Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Komodo MCP Server

NPM · KOMODO-MCP-SERVER · 2 COMPONENTS

MCP server for Komodo - manage Docker containers, servers, stacks, and deployments via AI

−4 this week 90 Trust /100

Last scanned (13 hours ago)

Scores higher than 93% of npm servers

Category Cloud Infrastructure

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security90
  • No malware found by supply-chain analysis.Pass
  • CVE check failed: a known high-severity CVE affects zod 3.25.76, reached via mcp-server-framework > zod. A fixed version is available. View diagnostics → Fail
  • No install/post-install scripts declared.Pass
  • Dependency health was assessed across the 191 of 192 dependencies we could resolve, so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency100
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to MP-Tool/komodo-mcp-server). View diagnostics → Pass
  • Clear OSI-approved license (GPL-3.0).Pass
  • Actively maintained (last published 85 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability82
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 8790 tokens (~99/item across 88 items; 88 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management70
  • Stability observed for 21 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 15 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 88 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.

  • 3 Nov 26 −5
    • Stability: pass → 0.63 functional
  • 28 Oct 26 +1
    • Stability: 0.97 → pass security
  • 27 Oct 26 −1
    • Stability: pass → 0.97 functional
  • 24 Oct 26 −2
    • CVE-2023-54404 affects this package: high ▼ security
    • Known CVEs: partial → fail ▼ security
  • 21 Oct 26 0
    • Stability: 0.97 → pass security
  • 20 Oct 26 0
    • Stability: pass → 0.97 functional
  • 17 Oct 26 +2
    • Stability: 0.83 → pass security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed npm/komodo-mcp-server@1.5.0

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo MP-Tool/komodo-mcp-server
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/MP-Tool/komodo-mcp-server/.github/workflows/publish-npm.yml@refs/heads/main
Rekor log index 2424263737
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha512:49e0916eb51d52126803602363bbe97538f20dbafcec81bc9d553d6ee19f3d8e5eeb231325b79ba2e70b33407bc89a5a7ac20e002e7b5b89104f50cf9

Background: How many MCP packages publish verified provenance →

Vulnerabilities 1 finding
ID CVE Severity Vector Fix available
GHSA-mrhx-c7xc-m3w5 CVE-2023-54404 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes

Background: What a vulnerability scan can and cannot prove →

Dependencies 191 packages
Packages resolved 191
Deprecated 5
Stale 42
No linked repository 1
Tree resolution Partial

The dependency tree was only partially resolved, so these counts may be incomplete.

Background: SBOMs and build attestations, explained →

MCP tools · 88 exposed · ~8,790 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
komodo_resource_sync_action ~104

Lifecycle action on a Komodo ResourceSync. 'run' executes the sync (applies pending changes — long-running, polled). 'refresh' updates the pending-changes preview without applying anything.

NameTypeReqDescription
actionstringyesLifecycle action: 'run' executes the sync (applies pending changes — long-running, polled). 'refresh' updates the pending-changes preview without applying anything.
resource_syncstringyesResourceSync id or name
NameTypeReqDescription
actionstringyesAction name that was executed (start, stop, deploy, prune, ...)
resource_idstringyesTarget resource ID or name
resource_typestringyesTarget resource type (container, deployment, stack, server)
serverstring–Target server, when the action runs against a host
statusstringyesUpdate status reported by Komodo (Complete, InProgress, Queued, ...)
successbooleanyesWhether the action completed successfully
versionstring–Resulting version string, when the action produces one (e.g. deploy)

No examples provided.

komodo_resource_sync_apply ~192

Create or update a Komodo ResourceSync (PATCH-style on update). Not executed automatically — call `komodo_resource_sync_action` with action='run' afterwards. action="create": new sync. Required: name. Provide `config` with repo+branch+resource_path or inline file_contents. action="update": existing sync (`resource_sync` required). Only fields in `config` change.

