Northflank MCP by usefulapi
REMOTE · NORTHFLANK.USEFULAPI.IO
Inspect and control your Northflank projects, services, jobs, and builds from your AI assistant.
Available components
Last scanned (2 hours ago)
Scores higher than 4% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Cloud Infrastructure
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security46
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not yet verified: we couldn't confirm whether this endpoint requires it. View diagnostics → Unverified
- HTTPS enforcement could not be verified: the plaintext port redirected somewhere other than https, so enforcement is unproven. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability0
- Transport check failed: declared streamable-http, but the endpoint redirected instead of responding directly. See how to fix → View diagnostics → Fail
Schema Quality & AI Usability0
- Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.Unverified
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
- Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Tool Safety0
- Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Capabilities0
- Capabilities not yet verified: we couldn't read the endpoint's capabilities.Unverified
Unverified: 5 categories
Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.
Checks we ran (4)
- TLS certificate
- HSTS header
- DNSSEC
- Transport
Checks we could not complete (7)
These are gaps on our side, not findings about this hosted endpoint. We only credit what we can confirm, so a category made up entirely of them scores 0.
- Authorization in Endpoint SecurityAuthorisation not yet verified: we couldn't confirm whether this endpoint requires it.
- HTTPS in Endpoint SecurityHTTPS enforcement could not be verified: the plaintext port redirected somewhere other than https, so enforcement is unproven.
- Schema quality in Schema Quality & AI Usability (scores 0 for this)Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.
- Stability in Stability & Change Management (scores 0 for this)Stability not yet verified: not enough scan history yet (needs a 30-day window).
- Tool coverage in Tool Coverage (scores 0 for this)Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.
- Tool safety in Tool Safety (scores 0 for this)Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.
- Capabilities in Capabilities (scores 0 for this)Capabilities not yet verified: we couldn't read the endpoint's capabilities.
Does not apply to this hosted endpoint (2)
- Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
- Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
The score does not measure everything. What the score does not measure →
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 2 Nov 26 −61
- Endpoint reachability: reachable → not serving MCP ▼ security
- Stability: pass → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Authorization: pass → unverified ▼ security
- Schema quality: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- 31 Oct 26 +2
- Authorization: partial → pass ▲ security
- The server rewrote its instructions, which are the text every model session reads security
- New tool “northflank_create_combined_service”, which the server declares destructive security
- Schema quality: 111 → 137 ▼ functional
- MCP protocol: fail → pass ▲ functional
- New prompt “check_the_cpu_and_memory_use_of_a_service” functional
- New prompt “deploy_a_connected_github_repository” functional
- New prompt “list_our_projects_and_services_and_see_which_are_paused” functional
- New prompt “review_the_build_history_of_a_service” functional
- New prompt “scale_restart_pause_or_resume_a_service” functional
- New prompt “start_a_build_for_a_service” functional
- MCP protocol version: 2025-06-18 → 2025-11-25 functional
- Server version: 1.32.0 → 1.34.0 functional
- Server version: 1.31.0 → 1.32.0 functional
- Server version: 1.30.0 → 1.31.0 functional
- Server version: 1.29.2 → 1.30.0 functional
- New tool “northflank_list_plans” functional
- New tool “northflank_list_repositories” functional
- “northflank_get_service” added an optional parameter “teamId” cosmetic
- “northflank_list_secret_groups” added an optional parameter “teamId” cosmetic
- “northflank_list_service_builds” added an optional parameter “teamId” cosmetic
- “northflank_list_services” added an optional parameter “teamId” cosmetic
- 30 Oct 26 0
- Server version: 1.29.1 → 1.29.2 functional
- Server version: 1.29.0 → 1.29.1 functional
- 29 Oct 26 0
- Server version: 1.28.0 → 1.29.0 functional
- Server version: 1.27.0 → 1.28.0 functional
- 28 Oct 26 0
- Server version: 1.25.0 → 1.27.0 functional
- 27 Oct 26 0
- Server version: 1.24.0 → 1.25.0 functional
- 25 Oct 26 0
- Server version: 1.23.0 → 1.24.0 functional
- Server version: 1.22.0 → 1.23.0 functional
- Server version: 1.21.3 → 1.22.0 functional
- Server version: 1.21.0 → 1.21.3 functional
- 24 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Server version: 1.20.0 → 1.21.0 functional
- Server version: 1.19.0 → 1.20.0 functional
- Server version: 1.17.0 → 1.19.0 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://northflank.usefulapi.io/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=usefulapi.io | CN=WE1,O=Google Trust Services,C=US | 13 Sept 2026 | 12 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | d9be3287b0fde9630e825ba1f79bff3f |
| SANs: usefulapi.io, *.usefulapi.io | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of northflank.usefulapi.io. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | Trust anchor | 20326, 38696 | 8, 8 | Verified |
| io. | DS published | 38690 | 8 | Verified |
| usefulapi.io. | No DS | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Inconclusive
We could not reach the endpoint well enough to judge its authorisation posture.
