is retained after the response.
- Tool-usage logs record the tool name, a timestamp and the call latency, for operating and debugging the service.
- API keys you add are encrypted at rest with AES-256-GCM and are never logged.
- Lodestone does not read your AI client's memory, chat history, conversation summaries or files. It only sees the arguments a tool call passes it.
Full detail in the privacy policy and the terms.
Support
Email jordan@alastor.space. A machine-readable summary of everything on this page lives at /llms.txt.