NameTypeReqDescription
actionstringyes'create' to register a new resource sync, 'update' to PATCH an existing one
configobject–ResourceSync configuration (repo, branch, resource_path[], file_contents, managed, etc.). Only specify fields you want to set or update.
namestring–Required when action='create' — unique name for the new resource sync
resource_syncstring–Required when action='update' — existing resource sync id or name
NameTypeReqDescription
actionstringyesWhich apply action was performed
resourceobject–Full resource returned by Komodo (when available)
resource_idstringyesResource id or name affected
resource_typestringyesTarget resource type

No examples provided.

komodo_resource_sync_delete ~45

Unregister a ResourceSync from Komodo. Resources created via previous syncs are not removed.

NameTypeReqDescription
resource_syncstringyesResourceSync id or name to delete
NameTypeReqDescription
actionstringyesAlways 'remove' for delete tools
resourceobject–Snapshot of the deleted resource (when available)
resource_idstringyesResource id or name that was removed
resource_typestringyesTarget resource type

No examples provided.

komodo_resource_sync_info ~62

Get the full Komodo ResourceSync resource including pending diffs.

NameTypeReqDescription
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
resource_syncstringyesResourceSync id or name
NameTypeReqDescription
info––Full resource sync payload, when returned inline
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_resource_sync_list ~84

List all resource syncs registered in Komodo. Shows configured repo+branch, managed mode, and last successful sync timestamp/hash.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
NameTypeReqDescription
itemsarrayyesResourceSyncs registered in Komodo
pageobject–Pagination envelope for list responses

No examples provided.

komodo_server_action ~142

Host-level operations on a Komodo server: batch container lifecycle (start/restart/pause/unpause/stop all), Docker resource pruning (containers, images, volumes, networks, system, builders, buildx), or deletion of named networks/images/volumes. Destructive — frees disk space or stops workloads.

NameTypeReqDescription
actionstringyesAction to perform. Batch container ops act on every container on the host. Prune ops free disk space. Delete ops require `name`.
namestring–Required for delete_network/delete_image/delete_volume. Name of the resource to delete.
serverstringyesTarget server (id or name)
NameTypeReqDescription
actionstringyesAction name that was executed (start, stop, deploy, prune, ...)
resource_idstringyesTarget resource ID or name
resource_typestringyesTarget resource type (container, deployment, stack, server)
serverstring–Target server, when the action runs against a host
statusstringyesUpdate status reported by Komodo (Complete, InProgress, Queued, ...)
successbooleanyesWhether the action completed successfully
versionstring–Resulting version string, when the action produces one (e.g. deploy)

No examples provided.

komodo_server_apply ~144

Create or update a Komodo Server (PATCH-style; safe to call repeatedly). action="create": new server. Required: name. Periphery agent must be reachable at config.address. action="update": existing server (`server` required). Only fields in `config` change.

NameTypeReqDescription
actionstringyes'create' to register a new server, 'update' to PATCH an existing one
configobject–Server configuration fields to update (partial update)
namestring–Required when action='create' — unique name for the new server
serverstring–Required when action='update' — existing server id or name
NameTypeReqDescription
actionstringyesWhich apply action was performed
resourceobject–Full resource returned by Komodo (when available)
resource_idstringyesResource id or name affected
resource_typestringyesTarget resource type

No examples provided.

komodo_server_delete ~29

Delete (unregister) a server

NameTypeReqDescription
serverstringyesServer ID or name
NameTypeReqDescription
actionstringyesAlways 'remove' for delete tools
resourceobject–Snapshot of the deleted resource (when available)
resource_idstringyesResource id or name that was removed
resource_typestringyesTarget resource type

No examples provided.

komodo_server_info ~54

Get detailed information about a specific server

NameTypeReqDescription
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
serverstringyesServer ID or name
NameTypeReqDescription
info––Full server resource payload, when returned inline
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_server_list ~86

List all servers registered in Komodo. Shows server name, ID, status (healthy/unhealthy/disabled), Periphery version, and region.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
NameTypeReqDescription
itemsarrayyesServers registered in Komodo
pageobject–Pagination envelope for list responses

No examples provided.

komodo_server_stats ~57

Get server health status and state. Returns whether the Periphery agent is reachable and the server is healthy. For detailed system metrics, use komodo_server_info.

