io.github.mshegolev/harbor-registry-mcp

List Harbor projects, sorted by repository count (descending *within the page*). Use this first to discover which Harbor projects exist before drilling in with ``harbor_list_repos`` / ``harbor_list_artifacts``. Pagination: if ``has_more`` is ``True``, call again with ``page + 1``. Note that sorting is per-page — agents that need a global ranking should aggregate across pages. Returns: dict with keys ``projects_count`` / ``page`` / ``page_size`` / ``has_more`` / ``next_page`` / ``projects`` (list).

List repositories in a Harbor project. Each repository is reported with artifact count and total pull count (useful for spotting unused repos before cleanup). Pagination: if ``has_more`` is ``True``, call again with ``page + 1``.

List artifacts (tags) in a repository, newest first. Each artifact carries digest, size, push/pull timestamps, scan status and vulnerability counts (if scanned). Pagination: if ``has_more`` is ``True``, call again with ``page + 1``. For repositories with hundreds of artifacts prefer ``harbor_storage_report`` or ``harbor_cleanup_candidates`` which paginate internally.

Full storage breakdown for a Harbor project. Iterates every repository × every artifact and returns a sorted-by-size report — the canonical view for "what's eating up our quota?". Performs O(repos × artifacts) API calls; emits progress events through MCP Context.

Suggest which artifacts could be deleted to reclaim space. **READ-ONLY** — never deletes anything; just produces a list with reasons. Use ``harbor_delete_artifact`` / ``harbor_delete_untagged`` / ``harbor_delete_old_artifacts`` to act on the results. Reasons emitted: - ``untagged`` — artifact has no tags (orphaned layer) - ``never_pulled`` — artifact has never been pulled (and is past the ``keep_latest_per_repo`` cutoff) - ``old_version`` — artifact is older than the ``keep_latest_per_repo`` newest tagged artifacts

Delete a single artifact by tag or digest. **DESTRUCTIVE & IRREVERSIBLE** — Harbor immediately removes the manifest from its catalogue; the underlying blobs are reclaimed by the next GC sweep. There is no soft-delete or undo. Returns the freed space and tag list for confirmation.

Delete all untagged artifacts in a project (or single repository). **DESTRUCTIVE.** ``dry_run=True`` is the default — nothing is deleted unless the agent explicitly passes ``dry_run=False``. In dry-run no delete request is issued at all; the response lists the candidates with ``deleted=None`` and the space they would free. Untagged artifacts are typically orphaned layers left behind after pushing a new tag of the same image — generally safe to delete. The full project sweep is opaque, so the response includes ``repos_scanned`` for visibility.

Keep the N newest artifacts in a repository, delete the rest. **DESTRUCTIVE.** ``dry_run=True`` is the default — the agent must explicitly set ``dry_run=False`` to actually delete. Each entry in ``to_delete`` carries a ``deleted`` field (``True``/``False`` after real run, ``None`` in dry-run).