Back to Browse

Devhelmhq MCP Server

Developer ToolsUse Caution4.8MCP RegistryLocal
Free

Server data from the Official MCP Registry

Monitor uptime, manage incidents, configure alerting, and query dependency status via DevHelm

About

Monitor uptime, manage incidents, configure alerting, and query dependency status via DevHelm

Security Report

4.8
Use Caution4.8High Risk

DevHelm MCP server is well-architected with proper authentication, secure token handling, and comprehensive input validation. Authentication is delegated to the DevHelm SDK and transport layer (Bearer auth or env vars), eliminating hardcoded secrets. The code demonstrates strong defensive practices including schema sanitization to prevent token leakage to LLMs, proper error handling with isError flags, and thoughtful path normalization to prevent security-relevant HTTP redirects. Minor code quality observations around exception handling breadth do not materially impact security. Supply chain analysis found 5 known vulnerabilities in dependencies (1 critical, 3 high severity). Package verification found 1 issue.

5 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

file_system

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

DevHelm API token for authenticationRequired

Environment variable: DEVHELM_API_TOKEN

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-devhelmhq-mcp-server": {
      "env": {
        "DEVHELM_API_TOKEN": "your-devhelm-api-token-here"
      },
      "args": [
        "devhelm-mcp-server"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

DevHelm MCP Server

Model Context Protocol (MCP) server for DevHelm — gives AI coding assistants (Cursor, Claude Desktop, Windsurf, etc.) access to your uptime monitors, incidents, alerting, and more.

Quick Start

Hosted (recommended)

Use the hosted server at mcp.devhelm.io. Two connection modes:

Bearer auth:

URL: https://mcp.devhelm.io/mcp
Authorization: Bearer <your-api-token>

API key in URL (for clients that only accept a URL):

URL: https://mcp.devhelm.io/<your-api-token>/mcp

Local (stdio)

pip install devhelm-mcp-server
export DEVHELM_API_TOKEN=your-token
devhelm-mcp-server

Or with uvx (no install required):

export DEVHELM_API_TOKEN=your-token
uvx devhelm-mcp-server

Cursor / Claude Desktop

Add to your MCP config:

{
  "mcpServers": {
    "devhelm": {
      "url": "https://mcp.devhelm.io/<your-api-token>/mcp"
    }
  }
}

Available Tools

CategoryTools
Monitorslist, get, create, update (inline code for BROWSER / MULTI_STEP_API), delete (confirmation), restore, trash, pause, resume, mute, unmute, quarantine, release quarantine, drift, versions, history (list_monitor_results is a deprecated alias until 2027-01-31)
Code checkstest, probe, test ad hoc, run now, trigger; revisions list, get, files, create draft, test, diff, discard; publish and rollback (confirmation), rollback preview
Runsget (run envelope, wait_s ≤ 25), list, steps, console, network, artifacts (screenshots as images, traces/HARs as signed URLs), trace summary, diff, cancel
Accountruntimes list/get, usage, entitlements
Incidentslist, get, create, update, acknowledge, add update, resolve, runs, events, related, trigger; prompt investigate_incident
Alert Channelslist, get, create, update, delete, test
Notification Policieslist, get, create, update, delete, test
Environmentslist, get, create, update, delete
Secretslist, set value, create, update (values via elicitation or a dashboard link, never in chat), delete
Tagslist, get, create, update, delete
Resource Groupslist, get, create, update, delete, add member, remove member
Webhookslist, get, create, update, delete, test
API Keyslist, create, revoke, delete
Dependencieslist, get, track, delete
Deploy Lockacquire, current, release, force-release
Statusoverview
Status Pagespages, components, groups, incidents, maintenance, subscribers, domains
Email Testingcreate address, wait (≤25 s), latest, list/get messages, source, OTP codes, links, inject; domains list, get, create, update, verify, activity
Webhook Testinginboxes list, get, create, update, activity; wait (≤25 s), latest, list/get events

Delete, publish and rollback return {status: "confirmation_required", changes, confirmationToken} first; call again with confirmation_token after the user agrees. Tokens are HMACs signed by the server process (set DEVHELM_MCP_CONFIRMATION_SECRET so every replica shares the key) and last 15 minutes. Errors come back as isError with every ErrorResponse field and a sentence for the agent.

Development

uv sync
make dev          # Start with MCP Inspector (stdio)
make serve        # Start HTTP server on :8000
make test         # Run unit tests
make lint         # Check formatting
make typecheck    # Run mypy

License

MIT

Reviews

No reviews yet

Be the first to review this server!