NameTypeReqDescription
serverstringyesServer ID or name to get stats for
NameTypeReqDescription
resourceLinkobject–Reference to a server-exposed resource
serverstringyesServer ID
statusstringyesHealth status reported by Periphery

No examples provided.

komodo_stack_action ~116

Lifecycle action on a Compose stack: deploy (up), pull, start, restart, pause, unpause, stop, destroy (down — removes containers). destroy is destructive; config preserved.

NameTypeReqDescription
actionstringyesLifecycle action: deploy (compose up / re-deploy), pull (pull latest images), start (compose start), restart (stop+start), pause/unpause (freeze/resume processes), stop (compose stop), destroy (compo…
stackstringyesStack ID or name
NameTypeReqDescription
actionstringyesAction name that was executed (start, stop, deploy, prune, ...)
resource_idstringyesTarget resource ID or name
resource_typestringyesTarget resource type (container, deployment, stack, server)
serverstring–Target server, when the action runs against a host
statusstringyesUpdate status reported by Komodo (Complete, InProgress, Queued, ...)
successbooleanyesWhether the action completed successfully
versionstring–Resulting version string, when the action produces one (e.g. deploy)

No examples provided.

komodo_stack_apply ~187

Create or update a Docker Compose stack in Komodo (PATCH-style). action="create": new stack. Required: name. Recommended: server_id (Compose) or swarm_id (Swarm). action="update": existing stack (`stack` required). Only fields in `config` change. File source on create: file_contents | repo+branch | files_on_host.

NameTypeReqDescription
actionstringyes'create' to register a new stack, 'update' to PATCH an existing one
configobject–Stack configuration fields to update (partial update)
namestring–Required when action='create' — unique name for the new stack
server_idstring–Convenience field for action='create' — target server (mirrors `config.server_id`)
stackstring–Required when action='update' — existing stack id or name
NameTypeReqDescription
actionstringyesWhich apply action was performed
resourceobject–Full resource returned by Komodo (when available)
resource_idstringyesResource id or name affected
resource_typestringyesTarget resource type

No examples provided.

komodo_stack_delete ~41

Delete a Compose stack from Komodo. This removes the stack configuration but does not affect running containers.

NameTypeReqDescription
stackstringyesStack ID or name
NameTypeReqDescription
actionstringyesAlways 'remove' for delete tools
resourceobject–Snapshot of the deleted resource (when available)
resource_idstringyesResource id or name that was removed
resource_typestringyesTarget resource type

No examples provided.

komodo_stack_info ~73

Get detailed information about a Compose stack including configuration, current state, compose file contents, services, and environment variables.

NameTypeReqDescription
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
stackstringyesStack ID or name to get info for
NameTypeReqDescription
info––Full stack resource payload, when returned inline
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_stack_list ~75

List all Komodo-managed Compose stacks. Shows stack name, ID, and current state.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
NameTypeReqDescription
itemsarrayyesStacks visible to the caller
pageobject–Pagination envelope for list responses

No examples provided.

komodo_swarm_action ~258

Swarm management. update_node: change availability/labels/role. remove_nodes: force-remove. remove_services / remove_stacks: equivalents of docker service rm / docker stack rm.

NameTypeReqDescription
actionstringyesSwarm action: update_node | remove_nodes | remove_services | remove_stacks
availabilitystring–For 'update_node': new node availability
detachboolean–For 'remove_stacks': do not wait for removal to complete
forceboolean–For 'remove_nodes': force-remove the node
label_addarray–For 'update_node': labels to add (`key=value`)
label_rmarray–For 'update_node': label keys to remove
nodestring–Required for 'update_node': node hostname or id
nodesarray–Required for 'remove_nodes': node names/ids to remove
rolestring–For 'update_node': new node role
servicesarray–Required for 'remove_services': service names/ids to remove
stacksarray–Required for 'remove_stacks': stack names to remove
swarmstringyesSwarm id or name
NameTypeReqDescription
actionstringyesAction name that was executed (start, stop, deploy, prune, ...)
resource_idstringyesTarget resource ID or name
resource_typestringyesTarget resource type (container, deployment, stack, server)
serverstring–Target server, when the action runs against a host
statusstringyesUpdate status reported by Komodo (Complete, InProgress, Queued, ...)
successbooleanyesWhether the action completed successfully
versionstring–Resulting version string, when the action produces one (e.g. deploy)

No examples provided.

komodo_swarm_apply ~152

Create or update a Komodo Swarm (PATCH-style). Servers in config.server_ids form one Docker Swarm cluster. action="create": new swarm. Required: name. Recommended: config.server_ids. action="update": existing swarm (`swarm` required). Only fields in `config` change.