| Result | Inconclusive |
|---|---|
| HTTP status | 302 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://northflank.usefulapi.io/mcp | Redirected | 302 | https://usefulapi.io/northflank/ |
| http (plaintext) | http://northflank.usefulapi.io/mcp | Inconclusive | 302 | http://northflank.usefulapi.io/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
northflank_create_combined_service Create GitHub build and deployment service (incurs charges) ~573
MUTATING: create a combined service that builds a connected GitHub repository and deploys it. May incur Northflank build/compute charges and expose the selected HTTP port publicly. Confirm the repository, branch, plan, port and inherited-secret access with the user, then pass confirm=true. Supply absolute Dockerfile/context paths. environmentSecretReferences maps runtime variable names to existing inherited variable NAMES (for example DATABASE_URL: DB_CONNECTION becomes ${DB_CONNECTION}); never supply secret values. Secret groups must already apply to this service through project scope, existing tags or stageId. This tool does not change secret-group restrictions. A successful creation is not proof of a successful build or healthy deployment: inspect the service and build history. Never blindly retry an uncertain creation; list services first. POST /v1/projects/{projectId}/services/combined.
| Name | Type | Req | Description |
|---|---|---|---|
| accountLogin | string | – | Linked GitHub account login from northflank_list_repositories; useful when multiple accounts are linked. |
| branch | string | yes | Explicit Git branch to build. |
| buildPlan | string | – | Optional Northflank build plan ID; omitted uses the vendor default. |
| confirm | boolean | yes | Required: user approved creating the service, its charges, public exposure and inherited-secret access. |
| deploymentPlan | string | yes | Explicit deployment plan ID from northflank_list_plans; charged by Northflank. |
| dockerWorkDir | string | – | Absolute repository build context; defaults to /. |
| dockerfilePath | string | yes | Absolute repository path to the Dockerfile, e.g. /Dockerfile or /apps/api/Dockerfile. |
| environmentSecretReferences | object | – | Runtime variable name -> existing inherited variable name; values are NAMES, never credentials. Source variables must already be inherited from applicable runtime secret groups. Avoid mapping a name… |
| healthCheck | object | – | Optional HTTP health check on the container's HTTP port. |
| httpPort | integer | yes | Container HTTP listen port. The application must listen on 0.0.0.0. |
| instances | integer | – | Initial running replicas, charged by Northflank. |
| name | string | yes | New service name. |
| projectId | string | yes | Existing project id. |
| public | boolean | yes | Explicitly choose whether the HTTP port is publicly accessible. |
| repositoryUrl | string | yes | HTTPS GitHub repository URL from northflank_list_repositories, without a trailing slash, query or credentials. |
| stageId | string | – | Existing project environment/stage id for stage-scoped secret inheritance. |
| tags | array | – | Previously defined resource tags, including any tags required to inherit the intended secret groups. |
| teamId | string | – | Team id, required for an organization-scoped token. |
No output schema declared.
No examples provided.
northflank_get_addon Get addon ~64
Get details and status of a single addon. GET /v1/projects/{projectId}/addons/{addonId}.
| Name | Type | Req | Description |
|---|---|---|---|
| addonId | string | yes | Addon id (from northflank_list_addons). |
| projectId | string | yes | Project id. |
No output schema declared.
No examples provided.
northflank_get_job Get job ~68
Get details of a single job, including build/deploy config and cron schedule. GET /v1/projects/{projectId}/jobs/{jobId}.
| Name | Type | Req | Description |
|---|---|---|---|
| jobId | string | yes | Job id (from northflank_list_jobs). |
| projectId | string | yes | Project id. |
No output schema declared.
No examples provided.
northflank_get_project Get project ~55
Get details of a single project, including region, cluster and associated services/jobs/addons. GET /v1/projects/{projectId}.
| Name | Type | Req | Description |
|---|---|---|---|
| projectId | string | yes | Project id (from northflank_list_projects). |
No output schema declared.
No examples provided.
northflank_get_service Get service ~78
Get details and current status of a single service. GET /v1/projects/{projectId}/services/{serviceId}.
| Name | Type | Req | Description |
|---|---|---|---|
| projectId | string | yes | Project id. |
| serviceId | string | yes | Service id (from northflank_list_services). |
| teamId | string | – | Team id for an organization-scoped token. |
No output schema declared.
