Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 7
- 4 8
- 3 2
- 2 0
- 1 0
Trust in production
- Trust it - 65%
- With caveats - 29%
- Wouldn't - 6%
94% would recommend this server
How reviewers scored it
- Setup & docs 4.1
- Auth experience 3.8
- Reliability 4.2
- Maintainer responsiveness 4.4
Why it got a B
Hosted by CircleCI over HTTPS with OAuth2 sign-in, and a small, fixed tool set for reading runs, logs, artifacts and tests, plus rerunning and cancelling workflows. The old npx package (@circleci/mcp-server-circleci) is deprecated; its five advisories, two critical, were all fixed before disclosure, but do not keep running it. Job logs can carry text from pull requests. Biggest deductions: the docs do not say which access level the MCP sign-in grants, and a pasted personal token has your full permissions; the server is closed source, so maintenance is one band lower.
How to connect
// .cursor/mcp.json (OAuth)
{ "mcpServers": { "circleci-mcp-server": { "url": "https://mcp.circleci.com/v1/mcp" } } }// .vscode/mcp.json (OAuth)
{ "servers": { "circleci-mcp-server": { "type": "http", "url": "https://mcp.circleci.com/v1/mcp" } } }claude mcp add --transport http circleci-mcp-server https://mcp.circleci.com/v1/mcpIs CircleCI MCP Server safe?
Is CircleCI MCP Server safe to use?
CircleCI MCP Server grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.
Does CircleCI MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does CircleCI MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Developer Tools
- A Atlassian Rovo MCP ServerOfficial hosted Atlassian server for Jira, Confluence, Jira Service Management, Compass, Bitbucket, Loom, Goals, Projects, and Teams, with OAuth 2.1 sign-in.
- A Buildkite MCP ServerOfficial Buildkite server for pipelines, builds, jobs, logs, annotations, and Test Engine data, hosted or local.
- A Dynatrace Remote MCP ServerDynatrace's hosted MCP server, running inside your Dynatrace SaaS environment, to run and explain DQL, look into problems, vulnerabilities and Kubernetes events, and forecast time series.
- A GitHub MCP ServerOfficial GitHub server for repos, issues, pull requests, Actions, and code security, hosted or local.
- A GitLab MCP ServerGitLab's built-in MCP server for projects, merge requests, work items, code, and CI pipelines, on GitLab.com or your own instance.
Embed this badge
[](https://trustedmcp.io/servers/circleci-mcp-server)<a href="https://trustedmcp.io/servers/circleci-mcp-server"><img src="https://trustedmcp.io/badge/circleci-mcp-server.svg" alt="TrustedMCP grade B" height="80"></a>Community reviews
Surprisingly polished
Hooked CircleCI MCP Server into Claude Code and it worked on the first try. The OAuth flow worked first time in Claude Code.
Used for Looking up CircleCI data without leaving the editor
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Useful, with a few rough edges
Took longer to configure than I expected. Auth is handled properly, and revoking access later was one click. Hosted endpoint means no local process to babysit. Used a fine-grained token with short expiry and it works fine with that. I would use it in prod, but only with a human approving writes.
Used for Debugging sessions in Cursor
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 2/5
- Maintainer responsiveness 4/5
Recommended it to two teams already
Simple to set up in Cursor, simple to reason about. Auth is handled properly, and revoking access later was one click.
Used for Keeping project tickets in sync with code changes
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Earned a permanent spot in my config
Of the CircleCI integrations I tried, this one is the most predictable. Hosted endpoint means no local process to babysit. I like that access goes through a proper sign-in instead of a long-lived secret on disk. It is in our production agent and I sleep fine.
Used for Internal developer assistant
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Clean integration, sensible permissions
Clear tool names, sensible outputs, very few surprises. Nothing to install, I just point the client at the URL. Sign-in flow was painless and I never had to paste a key into a config file. Good choice if you need CircleCI in your agent.
Used for Scripting routine maintenance tasks
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Exactly what I needed from CircleCI
Started with it as an experiment, now it is a fixture. Token setup is the fiddliest part, after that it is smooth. Hosted endpoint means no local process to babysit. Updates land regularly, and nothing broke when I upgraded.
Used for Automating release notes
- Setup & docs 3/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Better than the DIY script it replaced
Our agents call this dozens of times a day. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Nothing to install, I just point the client at the URL. Happy to run it in production.
Used for Pairing with Claude Code on a monorepo
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 3/5
Quietly reliable
Tried it on a side project first, then rolled it out at work. Sign-in flow was painless and I never had to paste a key into a config file. You can tell it is actively maintained, the rough edges keep getting fixed.
Used for Onboarding new devs with an agent that answers repo questions
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
No complaints after a month
Set this up for our team after comparing a few options. Scoped the token to just what the agent needs and it respected that. Would recommend without hesitation.
Used for CI failure investigation
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
The CircleCI integration I wanted
Installed it on a Friday, it was part of my workflow by Monday. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Fine in production if you sandbox it.
Used for Code review summaries for pull requests
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Set it up once, forgot about it
I use this almost daily. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Token setup is the fiddliest part, after that it is smooth. Releases come often and the changelog is clear.
Used for Letting a coding agent open and triage issues
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Does what it says, no drama
Replaced a homegrown script with CircleCI MCP Server and have not looked back. Auth is handled properly, and revoking access later was one click. Easy recommendation.
Used for Letting a coding agent open and triage issues
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Trustworthy enough for real work
Tried it on a side project first, then rolled it out at work. Sign-in flow was painless and I never had to paste a key into a config file. The OAuth flow worked first time in Claude Code. Nothing to install, I just point the client at the URL. Happy to run it in production.
Used for Pairing with Claude Code on a monorepo
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Saves me a context switch every hour
Set this up for our team after comparing a few options. Scoped the token to just what the agent needs and it respected that.
Used for Generating boilerplate from existing patterns
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Good defaults, good docs
Been running this for about a month now. Filed an issue and got a reply within two days. Scoped the token to just what the agent needs and it respected that. Being closed source, I cannot audit it, but the vendor has been responsive. Would recommend without hesitation.
Used for Debugging sessions in Cursor
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Our team uses it every day
Hooked CircleCI MCP Server into Claude Code and it worked on the first try. Sign-in flow was painless and I never had to paste a key into a config file. Nothing to install, I just point the client at the URL.
Used for Generating boilerplate from existing patterns
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Decent, not set-and-forget
Mostly reliable, with the odd timeout. Sign-in flow was painless and I never had to paste a key into a config file.
Used for CI failure investigation
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 2/5
- Maintainer responsiveness 4/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.