NameTypeReqDescription
actionstringyes'create' to register a new swarm, 'update' to PATCH an existing one
configobject–Swarm configuration (all fields optional, PATCH-style)
namestring–Required when action='create' — unique name for the new swarm
swarmstring–Required when action='update' — existing swarm id or name
NameTypeReqDescription
actionstringyesWhich apply action was performed
resourceobject–Full resource returned by Komodo (when available)
resource_idstringyesResource id or name affected
resource_typestringyesTarget resource type

No examples provided.

komodo_swarm_delete ~52

Unregister a Swarm from Komodo. Does NOT teardown the underlying Docker Swarm — it only removes the Komodo resource entry.

NameTypeReqDescription
swarmstringyesSwarm id or name to delete
NameTypeReqDescription
actionstringyesAlways 'remove' for delete tools
resourceobject–Snapshot of the deleted resource (when available)
resource_idstringyesResource id or name that was removed
resource_typestringyesTarget resource type

No examples provided.

komodo_swarm_info ~84

Get the full Komodo Swarm resource (manager server ids, links, alert/maintenance configuration). Large payloads are offloaded via a session-scoped resource link when available.

NameTypeReqDescription
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
swarmstringyesSwarm id or name
NameTypeReqDescription
info––Full Swarm resource (only when not offloaded as a resource link)
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_swarm_list ~83

List all swarms registered in Komodo. Each swarm groups one or more Server resources that act as Docker Swarm managers.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
NameTypeReqDescription
itemsarrayyesSwarms registered in Komodo
pageobject–Pagination envelope for list responses

No examples provided.

komodo_swarm_nodes_list ~83

List the Docker nodes participating in a Komodo Swarm.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
swarmstringyesSwarm id or name
NameTypeReqDescription
itemsarrayyesNodes participating in the swarm
pageobject–Pagination envelope for list responses
swarmstringyesSwarm id or name the nodes belong to

No examples provided.

komodo_swarm_services_list ~82

List Docker services running on a Komodo Swarm.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
swarmstringyesSwarm id or name
NameTypeReqDescription
itemsarrayyesServices running on the swarm
pageobject–Pagination envelope for list responses
swarmstringyesSwarm id or name the services belong to

No examples provided.

komodo_tag_apply ~254

Create or update a Komodo Tag. Tags label resources for filtering/grouping. action="create": new tag. Required: name. Optional: color (default Slate). action="update": existing tag (`tag` required). Provide `name` to rename and/or `color` to recolor — at least one; each triggers its own API call (there is no combined update endpoint).

NameTypeReqDescription
actionstringyes'create' a new tag, or 'update' to rename/recolor an existing one
colorstring–Display color. For create: initial color (default Slate). For update: recolor the tag. Named <Shade><Base>, e.g. "Blue", "DarkRed", "LightGreen". Shade ∈ {Light, "", Dark}; Base ∈ {Slate, Red, Orange…
namestring–Required for create — the new tag name. For update, provide to rename the tag.
tagstring–Required for update — existing tag id or name
NameTypeReqDescription
actionstringyesWhich apply action was performed
resourceobject–Full resource returned by Komodo (when available)
resource_idstringyesResource id or name affected
resource_typestringyesTarget resource type

No examples provided.

komodo_tag_delete ~41

Delete a Komodo Tag. Also removes this tag from every resource it was attached to.

