IBM Code Engine MCP Server

NPM · CODE-ENGINE-MCP-SERVER · SCANNED AUG 3

Deploy to IBM Code Engine from Cursor, Copilot, Claude & Cline. Build, push, deploy via MCP.

Available components

+21 this week 65 65 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (108 of 109), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (108 of 109), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (Apache-2.0).Pass
Actively maintained (last published 29 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability64

AI-judged instruction clarity (good).Pass
Tool/resource definitions use about 4603 tokens (~70/item across 65 items; 65 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management23

Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage85

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
56% of tool parameters carry a description.Partial

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · code-engine-mcp-server

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add markusvankempen-code-engine-mcp-server -- npx -y code-engine-mcp-server

# add to Codex CLI

codex mcp add markusvankempen-code-engine-mcp-server -- npx -y code-engine-mcp-server

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "markusvankempen-code-engine-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "code-engine-mcp-server"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add markusvankempen-code-engine-mcp-server --command npx --arg -y --arg code-engine-mcp-server

# ~/.hermes/config.yaml

mcp_servers:
  markusvankempen-code-engine-mcp-server:
    command: "npx"
    args: ["-y", "code-engine-mcp-server"]

// mcp.json

{
  "mcpServers": {
    "markusvankempen-code-engine-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "code-engine-mcp-server"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.
2 Aug 26 +44
- Provenance: unverified → fail ▼ security
- Known CVEs: unverified → partial ▲ security
- Install scripts: unverified → pass ▲ security
- Malware scan: unverified → pass ▲ security
- Security disclosure: fail → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Stability: unverified → 0.20 ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Schema quality: unverified → good ▲ functional
- First check of Schema quality: unverified functional
- Licence: Apache-2.0 functional
31 Jul 26 −6
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −18
- Malware scan: pass → unverified ▼ security
27 Jul 26 44

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 108 packages

108 packages in the resolved dependency tree · 108 deprecated · 32 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 65 exposed · ~4,603 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

build_container_image ~64

Build a container image using Docker or Podman

Input Output Examples

Name	Type	Req	Description
context_path	string	yes	Build context path
dockerfile_path	string	yes	Path to Dockerfile
image_name	string	yes	Image name with tag
runtime	string	—	Container runtime

No output schema declared.

No examples provided.

ce_create_application ~240

Create a Code Engine application from a container image

Input Output Examples

Name	Type	Req	Description
env_vars	object	—	Key/value environment variables
image	string	yes	Container image reference
image_secret	string	—	Registry secret name for pulling the image (e.g. icr-pull-secret)
name	string	yes	—
port	number	—	Container port (default 8080)
project_id	string	yes	—
run_args	array	—	Arguments passed to the container entrypoint (run_arguments). Required for supergateway: ["--stdio", "npx -y <mcp-server>", "--outputTransport", "sse"]
run_commands	array	—	Override the container entrypoint (run_commands). Rarely needed — use run_args for passing flags.
scale_cpu_limit	string	—	CPU limit (e.g. 1, 0.5)
scale_max_instances	number	—	Max instances (default 10)
scale_memory_limit	string	—	Memory limit (e.g. 4G, 2G)
scale_min_instances	number	—	Min instances (default 0)

No output schema declared.

No examples provided.

ce_create_binding ~105

Create a service binding to connect an IBM Cloud service instance to a Code Engine component

Input Output Examples

Name	Type	Req	Description
component_name	string	yes	Name of the CE app or job to bind the service to
component_resource_type	string	yes	Resource type of the component
prefix	string	—	Prefix for environment variable names injected into the component (optional)
project_id	string	yes	—
secret_name	string	yes	Name of the operator secret referencing the IBM Cloud service instance

No output schema declared.

No examples provided.

ce_create_config_map ~46

Create a configmap in a Code Engine project

Input Output Examples

Name	Type	Req	Description
data	object	yes	Key/value configuration data
name	string	yes	—
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_create_domain_mapping ~122

Map a custom domain to a Code Engine application. Requires a TLS secret created with ce_create_tls_secret_from_pem. The domain CNAME must point to custom.<subdomain>.us-south.codeengine.appdomain.cloud (returned by this call).

Input Output Examples

Name	Type	Req	Description
app_name	string	yes	Code Engine application to route traffic to
domain_name	string	yes	Custom domain (e.g. starwars.cranfordpub.ca)
project_id	string	yes	—
tls_secret	string	yes	Name of the TLS secret containing the certificate and key

No output schema declared.

No examples provided.

ce_create_job ~91

Create a job definition in Code Engine

Input Output Examples

Name	Type	Req	Description
env_vars	object	—	—
image	string	yes	Container image reference
name	string	yes	—
project_id	string	yes	—
scale_array_spec	string	—	Array indices (e.g. 0-9 for 10 instances)
scale_cpu_limit	string	—	—
scale_memory_limit	string	—	—

No output schema declared.

No examples provided.

ce_create_job_run ~54

Submit a job run from an existing job definition

Input Output Examples

Name	Type	Req	Description
job_name	string	yes	Job definition name to run
name	string	—	Optional name for this job run
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_create_project ~60

Create a new Code Engine project

Input Output Examples

Name	Type	Req	Description
name	string	yes	Project name
region	string	yes	IBM Cloud region (e.g. us-south, ca-tor)
resource_group_id	string	—	Resource group ID (optional)

No output schema declared.

No examples provided.

ce_create_secret ~71

Create a secret in a Code Engine project (generic, registry, ssh_auth, etc.)

Input Output Examples

Name	Type	Req	Description
data	object	yes	Key/value pairs (values must be base64 encoded for binary formats)
format	string	yes	Secret type
name	string	yes	—
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_create_tls_secret_from_pem ~157

Create a TLS secret in Code Engine by reading certificate and key PEM files from disk. Use this after obtaining a cert with certbot. The cert and key are read from the given file paths and stored as a Code Engine secret of format "tls".

Input Output Examples

Name	Type	Req	Description
cert_pem_path	string	yes	Absolute path to the certificate PEM file (e.g. ~/certbot/config/live/<domain>/fullchain.pem)
key_pem_path	string	yes	Absolute path to the private key PEM file (e.g. ~/certbot/config/live/<domain>/privkey.pem)
project_id	string	yes	—
secret_name	string	yes	Name for the TLS secret (e.g. my-domain-tls)

No output schema declared.

No examples provided.

ce_delete_application ~31

Delete a Code Engine application

Input Output Examples

Name	Type	Req	Description
app_name	string	yes	—
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_delete_binding ~35

Delete a service binding from a Code Engine project

Input Output Examples

Name	Type	Req	Description
binding_id	string	yes	—
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_delete_config_map ~37

Delete a configmap from a Code Engine project

Input Output Examples

Name	Type	Req	Description
config_map_name	string	yes	—
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_delete_domain_mapping ~43

Delete a custom domain mapping from a Code Engine project

Input Output Examples

Name	Type	Req	Description
domain_name	string	yes	The custom domain name to remove
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_delete_job ~32

Delete a Code Engine job definition

Input Output Examples

Name	Type	Req	Description
job_name	string	yes	—
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_delete_project ~23

Delete a Code Engine project

Input Output Examples

Name	Type	Req	Description
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_delete_secret ~34

Delete a secret from a Code Engine project

Input Output Examples

Name	Type	Req	Description
project_id	string	yes	—
secret_name	string	yes	—

No output schema declared.

No examples provided.

ce_get_app_instance ~56

Get status details for a specific running instance of a Code Engine application

Input Output Examples

Name	Type	Req	Description
app_name	string	yes	—
instance_name	string	yes	Instance name (from ce_list_app_instances)
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_get_app_logs ~123

Get logs for a Code Engine application. Retrieves logs from all running pods (or a specific instance) via the Code Engine Kubernetes API proxy.

