Coolify MCP, the server built into Coolify

• Gives a quick overview of your team's servers, resources and their health

  Returns counts of your servers and resources, health hints and open deployments for the team the token belongs to.

  Try: “Give me an overview of my Coolify infrastructure”

  Read · get_infrastructure_overview

• Finds a project, server, app or database by name or domain

  Searches projects, servers and resources by name, ID or domain when you do not know what kind of thing it is.

  Try: “Find whatever is serving blog.example.com”

  Read · search_resources

• Lists apps, databases and services that look unhealthy or down

  Finds resources that appear unhealthy or stopped, so you can see what needs attention first.

  Try: “What is down in Coolify right now?”

  Read · list_unhealthy_resources

• Lists your apps, filtered by project, server, status or name

  Returns your applications, with optional filters such as project, environment, server, tag or status.

  Try: “List all apps in the production environment”

  Read · list_applications

• Shows the details of one app

  Returns the settings and status of a single application. Sensitive values stay hidden unless the token allows them.

  Try: “Show me the details of my api app”

  Read · get_application

• Reads recent logs from an app, database or service

  Fetches the latest log lines from a running container, 100 by default and up to 500. Needs a token with sensitive-read access.

  Try: “Show the last 200 log lines for my api app”

  Read · get_logs

• Lists queued, running and past deployments

  Shows deployments that are waiting, running or finished, including an app's deployment history.

  Try: “Show the last five deployments of my web app”

  Read · list_deployments

• Shows one deployment, with an optional short log summary

  Returns the details of one deployment. With sensitive-read access it can include a short, redacted log summary.

  Try: “Why did deployment abc123 fail?”

  Read · get_deployment

• Lists your servers and whether they are reachable

  Returns the servers your team can see, optionally only the reachable or unreachable ones.

  Try: “Which of my servers are unreachable?”

  Read · list_servers

• Shows the details of one server

  Returns one server's details. Connection secrets stay hidden.

  Try: “Show details for my hetzner-1 server”

  Read · get_server

• Shows a server's CPU, memory, disk and network use over time

  Returns monitoring numbers for a server over a time range you choose, if metrics are turned on for that server.

  Try: “How has CPU on hetzner-1 looked over the last day?”

  Read · get_server_metrics

• Lists the domains hosted on a server

  Returns every domain served from one server.

  Try: “Which domains run on hetzner-1?”

  Read · get_server_domains

• Lists the apps, databases and services on a server

  Returns everything that is set up to run on one server.

  Try: “What is running on hetzner-1?”

  Read · get_server_resources

• Lists your projects

  Returns your Coolify projects with their names and descriptions.

  Try: “List my Coolify projects”

  Read · list_projects

• Shows a project with its environments and resource counts

  Returns one project, its environments and how many resources each holds.

  Try: “Show the environments in my shop project”

  Read · get_project

• Shows what is in one environment of a project

  Finds an environment by name or ID and summarises the resources inside it.

  Try: “What is in the staging environment of my shop project?”

  Read · get_environment

• Lists all apps, services and databases together

  Returns applications, services and databases in one list.

  Try: “List every resource I have”

  Read · list_resources

• Lists your databases, with filters

  Returns standalone databases, filtered by project, environment, server, status or name if you like.

  Try: “List all my PostgreSQL databases”

  Read · list_databases

• Shows the details of one database

  Returns the settings and status of a single database.

  Try: “Show the details of my main postgres database”

  Read · get_database

• Lists a database's backup schedules

  Returns the backup schedules set up for one database.

  Try: “When is my main database backed up?”

  Read · list_database_backups

• Lists past runs of a database backup

  Shows the history of one scheduled backup, so you can see whether recent backups worked.

  Try: “Did last night's database backup succeed?”

  Read · list_backup_executions

• Checks how a database import is going

  Reports the progress of a database import. The import output needs sensitive-read access.

  Try: “Is my database import finished?”

  Read · get_database_import

• Lists your multi-container services

  Returns services such as one-click templates or Compose stacks, with optional filters.

  Try: “List all my services”

  Read · list_services

• Shows the details of one service

  Returns the settings and status of a single service.

  Try: “Show the details of my plausible service”

  Read · get_service

• Lists the app containers inside a service

  Returns the application parts of a multi-container service.

  Try: “Which app containers make up my plausible service?”

  Read · list_service_applications

• Shows one app container inside a service

  Returns the details of one application part of a service.

  Try: “Show the web container of my plausible service”

  Read · get_service_application

• Lists the databases inside a service

  Returns the database parts of a multi-container service.

  Try: “Which databases does my plausible service use?”

  Read · list_service_databases

• Shows one database inside a service

  Returns the details of one database part of a service.

  Try: “Show the database of my plausible service”

  Read · get_service_database

• Lists Coolify's one-click service templates

  Returns the ready-made service templates you can deploy in one step.

  Try: “What one-click services can I deploy?”

  Read · list_service_templates

• Lists an app's pull request previews

  Returns the preview deployments created from pull requests for an application.

  Try: “Which PR previews are live for my web app?”