NameTypeReqDescription
tagstringyesTag id or name to delete
NameTypeReqDescription
actionstringyesAlways 'remove' for delete tools
resourceobject–Snapshot of the deleted resource (when available)
resource_idstringyesResource id or name that was removed
resource_typestringyesTarget resource type

No examples provided.

komodo_tag_info ~45

Get the full Komodo Tag resource (id, name, owner, color). Tags are small — always returned inline.

NameTypeReqDescription
tagstringyesTag id or name
NameTypeReqDescription
tagobjectyes–

No examples provided.

komodo_tag_list ~76

List all tags registered in Komodo. Tags are labels attached to resources for filtering/grouping.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
NameTypeReqDescription
itemsarrayyesTags registered in Komodo
pageobject–Pagination envelope for list responses

No examples provided.

komodo_toml_export_all ~210

Export every resource the caller can view as sync TOML — the same format komodo_resource_sync_* reads from a git repo. Secret values (variable values, server passkeys, alerter webhook URLs) are redacted, so the export is for inspection and diffing, not for re-applying verbatim via ResourceSync. Large output is offloaded as a session-scoped resource link unless `inline_full` is set.

NameTypeReqDescription
include_resourcesboolean–Include resources (servers, stacks, ...). Default: true
include_user_groupsboolean–Include user groups. Default: false
include_variablesboolean–Include variables. Default: false
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
tagsstring–Filter resources by tag — comma- or newline-separated names/ids (e.g. "prod, web"). Omitted = no tag filter.
NameTypeReqDescription
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–
tomlstring–The exported sync TOML (inline when small or inline_full is set)

No examples provided.

komodo_toml_export_resources ~194

Export a specific set of resources and/or user groups as sync TOML. Secret values are redacted, so the export is for inspection and diffing, not for re-applying verbatim via ResourceSync.

NameTypeReqDescription
include_variablesboolean–Include variables. Default: false
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
targetsstring–Resources to include — comma- or newline-separated "Type:id" entries, e.g. "Stack:web, Deployment:api, Server:prod-1". Type is the Komodo resource type (Server, Stack, Deployment, Build, Repo, Proced…
user_groupsstring–User groups to include — comma- or newline-separated names/ids (e.g. "admins, ops").
NameTypeReqDescription
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–
tomlstring–The exported sync TOML (inline when small or inline_full is set)

No examples provided.

komodo_update_info ~69

Get the full update payload for a single operation, including per-stage logs (stdout/stderr).

NameTypeReqDescription
idstringyesUpdate id (MongoDB ObjectId hex)
inline_fullboolean–If true, return the full payload inline instead of a compact summary. Default: false.
NameTypeReqDescription
info––Full update payload (with stage logs) when returned inline
resourceLinkobject–Reference to a server-exposed resource
summaryobjectyes–

No examples provided.

komodo_update_list ~162

List Komodo update history (audit log of operations like Deploy/RunBuild/RunSync). Newest first. Supports filtering by operation name and resource target. Pagination uses an opaque cursor string (Komodo backend is page-based).

NameTypeReqDescription
cursorstring–Opaque pagination cursor from a previous list call. Omit for the first page.
operationstring–Filter by operation name (e.g. 'Deploy', 'RunBuild')
page_sizeinteger–Maximum number of items to return (1-100)
target_idstring–Filter by resource target id
target_typestring–Filter by resource target type (e.g. 'Stack', 'Deployment', 'Build', 'Repo', 'Procedure')
NameTypeReqDescription
itemsarrayyesUpdate history items
pageobject–Pagination envelope for list responses

No examples provided.

komodo_user_create_api_key ~122

Create a new API key for the currently authenticated Komodo user. Returns the key and secret — the secret is shown only once and cannot be retrieved later. NOTE: the one-time secret is intentionally NOT redacted from this result and persists in the client transcript — rotate the key if the transcript is untrusted. Optionally set an expiry time.

