PlugWiki
SmartBear MCP logo

SmartBear MCP Server: Setup for Claude, Cursor and Other Apps

OfficialRemoteLocal
Gethttps://bugsnag.mcp.smartbear.com/mcpsmartbear/smartbear-mcp

Lets Claude, Cursor and other assistants read and change your data in SmartBear tools such as BugSnag, Swagger, Zephyr, Reflect and PactFlow.

This is SmartBear's own server. For BugSnag, Swagger and Zephyr you can connect to a SmartBear-hosted address and sign in with your browser, with nothing to install. For BearQ, Reflect, QMetry, QTM4J, PactFlow, Collaborator and Swagger Functional Testing you run the npm package on your computer with an API token for each product. You need an account on each SmartBear product you want to use, and some tools can delete data.

Good for

  • Developers who want BugSnag errors and stack traces read in chat
  • API teams managing Swagger definitions, portals and PactFlow contracts
  • QA teams working with Zephyr, QMetry, QTM4J, Reflect or BearQ tests
  • Teams that want one server for several SmartBear products

Works in

14 should work

Tap an app to see how to set it up and any known problems.

Install SmartBear MCP

Claude Code

  1. 1

    Copy this prompt.

    Add the SmartBear MCP server to Claude Code. Run this command:
    
    claude mcp add --transport http smartbear-bugsnag https://bugsnag.mcp.smartbear.com/mcp
    
    Then check that it loaded and tell me if I need to sign in or restart.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires SmartBear account.

Read-only mode: There is no read-only switch. Connect only the products you need, for example with the MCP_CLIENTS setting on the local server.

Use a hosted address for BugSnag, Swagger or Zephyr: no install and no token, and you sign in with your browser. Use the npx method for BearQ, Reflect, QMetry, QTM4J, PactFlow, Collaborator or Swagger Functional Testing, or to put several products in one server. It needs Node.js 22 or newer, and each product you want needs its own token as an environment variable in the config, such as BUGSNAG_AUTH_TOKEN or PACT_BROKER_TOKEN. Leave out the products you do not use. The hosted addresses are SmartBear's own, but SmartBear has not documented this exact app, so follow its Remote MCP Servers guide if the sign-in does not work.

Built from the package data we hold. Not yet tested by us.

Tools

  • Lists your BugSnag projects

    Returns the projects in your organization that you can reach, or finds the one that matches an API key.

    Try: “List my BugSnag projects”

    Read · bugsnag_list_projects

  • Searches errors in a BugSnag project

    Lists errors in a project with filters and paging, so you can ask for the newest, noisiest or still-open ones.

    Try: “Show the open errors in the web app from the last 24 hours”

    Read · bugsnag_list_project_errors

  • Opens one error with its latest occurrence

    Returns an error with totals across all its events and the latest event's stack trace, breadcrumbs and metadata.

    Try: “Explain error 5f2c and show the stack trace”

    Read · bugsnag_get_error

  • Opens one error event

    Returns the details of a single event, which is one occurrence of an error.

    Try: “Show event 8a1b in full”

    Read · bugsnag_get_event

  • Opens an event from a BugSnag dashboard link

    Takes a pasted dashboard URL and returns the event it points to, so you can drop a link into chat.

    Try: “Look at this BugSnag link and tell me what failed”

    Read · bugsnag_get_event_details_from_dashboard_url

  • Lists the occurrences of one error

    Returns the events that were grouped into one error.

    Try: “List the last events for this error”

    Read · bugsnag_get_events_on_an_error

  • Lists releases of a project

    Returns the releases recorded for a BugSnag project.

    Try: “What releases shipped this month?”

    Read · bugsnag_list_releases

  • Shows all the spans in a performance trace

    Returns every span within one trace, which helps find where a slow request spent time.

    Try: “Show the spans of trace 91ab”

    Read · bugsnag_get_trace

  • Changes an error's status

    Updates the status of an error, for example to mark it as fixed or ignored.

    Try: “Mark error 5f2c as fixed”

    Write · bugsnag_update_error

  • Sets how network calls are grouped

    Replaces the rules that group network endpoint URLs together in a project's performance data.

    Try: “Group /users/123 and /users/456 as /users/:id”

    Write · bugsnag_set_network_endpoint_groupings

  • Lists BearQ environments

    Returns the environments set up in the BearQ workspace and which one is the default, so you can name one in a test run.

    Try: “Which BearQ environments can I run tests in?”

    Read · bearq_list_environments

  • Runs every regression-ready BearQ test

    Starts a run of the whole regression suite and returns a task you can follow. It suits release checks.

    Try: “Run the full BearQ regression suite on staging”

    Write · bearq_run_regression_tests

Read from the source code

Permissions

high risk · 7 things to watch

High risk

The assistant can delete PactFlow services, users and integrations, publish live Swagger portals and overwrite API definitions. Connect only the products you need, use tokens with the narrowest rights each product offers, and approve write calls by hand (our advice).

