← Back to search

sutro-mcp-server

GitHub Actions Scanned 14d ago

Stdio MCP server for Sutro — exposes Sutro project, app, SLang deploy, and secrets tools to AI editors.

npm
B
76 / 100

Versions

0.1.9latest
May 21, 2026
0.1.8
May 21, 2026
0.1.1
May 21, 2026
0.1.0
May 21, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 16

sutro_delete_secret
annotations: none low

Remove a secret from a Sutro application.

sutro_hello
annotations: none low

Verify Sutro API connectivity using the security bundle (mTLS + Builder JWT). Calls GET /hello on the configured API base.

sutro_validate_bundle
annotations: none low

Validate the configured Sutro security bundle and report readiness for authenticated MCP calls.

sutro_list_projects
annotations: none low

List all Sutro projects visible to the authenticated builder.

sutro_list_apps
annotations: none low

List all Sutro applications visible to the authenticated builder, optionally filtered by project.

sutro_pull_project_data
annotations: none low

Pull project metadata and all applications for a project. Set includeScode=true for full editable app payloads.

sutro_pull_app_for_edit
annotations: none low

Pull a single app with full SCode so it can be reviewed/edited before deploy.

sutro_get_app
annotations: none low

Get details for a specific Sutro application. Set includeScode=true to include the full SCode definition.

sutro_get_app_status
annotations: none low

Get the current job/deployment status for a Sutro application.

sutro_get_openapi
annotations: none low

Get the OpenAPI specification for a Sutro application.

sutro_deploy_slang
annotations: none low

Compile SLang source and update a Sutro application. Returns the updated application or compile errors on failure.

sutro_apply_slang_changes
annotations: none low

Apply SLang to an app, verify status, and optionally publish in one step.

sutro_apply_slang_from_file
annotations: none low

Apply SLang from a local file path, verify status, and optionally publish in one step.

sutro_publish_app
annotations: none low

Publish a Sutro application to make it live. Optionally bump the version.

sutro_list_secrets
annotations: none low

List the secret names configured for a Sutro application. Secret values are never returned.

sutro_set_secret
annotations: none low

Add or update a secret on a Sutro application.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 43

low
Tool 'sutro_list_secrets' has no annotations annotation_checker · 100%
low
Tool 'sutro_set_secret' has no annotations annotation_checker · 100%
low
Tool 'sutro_hello' has no annotations annotation_checker · 100%
low
Tool 'sutro_validate_bundle' has no annotations annotation_checker · 100%
low
Tool 'sutro_list_projects' has no annotations annotation_checker · 100%
low
Tool 'sutro_list_apps' has no annotations annotation_checker · 100%
low
Tool 'sutro_pull_project_data' has no annotations annotation_checker · 100%
low
Tool 'sutro_pull_app_for_edit' has no annotations annotation_checker · 100%
low
Tool 'sutro_get_app' has no annotations annotation_checker · 100%
low
Tool 'sutro_get_app_status' has no annotations annotation_checker · 100%
low
Tool 'sutro_get_openapi' has no annotations annotation_checker · 100%
low
Tool 'sutro_deploy_slang' has no annotations annotation_checker · 100%
low
Tool 'sutro_apply_slang_changes' has no annotations annotation_checker · 100%
low
Tool 'sutro_apply_slang_from_file' has no annotations annotation_checker · 100%
low
Tool 'sutro_publish_app' has no annotations annotation_checker · 100%
low
Tool 'sutro_delete_secret' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: sutro_hello manifest_parser · 85%
info
Tool: sutro_validate_bundle manifest_parser · 85%
info
Tool: sutro_list_projects manifest_parser · 85%
info
Tool: sutro_list_apps manifest_parser · 85%
info
Tool: sutro_pull_project_data manifest_parser · 85%
info
Tool: sutro_pull_app_for_edit manifest_parser · 85%
info
Tool: sutro_get_app manifest_parser · 85%
info
Tool: sutro_get_app_status manifest_parser · 85%
info
Tool: sutro_get_openapi manifest_parser · 85%
info
Tool: sutro_deploy_slang manifest_parser · 85%
info
Tool: sutro_apply_slang_changes manifest_parser · 85%
info
Tool: sutro_apply_slang_from_file manifest_parser · 85%
info
Tool: sutro_publish_app manifest_parser · 85%
info
Tool: sutro_list_secrets manifest_parser · 85%
info
Tool: sutro_set_secret manifest_parser · 85%
info
Tool: sutro_delete_secret manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 94 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%