Checkly MCP Server

Why it got an A

Hosted by Checkly at https://api.checklyhq.com/mcp (Streamable HTTP). OAuth is the recommended sign-in; API keys (user or service) work for clients that can send headers, and the X-Checkly-Account header pins the account. Session scopes decide which tools appear. The 35 read tools cover check status and results, test sessions, result assets, root-cause analyses, status pages, incidents and usage; the docs say read tools never reveal secret values. Fourteen write tools change a live account: create, update and delete checks and groups (deleting a group deletes every check in it), trigger checks (which uses run quota), start analyses, create and update environment variables, post and resolve status-page incidents, and invite members (OAuth only). There is no dedicated read-only mode, but you can limit a session to the read scopes, and the docs advise reviewing write calls in your client before approving them. Biggest deduction: the server is closed source, so this grade rests on Checkly's documentation and its plugin repo (skills and config only, no server code) rather than code we could read, and we scored maintenance one band lower. The docs give no dated changelog and don't cover prompt injection. The Checkly CLI has no MCP command; it is a separate tool.