What it can do

  • Read your data
  • Create and change things
  • Delete things
  • Read-only mode

Watch out for

  • PactFlow tools can delete services, users and all integrations

    contract-testing_delete_pacticipant, delete_all_integrations, admin_delete_user, admin_delete_team and admin_reset_roles are all registered, along with token rotation. Use a token with no admin rights if you do not need these. github.com

  • Tools can publish and overwrite live content

    swagger_publish_portal_product makes a portal product visible to visitors, swagger_create_or_update_api overwrites an API definition, and zephyr_create_test_case_steps in overwrite mode deletes all existing steps. Check each call before approving. github.com

  • 15 listed write and delete tools are marked read-only

    The server marks tools read-only unless they say otherwise, and 15 tools on this page that change data still carry that mark: bearq_chat_with_qa_lead, bearq_expand_application_model, bearq_run_regression_tests, bearq_run_test_cases, bearq_run_tests_in_functional_areas, bearq_stop_task, collaborator_create_remote_system_configuration, collaborator_create_review, collaborator_delete_remote_system_configuration, collaborator_reject_review, collaborator_reviewservice_action, qmetry_import_automation_test_results, reflect_cancel_suite_execution, reflect_execute_suite and reflect_run_test. A client that auto-approves read-only tools may run them unasked. github.com

  • One Collaborator tool calls any review service method

    collaborator_reviewservice_action takes a method name and arguments, so what it can do depends on what the assistant passes. Treat it as write and delete capable. github.com

  • API definitions and code can go to SmartBear AI

    swagger_create_api_from_prompt, swagger_standardize_api and the PactFlow test generator send your prompt, spec or code to SmartBear AI services. Do not send anything you cannot share with SmartBear. github.com

  • Local tokens sit in your client config

    The local setup keeps product tokens in the env block of your MCP config. Use tokens that reach only the projects you need and keep the file private. github.com

  • Usage analytics exist, off unless you set a key

    In HTTP mode the server can report usage events to Amplitude, but only if MCP_SERVER_AMPLITUDE_API_KEY is set. The README says it never sends tool arguments or results. github.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details
Turning on read-onlyNo read-only switch is documented. Each product turns on only when its token or URL is set, and MCP_CLIENTS limits which products load. Most tools in each product only read, but the delete and publish tools stay on once a product is enabled.
Talks toSmartBear product APIs for each product you connect (BugSnag, Swagger, PactFlow, Zephyr, Reflect, BearQ, QMetry, QTM4J, Collaborator). SmartBear AI services, for the tools that generate or fix APIs and Pact tests
Sign-in and keysHosted servers sign you in through a browser flow. The local server reads one token or key per product from environment variables in your client config, where they sit in plain text.

Questions

Is it official?

Yes. SmartBear publishes it in its own GitHub organization, and SmartBear hosts the remote endpoints.

What are the SmartBear MCP server URLs?

SmartBear hosts three: https://bugsnag.mcp.smartbear.com/mcp, https://swagger.mcp.smartbear.com/mcp and https://zephyr.mcp.smartbear.com/mcp. You sign in through a browser flow, and you can connect several at once.

Which products need the local install?

BearQ, Reflect, QMetry, QTM4J, PactFlow, Collaborator and Swagger Functional Testing. They are only in the npm package, which needs Node.js 22 or newer and an API token for each product.

Is it free?

The server is MIT licensed and free. You still need an account on each SmartBear product you connect, and those follow the product's own plans.

Can I load only some products?

Yes. Set MCP_CLIENTS to a comma-separated list such as BugSnag,Swagger. Valid names are BearQ, BugSnag, Collaborator, Contract Testing, QMetry, QTM4J, Reflect, Swagger and Zephyr. A product also stays off when its token is left empty.

Can it delete things?

Yes. PactFlow tools can delete services, branches, environments, webhooks, users, teams and all integrations, and BearQ, Swagger, Reflect and Zephyr each have delete or overwrite tools. There is no read-only mode.

Does it list every tool?

No. The list shows 124 of the 309 tools registered in release 0.42.0. Counts by product are PactFlow 102, QMetry 55, Zephyr 37, QTM4J 30, Swagger 28, BugSnag 19, Reflect 17, BearQ 11 and Collaborator 10. The list includes every tool marked destructive.

Does the hosted server have the same tools as the npm package?

It is not documented. The README says only that the three hosted servers cover BugSnag, Swagger and Zephyr, so check the tool list your client shows after you connect.

Does it work in ChatGPT or Claude on the web?

SmartBear does not name those apps. Its README says to use the hosted URL from your MCP client and points to a per-client guide, so check that guide for your app.

Does it send usage data to SmartBear?

Only if you turn it on. Analytics run in HTTP mode and only when MCP_SERVER_AMPLITUDE_API_KEY is set, and the README says tool arguments and results are never sent.

Information

updated Nov 2, 2026

Publisher
Official
Package
@smartbear/mcp
Registry
npm
Endpoint
https://bugsnag.mcp.smartbear.com/mcp
Transport
stdio, Streamable HTTP
Auth
API key
Version
0.42.0
License
MIT
Last commit
Oct 30, 2026
Open issues
6
Listed in
Official MCP registry, Docker MCP Catalog

WebsiteGitHubnpmOfficial MCP RegistryChangelogIssues

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 4
  1. github.com · github.com
  2. github.com · github.com
  3. github.com · github.com
  4. github.com · github.com

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 2, 2026.