
Sentry MCP, Sentry's official MCP server
Lets Claude, Cursor or VS Code read your Sentry errors, find the cause and help fix the code.
This is Sentry's official connector for AI assistants. You can ask your assistant to list top issues, pull a stack trace, or find the code behind an error. It works on every Sentry plan, including free. It reads by default, and error text can carry hidden instructions, so review any fix your assistant proposes before you run it.
Good for
- Developers who want their AI assistant to read production errors and fix the code behind them
- On-call engineers who want a quick summary of what broke and who is affected
- Teams on self-hosted Sentry, who can run it locally with a token
- Anyone running a daily error digest from a scheduled agent job
Works in
4 supported · 3 with issues · 7 should work
Tap an app to see how to set it up and any known problems.
Sentry documents it: run MCP: Add Server, pick HTTP, paste the Sentry URL, then sign in. mcp.sentry.dev
OpenAI's Codex docs list Sentry as an example server. Connect it to the hosted URL and sign in. developers.openai.com
Works with a maintainer's config: use httpUrl with OAuth enabled in settings.json.
Known problems
- Closed
Hangs on "Connecting to MCP servers" when the server is added with url
Workaround: Use "httpUrl": "https://mcp.sentry.dev/mcp" with "oauth": {"enabled": true} in settings.json.
Reported Oct 2025 · GitHub
Connects to the hosted server. An August 2026 sign-in bug is fixed.
Known problems
- Fixed
ChatGPT failed to finish connecting after Sentry sign-in and consent
Reported Aug 2026 · GitHub
Sentry documents one command for the hosted server. Sign-in fails for some new EU-region organizations.
Known problems
- Open
Sign-in ends on "Authentication Failed, internal error" for a new EU-region organization
Since Oct 2026 · GitHub
- Open
AI search tools return "Feature Unavailable" on the hosted server while other tools work
Since Aug 2026 · GitHub
- Open
Sentry's Claude Code plugin adds a tracking parameter to the URL that breaks sign-in
Workaround: Add the server yourself with the plain https://mcp.sentry.dev/mcp URL instead of the plugin.
Since Aug 2026 · GitHub
- Open
Local server hangs on startup when given an internal integration token
Workaround: Sentry does not support integration tokens; use a personal user token or the device-code login.
Since May 2026 · GitHub
- Fixed
Signing in from one session logged out other open sessions on the same account
Reported Apr 2026 · GitHub
Listed in Claude's connector directory. Add the Sentry connector and sign in.
Known problems
- Open
Sign-in ends on "Authentication Failed, internal error" for a new EU-region organization
Since Oct 2026 · GitHub
Sentry documents an Install button and an mcp.json entry. Cursor's marketplace also has a Sentry plugin.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports hosted MCP servers.
Install sentry MCP
Claude Code
- 1
Copy this prompt.
Add the sentry MCP server to Claude Code. Run this command: claude mcp add --transport http sentry https://mcp.sentry.dev/mcp Then check that it loaded and tell me if I need to sign in or restart.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
Read-only mode: Reading is the default: when you sign in, leave Triage and Manage Projects & Teams unticked. For the local server, add --skills=inspect to the args to load only the read tools.
The hosted server uses OAuth: the first connection opens a Sentry sign-in. Add your organization and project to the address to scope it, for example https://mcp.sentry.dev/mcp/{organizationSlug}/{projectSlug}; Sentry recommends scoping to a project. The local npx method is for self-hosted Sentry. It needs a user auth token with org:read, project:read, project:write, team:read, team:write and event:write. Its AI-powered search tools also need an LLM provider key.
From the vendor's docs. Source.
Tools
Finds Sentry issues from plain-language queries
Returns a list of grouped issues with title, status and user count. You can describe what you want in words or use Sentry search syntax such as is:unresolved. Use it to find what is breaking.
Try: “Show unresolved issues in my-org from the last 24 hours.”
Read ·
search_issuesSearches individual error events
Looks through error events with a natural language query, which is translated to Sentry syntax. Use it to count or inspect errors rather than grouped issues. Needs an LLM provider if you self-host.
Try: “How many TypeError errors hit the checkout project today?”
Read ·
search_errorsSearches traces and spans
Searches span and trace data, including request latency, with a plain-language query. Use it to find slow requests.
Try: “Find the slowest requests to /api/orders this week.”
Read ·
search_tracesSearches your Sentry logs
Queries log entries stored in Sentry with a natural language query. Use it to find log lines around a problem.
Try: “Find error logs from the payments service in the last hour.”
Read ·
search_logsSearches counters, gauges and distributions
Queries metric values, totals, percentiles and trends, for example a p95 by environment. Not for span latency, which belongs to trace search.
Try: “What is the p95 of http.request.duration by environment?”
Read ·
search_metricsFinds performance profiles
Searches transaction and continuous profiles so you can pick ones to inspect for hotspots.
Try: “Find recent profiles for the /checkout transaction.”
Read ·
search_profilesFinds session replays
Searches session replays for things like rage clicks, dead clicks, pages visited and errors seen. Returns lists only, not counts.
Try: “Find replays with rage clicks on checkout in the last day.”
Read ·
search_replaysOpens a Sentry item such as an issue or trace
Fetches the details of a specific Sentry item, typically from a Sentry URL, so the assistant can read an issue or trace you are looking at.
Try: “Open this Sentry issue and summarize it: <issue URL>”
Read ·
get_sentry_resourceRuns Sentry's Seer AI for a root cause
Asks Seer to analyze a production error and suggest a root cause with specific code fixes. Best used when you ask for a fix or the cause is not obvious from the issue itself.
Try: “Use Seer to find the root cause of PROJECT-123.”
Read ·
analyze_issue_with_seerResolves, assigns or ignores an issue
Changes an issue's status or assignee, for example to resolve, reopen, assign, unassign or ignore it.
Try: “Mark PROJECT-123 as resolved.”
Write ·
update_issueLists your Sentry organizations
Shows the organizations you can reach, so later calls can use the right organization slug.
Try: “Which Sentry organizations do I belong to?”
Read ·
find_organizationsLists projects in an organization
Finds the projects in a Sentry organization so you can target the right one.
Try: “List the projects in my-org.”
Read ·
find_projectsUsed by the assistant behind the scenes
Finds other Sentry operations by keyword
Searches the full Sentry tool catalog, which holds many more tools than the 12 shown directly (such as releases, monitors, alerts and DSNs), and returns their input schemas.
Try: “Is there a Sentry tool for listing releases?”
Read ·
search_sentry_toolsRuns a catalog tool found by search
Runs one of the catalog tools discovered through search_sentry_tools, using arguments that match its schema.
Try: “Run the release listing tool for my-org.”
Write ·
execute_sentry_tool
Read from the source code
Pros and cons
Good
- Official Sentry server, hosted, with sign-in through your Sentry account
- Works on every Sentry plan, including free
- Read-only by default; write and delete groups are opt-in
- Can be limited to one organization or project through the URL
- Fits unattended jobs such as a daily error digest
- Self-hosted Sentry works through the local server
Watch out
- Fake error text can steer an agent that acts on it
- Hosted sign-in asks Sentry for broad write access
- Seer root-cause analysis is a paid add-on
- Local AI search tools need your own LLM key
- Self-hosted Sentry gets no Seer, and event search fails before 26.6.0
- Parallel calls hit Sentry rate limits
Permissions
medium risk · 6 things to watch
Medium risk
It reads by default, but fake error text can steer your agent, and opt-in groups can change and delete alert rules and monitors. Review the fixes an agent proposes from Sentry errors before running them, and leave the opt-in groups off unless you need them.
What it can do
- Read your data
- Create and change things
- Delete things
- Read-only modeHow to turn it on
Watch out for
Fake error events can steer your agent
Anyone with your public DSN can send a fake error whose text holds a "fix", and your agent may run it. Review the fixes an agent proposes from Sentry errors before you run them. thehackernews.com
Opt-in groups can change and delete things
Triage resolves and assigns issues. Manage Projects & Teams edits projects and DSNs and can delete alert rules and monitors. Leave both off unless you need them. github.com
Hosted sign-in asks for broad write access
The hosted server gets a Sentry token with project, team, event and alert write scopes, then limits tools by the skills you pick. Pick only the skills you need. github.com
Version 0.42.0 bundled a library with known CVEs
A report found @sentry/mcp-server 0.42.0 bundles fast-uri 3.1.0, which npm audit cannot see. The reporter found no way to exploit it, and Sentry is rebuilding the package. github.com
Untrusted-data wrapper is not merged yet
A pull request that marks event content as untrusted for the agent has been open since June 2026. Until it ships, treat event text as untrusted. github.com
Your Sentry data enters the AI chat
Issue details, stack traces and logs the agent fetches become part of the conversation. Check your AI provider's and Sentry's privacy policies before connecting production data. sentry.io
Security advisories
No published security advisories as of Nov 1, 2026.
Technical details
| Turning on read-only | The default skills (Inspect and Seer) only read data or run Seer analysis. When you sign in, leave Triage and Manage Projects & Teams off. Locally, start with --skills=inspect, or add ?skills=inspect to the URL when using a Sentry-Bearer token. |
|---|---|
| Talks to | mcp.sentry.dev. Your Sentry host (sentry.io or self-hosted). Your LLM provider, only when you set a key locally for the AI search tools |
| Sign-in and keys | The local server caches its sign-in token in ~/.sentry/mcp.json with owner-only permissions. Tokens last 30 days. |
| Scopes |
|
Alternatives
Use the official server; it is the pick for almost everyone, including self-hosted Sentry through its local mode. The reference server is archived and no longer maintained, and selfhosted-sentry-mcp is a small community option that trims large error payloads.
| Server | Official | Runs | Sign-in | Weekly downloads |
|---|---|---|---|---|
| sentry-mcpThis page | Official | HostedLocal | Account or token | 198.1K/wk |
| selfhosted-sentry-mcp | Community | – | – | 23/wk |
| sentry (archived reference server) | Community | Local | Token | – |
What people say
People like how little setup it takes and how fast it gets from error to fix, and worry about fake errors steering the agent and about sign-in problems.
What people like
- Hosted with sign-in, so nothing to install and no token to paste for sentry.io users
- Users report going from a Sentry error to a fix and pull request in one session
- Works for unattended jobs, such as a daily digest of errors compared against source code
Common complaints
- Many tools add tokens to the agent's context that only help while gathering bug context
- Fake error events can carry instructions to your agent
- Sign-in problems recur across clients, including EU-region organizations
- Self-hosted users get the local server only, and event search breaks before Sentry 26.6.0
In their words
“I asked CC to analyze the errors, triage them and address the critical ones. Half and hour later CC opened a GH issue, fixed the bug and opened a PR”u/SafeLeading6260Hacker NewsSep 2026
“A claude routine runs without access to internet except for Slack (API) and Sentry (MCP). It reads the Sentry MCP, compare the errors to the app source code and post a daily digest to Slack. The reports are very accurate.”mhammercHacker NewsMay 2025
“Sentry's MCP server [0] is a model for others to follow when it comes to convenience and usefulness. Remote-first with OAuth.”nielHacker NewsMay 2026
“sentry's mcp is useful if you are collecting context for a bug in production, but is hardly useful later when fixing the bug”0123456789ABCDE
2 more quotesFewer quotes
“The malicious instruction arrives disguised as a legitimate 'Resolution' inside an ordinary error. When a developer asks their AI agent to fix the Sentry issue, the agent reads the attacker's command as trusted guidance and runs it”Tenet Security, quoted by Ravie LakshmananHacker NewsMar 2026
“Sentry MCP is great, “find out top 10 issues by users affected, check what it would take to fix and if you think it’s a low risk fix, apply it. Open a PR that links to the issues and explain the issue and the fix in three sentences max”.”serial_dev
Questions
Does the Sentry MCP server work on the free plan?
Yes. It works on every Sentry plan, including the free Developer plan, and costs nothing extra. Seer and longer data retention depend on your plan.
Do I need Seer to use it?