NameTypeReqDescription
expires_in_daysinteger–Number of days until the key expires. 0 means no expiry. Default: 0
namestringyesA descriptive name for the API key
NameTypeReqDescription
expiresintegeryesExpiry timestamp in milliseconds since epoch (0 = never)
keystringyesAPI key ID (public identifier)
namestringyesName assigned to the new key
secretstringyesAPI key secret — shown only on creation, cannot be retrieved later

No examples provided.

komodo_user_delete_api_key ~113

Delete an API key for the currently authenticated Komodo user. Accepts either the key name or the full K_... key string. Use komodo_user_list_api_keys to see available keys.

NameTypeReqDescription
name_or_keystringyesThe key name (e.g. 'mykey') OR the full key string (e.g. 'K_abc...'). Use the name shown in komodo_user_list_api_keys. If multiple keys share the same name, provide the full K_... string.
NameTypeReqDescription
deletedbooleanyesWhether the API key was removed
key_idstringyesThe full K_... key string that was deleted
namestring–The key name, when resolved by name lookup

No examples provided.

komodo_user_list_api_keys ~87

List all API keys for the currently authenticated Komodo user. Shows key name, key ID (not secret), creation date, and expiry.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
NameTypeReqDescription
itemsarrayyesAPI keys for the authenticated user
pageobject–Pagination envelope for list responses

No examples provided.

komodo_variable_apply ~162

Create or update a Komodo Variable (PATCH-style on update). action="create": new variable. Required: name. Optional: value, description, is_secret. action="update": existing variable (name required). Each of value, description, is_secret triggers a separate update call when provided.

NameTypeReqDescription
actionstringyes'create' to register a new variable, 'update' to change an existing variable's value/description/is_secret
descriptionstring–Optional description
is_secretboolean–If true, mark the variable as a secret (value redacted in responses)
namestringyesVariable name (unique key)
valuestring–Variable value — required for action='create'; optional for update
NameTypeReqDescription
actionstringyesWhich apply action was performed
resourceobject–Full resource returned by Komodo (when available)
resource_idstringyesResource id or name affected
resource_typestringyesTarget resource type

No examples provided.

komodo_variable_delete ~48

Delete a Komodo Variable. Stacks/Deployments referencing it via `[[variable.name]]` will fail to interpolate afterwards.

NameTypeReqDescription
namestringyesVariable name (unique key)
NameTypeReqDescription
actionstringyesAlways 'remove' for delete tools
resourceobject–Snapshot of the deleted resource (when available)
resource_idstringyesResource id or name that was removed
resource_typestringyesTarget resource type

No examples provided.

komodo_variable_info ~39

Get a single Komodo variable. Secret variables are redacted for non-admin users.

NameTypeReqDescription
namestringyesVariable name (unique key)
NameTypeReqDescription
variableobjectyes–

No examples provided.

komodo_variable_list ~78

List all global variables registered in Komodo. Secret variables have their value redacted for non-admin users.

NameTypeReqDescription
cursorstring–Opaque pagination cursor returned by a previous list call. Omit for the first page.
page_sizeinteger–Maximum number of items to return (1-100). Default: 25.
NameTypeReqDescription
itemsarrayyesVariables registered in Komodo
pageobject–Pagination envelope for list responses

No examples provided.

Install

How do I install the Komodo MCP Server server?

Komodo MCP Server runs locally as an npm package, launched with npx -y komodo-mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · komodo-mcp-server

# add to Claude Code
claude mcp add mp-tool-komodo-mcp-server -- npx -y komodo-mcp-server
Common questions

What is the Komodo MCP Server server?

Komodo MCP Server is listed in the public MCP registry as io.github.MP-Tool/komodo-mcp-server. MCP server for Komodo - manage Docker containers, servers, stacks, and deployments via AI. This page covers its npm package (komodo-mcp-server).

Is the Komodo MCP Server server safe to use?

Komodo MCP Server scores 90 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Komodo MCP Server server expose?

Komodo MCP Server exposes 88 tools: komodo_health_check, komodo_container_list, komodo_container_inspect, komodo_container_logs, komodo_container_search_logs, and 83 more. Their descriptions and schemas cost roughly 8,790 tokens of context every time the server is loaded.

Is the Komodo MCP Server server still maintained?

Komodo MCP Server is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the Komodo MCP Server server under?

Komodo MCP Server declares the GPL-3.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.