No examples provided.
northflank_get_service_metrics Get service metrics ~181
Get CPU / memory metrics for a service's containers. GET /v1/projects/{projectId}/services/{serviceId}/metrics. Use queryType=single (default) for a current snapshot or queryType=range with duration/startTime/endTime.
| Name | Type | Req | Description |
|---|---|---|---|
| duration | integer | – | Range duration in seconds (alternative to startTime/endTime). |
| endTime | integer | – | Range end. |
| metricTypes | array | – | Which metrics to return; defaults to all if omitted. |
| projectId | string | yes | Project id. |
| queryType | string | – | single = point-in-time (default), range = time series. |
| serviceId | string | yes | Service id. |
| startTime | integer | – | Range start (unix ms/seconds per API). |
| time | integer | – | Point-in-time for queryType=single. |
No output schema declared.
No examples provided.
northflank_list_addons List addons ~94
List addons (managed databases / services) in a project with their status. GET /v1/projects/{projectId}/addons.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Cursor from a previous page's pagination.cursor to fetch the next page. |
| page | integer | – | Page number to access. |
| per_page | integer | – | Results per page (max 100). |
| projectId | string | yes | Project id. |
No output schema declared.
No examples provided.
northflank_list_domains List domains ~110
List custom domains for the account (or a team), with verification status. GET /v1/domains (team: GET /v1/teams/{teamId}/domains).
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Cursor from a previous page's pagination.cursor to fetch the next page. |
| page | integer | – | Page number to access. |
| per_page | integer | – | Results per page (max 100). |
| teamId | string | – | Optional team id to scope to a team's domains. |
No output schema declared.
No examples provided.
northflank_list_jobs List jobs ~89
List jobs (manual / cron) in a project. GET /v1/projects/{projectId}/jobs.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Cursor from a previous page's pagination.cursor to fetch the next page. |
| page | integer | – | Page number to access. |
| per_page | integer | – | Results per page (max 100). |
| projectId | string | yes | Project id. |
No output schema declared.
No examples provided.
northflank_list_plans List deployment plans ~61
List Northflank deployment plan IDs, CPU, RAM and vendor prices. Choose an explicit deploymentPlan for northflank_create_combined_service; these are Northflank infrastructure charges, separate from UsefulAPI. GET /v1/plans.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
northflank_list_projects List projects ~114
List projects for the authenticated token (or a specific team). Good first call to discover project ids. GET /v1/projects (team: GET /v1/teams/{teamId}/projects).
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Cursor from a previous page's pagination.cursor to fetch the next page. |
| page | integer | – | Page number to access. |
| per_page | integer | – | Results per page (max 100). |
| teamId | string | – | Optional team id to scope to a team's projects. |
No output schema declared.
No examples provided.
northflank_list_repositories List connected GitHub repositories ~143
List GitHub repositories accessible through Northflank's linked GitHub accounts, with repository URLs and account logins for northflank_create_combined_service. Does not connect a new GitHub account. GET /v1/integrations/vcs/repos.
| Name | Type | Req | Description |
|---|---|---|---|
| accountLogin | string | – | Filter by the linked GitHub account login. |
| cursor | string | – | Cursor from a previous page's pagination.cursor to fetch the next page. |
| page | integer | – | Page number to access. |
| per_page | integer | – | Results per page (max 100). |
| teamId | string | – | Team id, required for an organization-scoped token. |
No output schema declared.
No examples provided.
northflank_list_secret_groups List secret groups ~122
List a project's secret groups — METADATA ONLY (id, name, type, priority, restrictions). Does NOT return secret values. GET /v1/projects/{projectId}/secrets.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Cursor from a previous page's pagination.cursor to fetch the next page. |
| page | integer | – | Page number to access. |
| per_page | integer | – | Results per page (max 100). |
| projectId | string | yes | Project id. |
| teamId | string | – | Team id for an organization-scoped token. |
No output schema declared.
No examples provided.
northflank_list_service_builds List service builds ~135
List a build service's build runs / history (branch, sha, status, timestamps). GET /v1/projects/{projectId}/services/{serviceId}/build.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Cursor from a previous page's pagination.cursor to fetch the next page. |
| page | integer | – | Page number to access. |
| per_page | integer | – | Results per page (max 100). |
| projectId | string | yes | Project id. |
| serviceId | string | yes | Service id of a build/combined service. |
| teamId | string | – | Team id for an organization-scoped token. |
No output schema declared.
