Spinnaker

io.github.GeiserXPublished by GitHub account GeiserXv0.4.1Updated Oct 29, 2026

MCP server exposing Spinnaker CD platform via Gate API for pipeline and deployment management

VerifiedSTDIODesktop onlyCloud & InfrastructureDeveloper Tools

Overview

AI-generated overview

Bridges a Spinnaker continuous-delivery instance to an assistant through the Gate API, exposing 38 tools for pipelines, executions and infrastructure.

What you can do
  • List, read, trigger, save, update and delete pipelines and deployment strategies, with revision history
  • List and search executions by pipeline, trigger type, time range and status; read compact summaries
  • Approve or reject Manual Judgment, cancel, pause, resume, restart a stage, evaluate SpEL
  • Inspect server groups, load balancers, clusters, firewalls, instances and console output, images, networks, subnets and accounts
  • Check orchestration task status for deploy, resize and rollback
When to use it
Useful when an assistant should help operate or investigate a Spinnaker deployment setup: reviewing pipeline definitions, tracking or searching executions, checking infrastructure state, or, if enabled, triggering and judging pipelines.
Requirements
Runs locally over stdio (npm package via npx, Docker image or Go binary); Node 18 or newer for the npm package, which downloads the Go binary on first run. Requires GATE_URL and one credential: GATE_TOKEN, GATE_USER with GATE_PASS, GATE_CERT_FILE with GATE_KEY_FILE, or a Gate session cookie via GATE_COOKIE, GATE_COOKIE_FILE or the login command. Network access to the Gate API.
Before you install
Credentials such as GATE_TOKEN, GATE_PASS and GATE_COOKIE grant access to your delivery platform and are passed as environment variables. The default toolset is read-only, but TOOLSETS=all registers tools that trigger, cancel, edit, delete and judge pipelines, which can change or tear down deployments. GATE_INSECURE disables TLS verification and is meant for testing only. The npm package downloads a platform binary on first run.

Installation

In SourceWeft

  1. Open Spinnaker in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

[spinnaker-mcp banner]

spinnaker-mcp

[npm] [CI] [Coverage] [Docker Pulls] [License]

A bridge that exposes any Spinnaker instance as an MCP server via the Gate API, written in Go.

It gives an LLM 38 tools to read and operate Spinnaker: applications, pipelines, executions, strategies and infrastructure. By default only the 27 read tools are registered; TOOLSETS=all adds the 11 that change things.

[MCP Inspector connected to spinnaker-mcp started with TOOLSETS=readonly: only read tools are listed, and search_executions is selected with its arguments]

Features

  • Applications and pipelines: list, read, trigger, save, update and delete pipelines, with revision history.
  • Executions: list, search by pipeline, trigger type, time range and status, read a compact summary, approve or reject a Manual Judgment, cancel, pause, resume, restart a stage, evaluate SpEL.
  • Deployment strategies: list, save and delete.
  • Infrastructure: server groups, load balancers, clusters, firewalls, instances and console output, images, networks, subnets, accounts.
  • Orchestration task status (deploy, resize, rollback).
  • Bearer token, basic auth, x509 client certificate, or the session cookie of a Gate behind SSO (spinnaker-mcp login).
  • MCP 2026-07-28 and every earlier version down to 2024-11-05, on both transports, so current clients and older ones connect.
  • Every tool has a title and all four annotation hints; read tools return structured output with a schema.
  • stdio or stateless Streamable HTTP. HTTP binds to 127.0.0.1, needs a bearer token (MCP_AUTH_TOKEN) anywhere else, and rejects cross-site browser requests.
  • Ships as an npm package (npx spinnaker-mcp), a Docker image and multi-arch Go binaries.

Quick start

Claude Code:

bash
claude mcp add spinnaker -e GATE_URL=https://spin-gate.example.com -e GATE_TOKEN=your-token-here -- npx -y spinnaker-mcp

Claude Desktop (claude_desktop_config.json) and Cursor (.cursor/mcp.json):

json
{  "mcpServers": {    "spinnaker": {      "command": "npx",      "args": ["-y", "spinnaker-mcp"],      "env": { "GATE_URL": "https://spin-gate.example.com", "GATE_TOKEN": "your-token-here" }    }  }}

VS Code (.vscode/mcp.json):

json
{  "servers": {    "spinnaker": {      "command": "npx",      "args": ["-y", "spinnaker-mcp"],      "env": { "GATE_URL": "https://spin-gate.example.com", "GATE_TOKEN": "your-token-here" }    }  }}

Codex (~/.codex/config.toml):

toml
[mcp_servers.spinnaker]command = "npx"args = ["-y", "spinnaker-mcp"]env = { GATE_URL = "https://spin-gate.example.com", GATE_TOKEN = "your-token-here" }

Add "TOOLSETS": "all" to env to let the assistant trigger, judge, cancel or edit. Needs Node 18 or newer; the npm package fetches the Go binary for your platform on first run, checks it against the release checksums, and runs it over stdio. Docker, local builds and the other credentials are in Getting started.

A variable whose value is only an unexpanded placeholder, such as ${GATE_TOKEN}, counts as unset.

Documentation

The full documentation is at geiserx.github.io/spinnaker-mcp.

  • Getting started: npm, Docker, Helm, local build, and the client configuration
  • Configuration: every environment variable, the read-only toolset, the HTTP endpoints
  • Usage: the 38 tools and which ones change Spinnaker, the 10 resources, the 5 prompts
  • Development: testing, contributing, credits
  • Related projects: the other MCP servers and the registry listings

License

GPL-3.0-or-later

Source: README.md at commit ca22832

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

5
  1. v0.4.1LatestOct 29, 2026
  2. v0.3.7Oct 21, 2026
  3. v0.3.6Oct 10, 2026
  4. v0.3.5Oct 5, 2026
  5. v0.3.2Sep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts