The best hosts with an MCP server, for Claude Code, Cursor or Codex

The right choice depends on your app

• Is your app a public Next.js site, with no sensitive data? Choose Vercel: its MCP server is the most complete, with more than 200 tools².
• Do your apps need to stop dead at a spending limit, production included? Choose Railway: at the limit you set, it stops your services¹².
• Should your agent be unable to delete anything, and does France not matter to you? Choose Render: its MCP server has no deletion tool¹³.
• Do you want a French host, and does your team deploy by itself? Choose Clever Cloud: your apps run in France there by default²¹.
• Does your agent deploy all the way to production, and must your keys and your data stay safe, in France? Choose while: sensitive actions wait for your approval, your agent never sees your keys, and each project has its own budget: a change that would go over it waits for your approval, an alert goes out at 80% and at 100%, and a live app is never shut off.

Try while on your app, without an account. Copy the instructions

The comparison

Host	What protects production	What the agent sees of your keys	In France	To get started
Vercel	No deletion tool3. The agent has your account’s permissions, team by team1,2	One tool returns a variable’s decrypted value4	Yes, if you choose it5	Pro at $20 per month6, with the database from a Marketplace provider7
Railway	You choose which projects it can reach, and your AI tool asks you to confirm destructive actions, if it follows their labels9	It retrieves your variables, even into a .env file9	No, Amsterdam is the closest10	Hobby at $5 per month, with usage included up to $511
Render	No deletion tool, and SQL is read-only13	No tool reads the variables, but Render doesn’t guarantee that secrets stay hidden13	No, Frankfurt is the closest14	$7 for the app and $6 for the database, per month15
Heroku	Nothing is described on the two servers’ pages16,17	One tool reads the app’s configuration17	No, a Europe region18	$7 for the app (Basic dyno) and $5 for the database, per month19
Clever Cloud	Nothing in the server, which says it is still young20	It reads the app’s environment20	Yes, by default21	€6 for the app22 and €4.90 for the database23, per month
DigitalOcean	Tokens limited by resource type26, and the agent can delete an app or a database24,25	One tool returns the app’s variables24	No, London, Amsterdam or Frankfurt27	$5 for the app and $7 for the database, per month28
while	Sensitive actions, like deleting a production database, wait for a person, and everything goes into the activity log	Never: your keys stay in while, out of your agent’s reach	Yes, with a French company	€0 to get started, then €13.75 per month for an app and its database

Vercel has the most complete MCP server

Its server has more than 200 tools, connected with OAuth, from deployments to logs². It deletes nothing: you delete a project in the dashboard³. In return, your agent has the same permissions as your account, on every team you open to it, and Vercel recommends approving each step in your agent¹. Vercel no longer has a PostgreSQL database of its own: it goes through a Marketplace provider, such as Neon or Supabase⁷. Your app can run in France, if you choose that region⁵.

Railway lets you choose which projects your agent sees

With OAuth, you choose which workspaces and projects it can reach, and your agent creates a PostgreSQL database in one request⁹. Destructive actions are labeled, and an AI tool that follows those labels asks you to confirm them. Railway recommends keeping its MCP server, as far as possible, for non-critical environments⁹. It also stops your services at the spending limit you set¹².

Render lets nothing be deleted through its MCP server

There, your agent creates an app, a PostgreSQL database and a scheduled job, reads the logs and runs read-only SQL queries¹³. To delete anything, you have to go through the dashboard. No tool reads your variables, but your agent can replace them and redeploy a service, and Render states that it doesn’t guarantee that sensitive information stays out of your agent’s reach¹³.

Heroku has two MCP servers, one of them still in development

The remote server connects with OAuth¹⁶. The local server, which deploys, adds a database and reads the logs, describes itself as still “in early development”¹⁷. Neither page describes a read-only mode or a confirmation step. Heroku has a Europe region, without guaranteeing that your data stays there¹⁸.

Clever Cloud is French, but its MCP server is still young

Your app runs in France by default, with a French company²¹. The MCP server gives your agent the whole API, including deleting an organization, and runs on your machine with no sandbox. Its repository advises against using it on a production organization without taking precautions²⁰.

DigitalOcean limits tokens by resource type

Your agent connects with OAuth, or with a token whose scope you choose, read-only included²⁶. It can create and delete an app as well as a database, and read an app’s variables^24,25.

On while, your agent goes all the way to production without breaking anything

Your agent connects to while over MCP, with OAuth, and does all the rest: it deploys the app and its PostgreSQL database, its jobs and its storage, follows the logs, fixes things and reads your data. Sensitive actions, like deleting a database, wait for your approval before they run. Your keys stay in while: your app uses them, your agent never sees them. Every action is recorded in a signed activity log, and a mistake is undone in a second. Your apps and their backups are hosted in France, by Nextmap.