  Read · list_application_previews

• Shows one pull request preview, or its logs

  Returns one preview deployment. With sensitive-read access it can also read that preview's logs.

  Try: “Show the logs of the preview for PR 42”

  Read · get_application_preview

• Lists earlier versions an app can roll back to

  Returns the earlier builds an application can be rolled back to.

  Try: “What versions can I roll my api app back to?”

  Read · list_rollback_images

• Lists the names of an app's environment variables, not their values

  Returns the environment variable names for an app, database or service. Values are never included.

  Try: “Which environment variables does my api app have?”

  Read · list_env_keys

• Lists the names of shared environment variables

  Returns shared variable names for a project or environment, without their values.

  Try: “List the shared variables in my shop project”

  Read · list_shared_env_keys

• Shows environment variable values, for admins only

  Returns the actual values of environment variables. Needs sensitive-read access and a team admin or owner; values marked shown-once never come back.

  Try: “What is DATABASE_URL set to for my api app?”

  Read · get_env_values

• Lists an app's storage volumes and file mounts

  Returns persistent volumes and file mounts, without file contents.

  Try: “What storage does my api app use?”

  Read · list_storages

• Lists an app's scheduled tasks

  Returns the scheduled jobs set up for an application or service.

  Try: “What scheduled tasks does my web app run?”

  Read · list_scheduled_tasks

• Lists recent runs of a scheduled task

  Shows recent runs of one scheduled task, so you can see whether it worked.

  Try: “Did the nightly cleanup task run last night?”

  Read · list_scheduled_task_executions

• Shows which team your token belongs to

  Returns the team bound to your API token and whether MCP is on for it. Useful to check you connected the right team.

  Try: “Which Coolify team am I connected to?”

  Read · get_current_team

• Lists the members of your team

  Returns the people in the team your token belongs to.

  Try: “Who is on my Coolify team?”

  Read · list_team_members

• Lists recent changes made in your team, newest first

  Returns the team's audit log, for admins and owners. Emails, IPs and other details need sensitive-read access.

  Try: “What changed in Coolify today?”

  Read · list_audit_events

• Lists the Docker networks your apps deploy to

  Returns Docker destinations, optionally for one server.

  Try: “List the Docker destinations on hetzner-1”

  Read · list_destinations

• Shows one Docker destination

  Returns the details of a single Docker destination.

  Try: “Show the details of my default destination”

  Read · get_destination

• Lists your tags

  Returns the tags your team uses to group resources.

  Try: “What tags do we use?”

  Read · list_tags

• Lists the tags on one app, database or service

  Returns the tags attached to a single resource.

  Try: “What tags are on my api app?”

  Read · list_resource_tags

• Lists the GitHub Apps connected to Coolify

  Returns the GitHub Apps your team can deploy from, without secrets.

  Try: “Which GitHub Apps are connected?”

  Read · list_github_apps

• Lists the repositories a connected GitHub App can see

  Returns repositories reachable through one of your team's GitHub Apps.

  Try: “Which repos can Coolify deploy from?”

  Read · list_github_repositories

• Lists a repository's branches

  Returns the branches of a repository through a connected GitHub App.

  Try: “What branches does my shop repo have?”

  Read · list_github_branches

• Deploys an app or service, or everything with a tag

  Starts a deployment of one resource, or of every resource with a tag after a confirmation. Can force a rebuild or deploy a preview.

  Try: “Deploy my api app”

  Write · deploy

• Starts, stops or restarts an app, database or service

  Starts, stops or restarts a resource or one part of a service. Stopping needs a confirmation.

  Try: “Restart my web app”

  Write · control

• Cancels a waiting or running deployment

  Stops a deployment that is queued or in progress.

  Try: “Cancel the deploy that is running now”

  Write · cancel_deployment

• Rolls an app back to an earlier version

  Switches an application back to an earlier build after you confirm.

  Try: “Roll my api app back to yesterday's version”

  Write · rollback_application

• Creates a new app from a Git repo, Dockerfile or Docker image

  Sets up a new application from a public repo, a GitHub App, a deploy key, a Dockerfile or a Docker image. Deploying it right away also needs deploy access.

  Try: “Create an app from github.com/me/shop and deploy it”

  Write · create_application

• Changes, clones, moves or deletes an app

  Updates an application's settings, clones it, moves it or deletes it. Moves and deletes need a confirmation.

  Try: “Change the domain of my web app to shop.example.com”

  Delete · manage_application

• Creates a new database such as PostgreSQL, MySQL or Redis

  Sets up a new standalone database of the type you choose, from PostgreSQL to ClickHouse.

  Try: “Create a PostgreSQL database in my shop project”

  Write · create_database

• Changes, clones, moves, imports into or deletes a database

  Updates a database, clones or moves it, imports data into it, or deletes it. Clones, moves, imports and deletes need a confirmation.

  Try: “Import this dump into my staging database”

  Delete · manage_database

• Sets up, runs or deletes database backups

  Creates or changes a database backup schedule, runs a backup now, or deletes a schedule or a past backup.

  Try: “Back up my main database now”

  Delete · manage_backup

• Creates a service from a one-click template or a Compose file

  Sets up a multi-container service from one of Coolify's templates or your own Docker Compose file.