No. Seer is one group of tools and the rest work without it. Seer is a paid add-on billed per active contributor, and it needs the GitHub or GitLab integration.
Can I use it with self-hosted Sentry?
Yes, but only through the local server with a Sentry token. The hosted sign-in works for sentry.io only. Seer is off by default, and event search fails on Sentry versions before 26.6.0.
Why are the AI search tools missing when I run it locally?
Those tools need your own key from OpenAI, Azure OpenAI, Anthropic or OpenRouter. Without one, only those tools disappear and the rest keep working.
Can someone attack my agent through Sentry errors?
Yes, it has been shown. Anyone with your public DSN can send a fake error that holds instructions. Review any fix your agent proposes from Sentry errors before you run it.
Can I make it read-only?
Yes. Reading is on by default. Leave Triage and Manage Projects & Teams off when you sign in, or start the local server with --skills=inspect.
Can it delete things in Sentry?
Only if you turn on Manage Projects & Teams. That group can delete alert rules and monitors. It is off by default.
What is the Sentry MCP server URL?
The hosted address is https://mcp.sentry.dev/mcp. Add your organization and project to the end to limit it to one project, which Sentry recommends.
Does the /sse address still work?
No. It returns an error saying the old transport was removed. Use the /mcp address instead.
I get Rate Limited errors. What helps?
Have your agent run Sentry calls one at a time. Parallel calls trigger the limit most.
Examples
List the newest open issues in one project
Use Sentry to list the top 5 open issues in my [project-slug] project from the last 24 hours.
SourcePull the latest event for an issue with its stack trace
Fetch the latest event for issue [ISSUE-ID] in Sentry.
SourceFix the code behind a Sentry issue in your repo
Based on the Sentry issue and root cause you just found, locate the relevant code in this repo and apply a fix.
SourceFind other issues with the same root cause
Are there any other Sentry issues in this project that might share the same root cause?
SourceRank issues by users affected and open PRs for low-risk fixes
find out top 10 issues by users affected, check what it would take to fix and if you think it's a low risk fix, apply it. Open a PR that links to the issues
Source
Information
updated Nov 2, 2026
- Publisher
- Sentry (official)
- Package
@sentry/mcp-server- Registry
- npm
- Endpoint
https://mcp.sentry.dev/mcp- Transport
- stdio, Streamable HTTP, SSE
- Auth
- OAuth
- Version
- 0.42.0
- License
- FSL-1.1-ALv2
- Last commit
- Oct 31, 2026
- Open issues
- 123
- Listed in
- Official MCP registry, Docker MCP Catalog
WebsiteGitHubnpmOfficial MCP RegistrySentry cookbook: Claude CodeChangelogPricingIssuesPrivacy policySupportSentry plugin for Claude Code
Other Sentry MCP servers
Sources
Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.
Show all 28Hide
- Sentry MCP Server · docs.sentry.io
- Sentry MCP README · github.com
- Sentry MCP README · github.com
- Debug with Sentry MCP and Claude Code · sentry.io
- Sentry Toolkit README · github.com
- Agentjacking attack tricks AI coding agents · thehackernews.com
- github.com · github.com
- github.com · github.com
- Sentry MCP security · github.com
- Can it delete things in Sentry? · github.com
- Untrusted-data wrapper PR · github.com
- Bundled fast-uri report · github.com
- Stdio auth · github.com
- Sentry pricing · sentry.io
- Do I need Seer to use it? · docs.sentry.io
- Why are the AI search tools missing when I run it locally? · github.com
- Sentry MCP · mcp.sentry.dev
- Does the /sse address still work? · mcp.sentry.dev
- Sentry in Claude's connector directory · claude.com
- Codex MCP docs · developers.openai.com
- OAuth fails with Authentication Failed · github.com
- Sentry MCP drastically improved our response time to prod issues · reddit.com
- Directory of MCP Servers · news.ycombinator.com
- Self-hosted search fails · github.com
- Comment on It's time to move your docs in the repo · news.ycombinator.com
- Archived reference server · github.com
- selfhosted-sentry-mcp · github.com
- sentry-mcp-rs · github.com