Woodpecker CI MCP server
Read Woodpecker CI repositories, pipelines and logs, and drive builds, secrets and crons
0 stars45 downloads/wk
Reviews
Write oneNobody has reviewed Woodpecker CI yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Woodpecker CI tools (71, 27 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
activate_repositoryTurns on Woodpecker for a repository that exists in the forge, which
approve_pipelineReleases a pipeline that is waiting for approval (status "blocked") and
cancel_pipelinewrite actionStops a pipeline that is pending or running. Its steps are killed where
chown_repositoryMakes the authenticated account the repository's owner in Woodpecker. The
create_agentwrite actionRegisters a new build agent and returns its token. THE TOKEN IS A
create_cronwrite actionSchedules a pipeline run. The pipeline runs with event "cron", so steps
create_forgewrite actionRegisters an additional forge. Admin only, and two-step: a forge is a
create_registrywrite actionStores credentials for a container registry so pipelines can pull private
create_secretwrite actionCreates a secret at the chosen level. The value is write-only: it is never
create_userwrite actionRegisters an account ahead of its first login. Admin only. This does not
decline_pipelineRefuses a pipeline that is waiting for approval. It ends as "declined" and
delete_agentwrite actionRemoves an agent and invalidates its token. Anything it was running is
delete_cronwrite actionRemoves a scheduled run. If you only want it to stop for now,
delete_forgewrite actionRemoves a forge from Woodpecker. Admin only. Everyone who signs in through
delete_organizationwrite actionRemoves an organization from Woodpecker together with its org-level
delete_pipelinewrite actionRemoves a pipeline and everything attached to it, including its logs.
delete_pipeline_logswrite actionDeletes the stored output of every step of a pipeline. The pipeline and its
delete_registrywrite actionRemoves stored credentials for a registry. Pipelines that pull private
delete_repositorywrite actionRemoves a repository from Woodpecker: the webhook, every pipeline, all
delete_secretwrite actionDeletes a secret. Any pipeline that reads it starts failing — or worse,
delete_step_logswrite actionDeletes the stored output of a single step. The step and the pipeline stay,
delete_userwrite actionRemoves an account from Woodpecker. Admin only. Repositories the account
get_agentReturns one agent. Admin only. Its token is redacted; an agent that lost
get_cronReturns one cron job, including the variables it passes.
get_current_userReturns the account WOODPECKER_TOKEN belongs to, including whether it is
get_forgeReturns one forge configuration. Admin only. The OAuth client secret is
get_log_levelReturns the current log level of the Woodpecker server. Admin only.
get_organizationReturns one organization by its numeric id.
get_organization_permissionsWhat the authenticated account may do in this organization: member and
get_pipelineReturns one pipeline with its workflows and steps, including each step id
get_pipeline_configReturns the pipeline YAML files this run was built from, as they were at
get_pipeline_feedThe activity feed of the authenticated account: the latest pipeline of
get_pipeline_metadataReturns the metadata Woodpecker exposes to the pipeline itself — the
get_queue_infoThe server-side build queue: what is pending, running and waiting on an
get_registryReturns one registry entry — its address and username. The password is
get_repositoryReturns the full Woodpecker configuration of one repository: trusted
get_repository_permissionsWhat the authenticated account may do with this repository: pull, push
get_secretReturns one secret's metadata: which events and images it applies to, and
get_server_infoReturns the Woodpecker version and whether the server reports itself
get_step_logsReturns the output of one pipeline step as text, newest end first by
get_userReturns one account by its login. Admin only. forge_id is required — see
list_agent_tasksThe work an agent is currently running. Admin only. This is how you find
list_agentsLists the build agents, with their platform, capacity, version and last
list_cronsLists the scheduled pipeline runs of a repository, with the next execution
list_forgesLists the forges this Woodpecker authenticates against. Admin only. The
list_organizationsLists the organizations known to this Woodpecker instance. Admin only.
list_pipelinesLists a repository's pipelines, newest first, summarised to what a list
list_pull_requestsLists the open pull requests of a repository, with the index a pipeline
list_queued_pipelinesLists the pipelines waiting in the server queue across all repositories.
list_registriesLists the container registry credentials at one level. These are what let
list_repositoriesLists repositories. By default the ones the authenticated account can
list_repository_branchesLists the branches of a repository, as Woodpecker sees them in the forge.
list_secretsLists the secrets at one level — repository, organization or instance-wide.
list_usersLists the accounts known to this Woodpecker instance. Admin only.
lookup_organizationResolves an organization name to its id — the id every other org-level
lookup_repositoryResolves an "owner/name" pair to a repository id. Every other repository
move_repositoryTells Woodpecker that a repository moved to a different owner or name in
pause_queueStops the server from handing new work to agents. Running pipelines finish;
repair_repositoryRe-installs the forge webhook and refreshes the stored repository data.
restart_pipelinewrite actionRuns an existing pipeline again, at the same commit and with the same
resume_queueLets the server hand work to agents again. Admin only. Queued pipelines
run_cronwrite actionStarts the cron job's pipeline immediately, without waiting for its
set_log_levelChanges the log level of the running Woodpecker server, without a restart.
trigger_pipelineStarts a pipeline manually on a branch. It runs the config as it is in
update_agentwrite actionChanges an agent. Admin only. no_schedule=true is the drain switch: the
update_cronwrite actionChanges a cron job. Only the fields you pass are touched — including
update_forgewrite actionChanges a forge configuration. Admin only, and two-step: this is the
update_registrywrite actionChanges the username or password of a registry entry. The address itself
update_repositorywrite actionChanges Woodpecker settings of a repository. Only the fields you pass are
update_secretwrite actionChanges a secret. Only the fields you pass are touched — but "events" and
update_userwrite actionChanges an account. Admin only. The one that matters is "admin": granting
Public scan report
scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it
- Code scan55 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Woodpecker CI compares
Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 83/100
- higher than 65% of 1,119 Developer tools servers
- Tools
- 71
- the typical Developer tools server has 7
- Tools that change things
- 38%
- typical: 5%. Fewer write tools means less an agent can break
- Downloads a week
- 45
- more than 33% of 436 Developer tools servers with a package
What its tools let an agent do: 40 read · 6 create · 10 change · 12 delete · 3 run or deploy
Release history: 2 versions in the registry since 2026-09-07, latest 2026-10-15, typically one every 38 days.
Install Woodpecker CI in Claude Code, Cursor or VS Code
Runs npx -y @ni-c/woodpecker-ci-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add woodpecker-ci-mcp -- npx -y @ni-c/woodpecker-ci-mcp
What the publisher says
From the Woodpecker CI repository's README, as published. We do not edit it. Read it on GitHub
woodpecker-ci-mcp
<!-- badges: start -->
<!-- badges: end -->
A Model Context Protocol (MCP) server for Woodpecker CI, the lightweight container-native CI engine — it runs your pipelines, and this reads and drives them.
Lets MCP clients like Claude Code, Claude Desktop or Codex see which pipelines failed, read the build log of the step that broke, and act on it — restart it, cancel a runaway, approve a blocked one, rotate a secret, fix a cron — with the irreversible operations put to a person first and the write tools switchable off entirely.
71 tools is the ceiling, not the floor: WOODPECKERALLOWTOOLS=essential registers a curated eight instead, and a model picks the right tool far more reliably from eight than from 71 — see choosing which tools load.
What makes it different
It covers the whole API, not the read half. Repositories, pipelines, logs, secrets, registries, crons, organizations, users, agents, forges, the queue and the log level — 71 tools against Woodpecker 3.18.0. The point of an MCP server for a CI system is doing something about what it tells you.
Logs arrive as text. Woodpecker returns a step's output as an array of base64-encoded chunks with line numbers. getsteplogs decodes them, puts them back in order, reports the step's exit code, and returns the end of the log by default — a failing step explains itself in its last lines, and the first 4000 lines of npm ci answer nothing.
Agent tokens do not reach the model. GET /agents returns every agent's token in clear text, and that token is enough to attach a machine to the server and receive pipeline workloads with their secrets. Listing agents through this server redacts it. create_agent still returns one — that is the only way to get it — and says what it is.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Woodpecker CI: common questions
- Is Woodpecker CI MCP server safe?
- Mostly: it is graded B (83/100). Read the Woodpecker CI safety report
- How do I install Woodpecker CI?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Woodpecker CI need an API key?
- Yes. The registry entry asks for
WOODPECKER_TOKEN. - Is Woodpecker CI maintained?
- The last commit was 20 days ago (2026-10-15). The latest release is v0.4.0.
- What can I use instead of Woodpecker CI?
- Servers from other publishers that do the same job: GitLab MCP Server, GitDiagram MCP server and walkerOS Flow MCP server.
- How does Woodpecker CI compare with other Developer tools MCP servers?
- safety score 83/100 (higher than 65% of 1,119 Developer tools servers); tools 71 (the typical Developer tools server has 7); tools that change things 38% (typical: 5%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Woodpecker CI
Same job from other publishers: the closest match first, then the best rated.
- GitLab MCP ServerGitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more.not reviewedWidely usedB
- GitDiagramArchitecture diagrams, explanations and Mermaid source for public GitHub repositories.not reviewedEstablishedA
walkerOS FlowBuild, validate, simulate, and deploy walkerOS event pipelinesnot reviewedEstablishedB- maintenantDocker monitoring for AI agents: logs, history, alerts. Can ack alerts; never touches containers.not reviewedEstablishedC
- ServonautManage AWS, Hetzner, OVH and SSH servers: status, logs, CloudWatch, IP bans, safe command exec.not reviewedEstablishedA