  Try: “Deploy Plausible from the one-click templates”

  Write · create_service

• Changes, clones, moves or deletes a service

  Updates a service or its parts, clones or moves it, imports a database into it, or deletes it. Risky actions need a confirmation.

  Try: “Delete my old ghost service”

  Delete · manage_service

• Creates, changes or deletes a pull request preview

  Creates a preview deployment for a pull request, changes it, or deletes it after a confirmation.

  Try: “Delete the preview for PR 42”

  Delete · manage_preview

• Adds, changes or deletes an app's environment variables

  Creates, updates or deletes environment variables, one at a time or in bulk. Deletes need a confirmation.

  Try: “Set LOG_LEVEL to debug on my api app”

  Delete · manage_env

• Adds, changes or deletes shared environment variables

  Manages variables shared across a project or environment. Deletes need a confirmation.

  Try: “Add a shared SENTRY_DSN variable to my shop project”

  Delete · manage_shared_env

• Adds, changes, backs up or deletes storage volumes

  Creates or changes storage mounts, sets up and runs volume backups, or deletes a mount.

  Try: “Add a persistent volume at /data to my api app”

  Delete · manage_storage

• Creates, changes, runs or deletes a scheduled task

  Sets up or edits a scheduled job, runs it now, or deletes it. Running and deleting need a confirmation.

  Try: “Add a task that runs the cleanup script every night at 3am”

  Delete · manage_scheduled_task

• Creates, renames or deletes projects and environments

  Creates or updates projects and their environments. Only empty projects and environments can be deleted.

  Try: “Create a staging environment in my shop project”

  Delete · manage_project

• Creates tags and adds or removes them from resources

  Creates or edits tags, attaches them to resources or removes them, and deletes tags after a confirmation.

  Try: “Tag my api and web apps with production”

  Delete · manage_tags

• Adds, changes, checks or removes a server

  Adds a server to Coolify, updates it, checks the connection, or removes it after a confirmation.

  Try: “Check the connection to hetzner-1”

  Delete · manage_server

• Shows, changes or restarts a server's proxy

  Reads a server's reverse proxy settings, changes them, or restarts the proxy. Changes need a confirmation.

  Try: “Restart the proxy on hetzner-1”

  Write · manage_proxy

• Shows, schedules or runs Docker cleanup on a server

  Reads and changes a server's Docker cleanup settings, shows past runs, or runs a cleanup now after a confirmation.

  Try: “Run a Docker cleanup on hetzner-1”

  Delete · docker_cleanup

• Creates, changes or deletes a Docker destination

  Manages the Docker networks resources deploy to. Deletes need a confirmation.

  Try: “Create a new Docker network on hetzner-1”

  Delete · manage_destination

• Adds, changes or removes the SSH keys Coolify uses

  Lists and manages the SSH keys Coolify uses to reach servers. The key itself is never shown.

  Try: “Which SSH keys does Coolify have?”

  Delete · manage_private_key

• Adds, checks or removes a container registry

  Manages the Docker registries Coolify pulls from. Listing needs sensitive-read access.

  Try: “Add my GitHub container registry”

  Delete · manage_registry

• Manages cloud provider tokens and can create a new paid server

  Lists and manages saved cloud provider tokens and their catalog, and can provision a new server you pay for, after a confirmation.

  Try: “What server sizes can I create at Hetzner?”

  Delete · cloud_provider

• Adds, changes or removes GitHub and GitLab connections

  Manages the GitHub and GitLab apps Coolify deploys from. Deletes need a confirmation.

  Try: “Which Git sources are connected?”

  Delete · manage_git_source

• Adds, checks or removes S3 storage for backups

  Manages S3-compatible storage used for backups. Secrets are never shown.

  Try: “Check that my backup S3 bucket works”

  Delete · manage_s3_storage

• Shows or changes a notification channel's settings

  Reads or updates the settings of one notification channel, such as email or Discord.

  Try: “Show my Discord notification settings”

  Write · manage_notifications

• Used by the assistant behind the scenes

  Helps the assistant pick the right Coolify tool for a task

  Lists the tools your token allows and gives step-by-step recipes, such as deploying an app from Git. The assistant uses it to plan.

  Try: “How do I deploy an app from Git with Coolify?”

  Read · coolify_help

Watch out for

• A write token can delete apps and databases

  With write, the assistant can delete applications, databases and services; with deploy, it can stop containers and roll back. Use a read-only token unless you need changes. coolify.io

• It can create a paid server at your provider

  If you saved a cloud provider token in Coolify, a write token can provision a new server that you pay for. Keep your client set to ask before risky actions. coolify.io

• Logs can still contain secrets

  Coolify says log redaction is best effort. Only add the sensitive-read permission when the assistant must read logs or environment values. coolify.io

• Never give it a root token

  Coolify says not to use root tokens for normal MCP access. A regular token reaches only one team. coolify.io

• Risky actions need a confirmation

  Deletes, stops and rollbacks only run when the assistant sends an explicit confirmation, which your client should ask you for first. coolify.io

Security advisories