No examples provided.
northflank_list_services List services ~113
List services in a project (build / deployment / combined) with their build+deployment status. GET /v1/projects/{projectId}/services.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Cursor from a previous page's pagination.cursor to fetch the next page. |
| page | integer | – | Page number to access. |
| per_page | integer | – | Results per page (max 100). |
| projectId | string | yes | Project id. |
| teamId | string | – | Team id for an organization-scoped token. |
No output schema declared.
No examples provided.
northflank_pause_service Pause service (mutates infra) ~61
MUTATING: pause a service, scaling it to zero running instances. POST /v1/projects/{projectId}/services/{serviceId}/pause.
| Name | Type | Req | Description |
|---|---|---|---|
| projectId | string | yes | Project id. |
| serviceId | string | yes | Service id. |
No output schema declared.
No examples provided.
northflank_restart_service Restart service (mutates infra) ~58
MUTATING: restart all running containers of a service. POST /v1/projects/{projectId}/services/{serviceId}/restart.
| Name | Type | Req | Description |
|---|---|---|---|
| projectId | string | yes | Project id. |
| serviceId | string | yes | Service id. |
No output schema declared.
No examples provided.
northflank_resume_service Resume service (mutates infra) ~134
MUTATING: resume a paused service. Optionally set the instance count and CI/CD/autoscaling state to restore. POST /v1/projects/{projectId}/services/{serviceId}/resume.
| Name | Type | Req | Description |
|---|---|---|---|
| disabledCD | boolean | – | Whether CD should be disabled after resume. |
| disabledCI | boolean | – | Whether CI should be disabled after resume. |
| enableAutoscaling | boolean | – | Restore autoscaling (defaults to the state captured when paused). |
| instances | integer | – | Instances to scale to on resume. |
| projectId | string | yes | Project id. |
| serviceId | string | yes | Service id. |
No output schema declared.
No examples provided.
northflank_scale_service Scale service (mutates infra) ~77
MUTATING: set the number of running instances (replicas) for a service. POST /v1/projects/{projectId}/services/{serviceId}/scale.
| Name | Type | Req | Description |
|---|---|---|---|
| instances | integer | yes | Desired number of instances / replicas. |
| projectId | string | yes | Project id. |
| serviceId | string | yes | Service id. |
No output schema declared.
No examples provided.
northflank_trigger_service_build Trigger service build (mutates infra) ~146
MUTATING: start a new build for a build/combined service. With an empty body it builds the latest commit on the linked branch; optionally target a branch, a specific commit sha, or a pull request. POST /v1/projects/{projectId}/services/{serviceId}/build.
| Name | Type | Req | Description |
|---|---|---|---|
| branch | string | – | Branch to build (defaults to the service's linked branch). |
| projectId | string | yes | Project id. |
| pullRequestId | string | – | Build the latest commit of this pull request's branch. |
| serviceId | string | yes | Build/combined service id. |
| sha | string | – | Specific commit SHA to build from the branch. |
No output schema declared.
No examples provided.
How do I install the Northflank MCP by usefulapi server?
Northflank MCP by usefulapi is a hosted endpoint at https://northflank.usefulapi.io/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · northflank.usefulapi.io
claude mcp add --transport http io-usefulapi-northflank 'https://northflank.usefulapi.io/mcp'
What is the Northflank MCP by usefulapi server?
Northflank MCP by usefulapi is listed in the public MCP registry as io.usefulapi/northflank. Inspect and control your Northflank projects, services, jobs, and builds from your AI assistant. This page covers its hosted endpoint (https://northflank.usefulapi.io/mcp).
Is the Northflank MCP by usefulapi server safe to use?
Northflank MCP by usefulapi scores 18 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Northflank MCP by usefulapi server expose?
Northflank MCP by usefulapi exposes 20 tools: northflank_list_repositories, northflank_list_plans, northflank_create_combined_service, northflank_list_projects, northflank_get_project, and 15 more. Their descriptions and schemas cost roughly 2,476 tokens of context every time the server is loaded.
Does the Northflank MCP by usefulapi server require authentication?
Its publisher declares no required credentials for Northflank MCP by usefulapi. We have not been able to confirm that against the live endpoint, and a server can require authorisation without declaring it here.
Is the Northflank MCP by usefulapi server still maintained?
Northflank MCP by usefulapi is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What did VerifyMCP test on the Northflank MCP by usefulapi server?
VerifyMCP ran 4 checks on Northflank MCP by usefulapi, covering TLS certificate, HSTS header, DNSSEC and Transport. 7 items could not be completed, a gap on our side rather than a finding about Northflank MCP by usefulapi: Authorization, HTTPS, Schema quality, Stability and 3 more. 5 categories score 0 for that reason, because we only credit what we can confirm. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.