Input Output Examples

Name	Type	Req	Description
app_name	string	yes	Application name
instance_name	string	—	Optional: specific pod/instance name to filter to (e.g. my-app-00001-deployment-abcde). If omitted, logs from all pods are returned.
project_id	string	yes	Project ID or name
tail_lines	number	—	Number of log lines to return per pod (default: 100)

No output schema declared.

No examples provided.

ce_get_app_revision ~46

Get details of a specific revision of a Code Engine application

Input Output Examples

Name	Type	Req	Description
app_name	string	yes	—
project_id	string	yes	—
revision_name	string	yes	—

No output schema declared.

No examples provided.

ce_get_application ~33

Get details of a Code Engine application

Input Output Examples

Name	Type	Req	Description
app_name	string	yes	—
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_get_binding ~50

Get details of a specific service binding in a Code Engine project

Input Output Examples

Name	Type	Req	Description
binding_id	string	yes	The binding ID (use ce_list_bindings to find it)
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_get_config_map ~40

Get details of a specific configmap in a Code Engine project

Input Output Examples

Name	Type	Req	Description
config_map_name	string	yes	—
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_get_domain_mapping ~50

Get details of a specific custom domain mapping

Input Output Examples

Name	Type	Req	Description
domain_name	string	yes	The custom domain name (e.g. starwars.cranfordpub.ca)
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_get_job ~35

Get details of a specific Code Engine job definition

Input Output Examples

Name	Type	Req	Description
job_name	string	yes	—
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_get_job_run ~36

Get status and details of a job run

Input Output Examples

Name	Type	Req	Description
job_run_name	string	yes	—
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_get_project ~30

Get details of a specific Code Engine project

Input Output Examples

Name	Type	Req	Description
project_id	string	yes	Project ID (UUID)

No output schema declared.

No examples provided.

ce_get_project_status ~36

Get the status details of a Code Engine project (readiness, enabled components, etc.)

Input Output Examples

Name	Type	Req	Description
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_get_secret ~38

Get metadata for a specific secret (keys only, no values)

Input Output Examples

Name	Type	Req	Description
project_id	string	yes	—
secret_name	string	yes	—

No output schema declared.

No examples provided.

ce_list_app_instances ~39

List all running instances (pods) of a Code Engine application

Input Output Examples

Name	Type	Req	Description
app_name	string	yes	—
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_list_app_revisions ~41

List all revisions (deployed versions) of a Code Engine application

Input Output Examples

Name	Type	Req	Description
app_name	string	yes	—
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_list_applications ~26

List applications in a Code Engine project

Input Output Examples

Name	Type	Req	Description
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_list_bindings ~37

List all service bindings in a Code Engine project (bindings connect IBM Cloud services to apps/jobs)

Input Output Examples

Name	Type	Req	Description
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_list_config_maps ~27

List configmaps in a Code Engine project

Input Output Examples

Name	Type	Req	Description
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_list_domain_mappings ~30

List all custom domain mappings in a Code Engine project

Input Output Examples

Name	Type	Req	Description
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_list_egress_ips ~43

List the public egress IP addresses used by a Code Engine project (useful for allowlisting in firewalls)

Input Output Examples

Name	Type	Req	Description
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_list_job_runs ~62

List job runs in a Code Engine project

Input Output Examples

Name	Type	Req	Description
job_name	string	—	Filter by job definition name (optional)
limit	number	—	Maximum results to return
project_id	string	yes	—
start	string	—	Pagination token

No output schema declared.

No examples provided.

ce_list_jobs ~26

List job definitions in a Code Engine project

Input Output Examples

Name	Type	Req	Description
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_list_projects ~37

List all Code Engine projects across all or a specific region

Input Output Examples

Name	Type	Req	Description
region	string	—	IBM Cloud region (omit to search all regions)

No output schema declared.

No examples provided.

ce_list_secrets ~26

List secrets in a Code Engine project

Input Output Examples

Name	Type	Req	Description
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_refresh_icr_pull_secret ~148

Refresh a Code Engine registry pull secret for IBM Container Registry (ICR) using the server's own IBM Cloud API key. Automatically deletes the existing secret and recreates it with fresh credentials. Use this when deployments fail with "no_revision_ready" or "unknown" status — a common cause is a stale or expired ICR pull secret. No API key input required — the server uses its own IBMCLOUD_API_KEY.

Input Output Examples

Name	Type	Req	Description
icr_host	string	—	ICR registry hostname (default: us.icr.io)
project_id	string	yes	—
secret_name	string	—	Name of the registry secret to refresh (default: icr-pull-secret)

No output schema declared.

No examples provided.

ce_renew_tls_secret_from_pem ~125

Renew an existing TLS secret in Code Engine by reading updated PEM files from disk. Use this when a Let's Encrypt cert has been renewed (every 90 days). Updates the secret in-place — no need to delete and recreate or update domain mappings.

Input Output Examples

Name	Type	Req	Description
cert_pem_path	string	yes	Path to the renewed fullchain.pem (~ supported)
key_pem_path	string	yes	Path to the renewed privkey.pem (~ supported)
project_id	string	yes	—
secret_name	string	yes	Name of the existing TLS secret to renew

No output schema declared.

No examples provided.

ce_update_application ~134

Update an existing Code Engine application (image, scaling, etc.)

Input Output Examples

Name	Type	Req	Description
app_name	string	yes	—
image	string	—	New container image reference
image_secret	string	—	Registry secret name for pulling the image
project_id	string	yes	—
run_args	array	—	Arguments passed to the container entrypoint (run_arguments)
run_commands	array	—	Override the container entrypoint (run_commands)
scale_cpu_limit	string	—	—
scale_max_instances	number	—	—
scale_memory_limit	string	—	—
scale_min_instances	number	—	—

No output schema declared.

No examples provided.

ce_update_config_map ~53

Update an existing Code Engine configmap (PATCH)

Input Output Examples

Name	Type	Req	Description
config_map_name	string	yes	—
data	object	yes	New key/value data to replace configmap contents
project_id	string	yes	—

No output schema declared.

No examples provided.

ce_update_domain_mapping ~74

Update an existing Code Engine custom domain mapping (PATCH) — e.g. change the target app

Input Output Examples

Name	Type	Req	Description
app_name	string	—	New application to route traffic to
domain_name	string	yes	—
project_id	string	yes	—
tls_secret	string	—	New TLS secret name (optional)

No output schema declared.

No examples provided.

ce_update_job ~105

Update an existing Code Engine job definition (PATCH)

Input Output Examples

Name	Type	Req	Description
env_vars	object	—	Key/value environment variables
image	string	—	New container image reference
image_secret	string	—	—
job_name	string	yes	—
project_id	string	yes	—
scale_array_spec	string	—	Array indices to run (e.g. "0-9")
scale_cpu_limit	string	—	—
scale_memory_limit	string	—	—

No output schema declared.

No examples provided.

ce_update_secret ~109

Update an existing Code Engine secret in-place (PATCH). Use ce_renew_tls_secret_from_pem for TLS cert renewal. For generic secrets supply a data object with the new key/value pairs.

Input Output Examples

Name	Type	Req	Description
data	object	yes	New key/value data to replace the secret contents
format	string	—	Secret format if changing: generic, registry, tls, ssh_auth, basic_auth
project_id	string	yes	—
secret_name	string	yes	Name of the secret to update

No output schema declared.

No examples provided.

ce_wait_for_app_ready ~83

Poll a Code Engine application until its status becomes "ready" or a timeout is reached. Returns immediately when ready. Useful after ce_create_application or ce_update_application to confirm the new revision is live.

Input Output Examples

Name	Type	Req	Description
app_name	string	yes	—
project_id	string	yes	—
timeout_seconds	number	—	Max seconds to wait (default 120)

No output schema declared.

No examples provided.

detect_container_runtime ~19

Detect available container runtime (Docker or Podman)

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

iam_get_token_info ~43

Get information about the current IBM Cloud IAM token — account ID, subject, expiry time, and remaining validity. Useful for diagnosing authentication failures without exposing the token itself.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug