# MCP server

orkestr exposes an [MCP (Model Context Protocol)](https://modelcontextprotocol.io) endpoint that lets AI coding assistants manage your projects, deployments, and infrastructure as tool calls. Connect Claude Code, Claude Desktop, Cursor, Windsurf, or any MCP-compatible client and use natural language to deploy, monitor, and manage your apps.

> **Different MCP for sandboxes**
>
> This is the **platform-management** MCP server. Sandbox runtime tools (create_sandbox, run_code, read_file, etc.) live on a separate MCP server documented under [Sandboxes MCP server](https://orkestr.eu/docs/sandboxes/mcp). The two have intentionally different blast radius and scope.

## At a glance

- **Endpoint:** `https://orkestr.eu/api/mcp`
- **Transport:** Streamable HTTP
- **Auth:** Bearer API token (mint in Settings -> API)
- **Tools available:** 50+ across all platform resources

## Setup

Mint an API token in the console (Settings -> API), then add one of the snippets below to your MCP client config. Replace `ork_your_token_here` with your actual token.

### Claude Code CLI - one-liner

```bash
claude mcp add --transport http orkestr https://orkestr.eu/api/mcp \
  --header "Authorization: Bearer ork_your_token_here"
```

### Claude Desktop / Claude Code config

Paste into `~/.claude.json` (Claude Code) or `claude_desktop_config.json` (Claude Desktop). Restart the client to load the new MCP.

```json
{
  "mcpServers": {
    "orkestr": {
      "command": "npx",
      "args": [
        "mcp-remote",
        "https://orkestr.eu/api/mcp",
        "--header",
        "Authorization: Bearer ork_your_token_here"
      ]
    }
  }
}
```

### Cursor

Paste into `.cursor/mcp.json` at the root of your workspace. Restart Cursor.

```json
{
  "mcpServers": {
    "orkestr": {
      "url": "https://orkestr.eu/api/mcp",
      "headers": {
        "Authorization": "Bearer ork_your_token_here"
      }
    }
  }
}
```

## Available tools

Every platform action is exposed as an MCP tool with a typed schema. Listed by category below; check your MCP client for the canonical signature.

### Projects

`list_projects`List all your projects.

`get_project`Get project details by name or ID.

`create_project`Create a new project from a git repo.

`update_project`Update project settings.

`delete_project`Delete a project and its infrastructure.

`analyze_project`Detect framework, port, and resources.

### Environments

`list_environments`List environments for a project.

`create_environment`Create a new environment.

`update_environment`Update environment settings.

`delete_environment`Delete a non-production environment.

### Deployments

`deploy`Trigger a deployment (defaults to production).

`list_deployments`List recent deployments.

`get_deployment`Deployment details and pipeline steps.

`get_deployment_logs`Build / deploy logs by step.

`rollback_deployment`Rollback to a previous deployment (Pro+).

### Monitoring

`get_logs`Application runtime logs (stdout / stderr).

`get_stats`Container CPU, memory, network stats.

`get_health`Container status, uptime, restart count.

`get_request_metrics`RPS, error rate, p50 / p95 / p99 latency.

`get_app_health`Live app health badge from traffic + last deploy.

`get_deployment_stats`Success rate, average duration, last deploy.

`sleep_container`Manually put a container to sleep.

`wake_container`Wake a sleeping container.

`get_deployment_build_log`Full builder output for a failed deploy.

### Functions

`list_functions`List your serverless functions.

`get_function`Function details (URL, runtime, status).

`create_function`Create a new serverless function.

`update_function`Update code, deps, auth, env vars, idle timeout.

`delete_function`Destroy the function container and image.

`deploy_function`Build and deploy the function.

`get_function_logs`Recent function container logs.

`invoke_function`Invoke a deployed function and return the response.

`get_function_env_vars`Decrypted env vars for a function.

`get_function_metrics`Function request metrics.

`rotate_function_api_key`Rotate the function API key.

### Project / environment extras

`get_project_env_vars`Decrypted project-level env vars.

`get_environment_env_vars`Decrypted env vars for a specific environment.

`get_project_webhook`Webhook info: provider, URL, last delivery.

`toggle_project_webhook`Enable or disable auto-deploy on git push.

### Add-ons

`list_addons`List databases and caches for a project.

`get_addon`Single add-on with connection URL.

`create_addon`Provision a PostgreSQL or Redis add-on.

`delete_addon`Destroy an add-on and its data.

`toggle_addon_auto_backup`Toggle daily auto-backup on / off.

`get_addon_backup_info`Backup retention, daily quota, next run.

### Backups

`list_backups`List backups for an add-on.

`create_backup`Trigger a manual backup.

`download_backup`Get a download URL for a backup.

`delete_backup`Delete a backup.

### Domains

`list_domains`List your projects with custom domain status.

`verify_domain`Re-check that DNS points to orkestr.

### Registry

`list_registry_images`Docker images stored for a project.

`scan_registry_image`Trigger a security scan.

`delete_registry_image`Delete an image tag. Live tag is protected.

### Activity

`list_activity`Recent activity (audit log).

`get_dashboard_summary`Project count, plan usage, recent deploys.

### Notifications

`list_notifications`50 most recent notifications.

`mark_notifications_read`Mark all notifications as read.

### Project groups

`list_groups`List your project groups (workspaces).

`get_group`Get a group with its assigned projects.

`create_group`Create a project group.

`delete_group`Delete a group (projects are not deleted).

`add_project_to_group`Assign a project to a group.

`remove_project_from_group`Remove a project from a group.

### Auth

`whoami`Show current user info and plan.

## Example prompts

Once connected, use natural language. The model picks the right tool, fills in the arguments from context, and you see the result.

“Deploy my-api to production”

Triggers a deployment for the my-api project.

“Show me the logs for my-api, last 50 lines”

Fetches runtime logs from the container.

“Create a staging environment for my-api on the develop branch”

Creates a new environment with auto-deploy.

“What's the CPU and memory usage of my-api?”

Returns container resource stats.

“Add a PostgreSQL database to my-api”

Provisions a managed Postgres add-on.

“List all my projects and their status”

Shows all projects with framework and status info.

“Roll back my-api to the previous deployment”

Finds the last good deployment and rolls back.

> **Blast radius**
>
> Anything you can do in the console, an MCP-connected agent can do too - including delete a project or revoke a token. Mint a fresh API token specifically for the MCP connection, and revoke it if the workstation it's on is ever lost.