Komodo Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Komodo Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP (Model Context Protocol) server for interacting with the Komodo Client API, built with FastMCP.
This MCP server provides a comprehensive interface to the Komodo API, allowing you to manage deployments, builds, stacks, servers, and execute commands through MCP-compatible clients. It exposes all major Komodo API operations as MCP tools.
pip install -e .Or install dependencies directly:
pip install fastmcp httpx pydantic python-dotenvThe server supports two configuration methods:
Provide configuration during MCP server initialization. This is the preferred method as it keeps credentials out of environment variables.
MCP Client Configuration Example:
{
"mcpServers": {
"komodo": {
"command": "python",
"args": ["-m", "komodo_mcp.main"],
"initializationOptions": {
"komodo_address": "https://komodo.example.com",
"komodo_api_key": "your_api_key",
"komodo_api_secret": "your_api_secret"
}
}
}
}Alternative parameter names (also supported):
address instead of komodo_addressapi_key instead of komodo_api_keyapi_secret instead of komodo_api_secretIf client-provided configuration is not available, the server will fall back to environment variables.
Create a .env file in the project root (or copy from .env.example):
cp .env.example .envEdit .env with your Komodo credentials:
KOMODO_ADDRESS=https://komodo.example.com
KOMODO_API_KEY=your_api_key_here
KOMODO_API_SECRET=your_api_secret_hereEnvironment Variables:
KOMODO_ADDRESS (required): Base URL of your Komodo instance (e.g., https://komodo.example.com)KOMODO_API_KEY (required): Your Komodo API keyKOMODO_API_SECRET (required): Your Komodo API secretYou can obtain API credentials from the Komodo UI Settings page.
Configuration Priority:
The server runs using stdio transport (standard for MCP):
python -m komodo_mcp.mainOr use the installed script:
komodo-mcp#### Build the Docker Image
docker build -f docker/Dockerfile -t komodo-mcp .#### Run the Container
With environment variables:
docker run -it --rm \
-e KOMODO_ADDRESS=https://komodo.example.com \
-e KOMODO_API_KEY=your_api_key \
-e KOMODO_API_SECRET=your_api_secret \
komodo-mcpWith docker-compose:
# Set environment variables in .env file or export them
export KOMODO_ADDRESS=https://komodo.example.com
export KOMODO_API_KEY=your_api_key
export KOMODO_API_SECRET=your_api_secret
docker-compose upWith client-provided configuration:
The Docker container can be used with client-provided configuration. Configure your MCP client to connect to the Docker container:
{
"mcpServers": {
"komodo": {
"command": "docker",
"args": [
"run", "-i", "--rm",
"komodo-mcp"
],
"initializationOptions": {
"komodo_address": "https://komodo.example.com",
"komodo_api_key": "your_api_key",
"komodo_api_secret": "your_api_secret"
}
}
}
}Local Installation:
{
"mcpServers": {
"komodo": {
"command": "python",
"args": ["-m", "komodo_mcp.main"],
"initializationOptions": {
"komodo_address": "https://komodo.example.com",
"komodo_api_key": "your_api_key",
"komodo_api_secret": "your_api_secret"
}
}
}
}Docker Installation:
{
"mcpServers": {
"komodo": {
"command": "docker",
"args": [
"run", "-i", "--rm",
"komodo-mcp"
],
"initializationOptions": {
"komodo_address": "https://komodo.example.com",
"komodo_api_key": "your_api_key",
"komodo_api_secret": "your_api_secret"
}
}
}
}komodo_login: Login to Komodo and obtain authentication tokenkomodo_list_api_keys: List all API keys for the current userkomodo_create_api_key: Create a new API keykomodo_delete_api_key: Delete an API keykomodo_get_deployment: Get detailed information about a deploymentkomodo_list_deployments: List all deploymentskomodo_get_build: Get detailed information about a buildkomodo_list_builds: List all buildskomodo_get_stack: Get detailed information about a stackkomodo_list_stacks: List all stackskomodo_get_server: Get detailed information about a serverkomodo_list_servers: List all serverskomodo_create_deployment: Create a new deploymentkomodo_update_deployment: Update an existing deploymentkomodo_delete_deployment: Delete a deploymentkomodo_create_build: Create a new buildkomodo_update_build: Update an existing buildkomodo_delete_build: Delete a buildkomodo_create_stack: Create a new stackkomodo_update_stack: Update an existing stackkomodo_delete_stack: Delete a stackkomodo_create_server: Create a new serverkomodo_update_server: Update an existing serverkomodo_delete_server: Delete a serverkomodo_run_build: Execute/run a buildkomodo_run_deployment: Execute/run a deploymentkomodo_stop_build: Stop a running buildkomodo_stop_deployment: Stop a running deploymentkomodo_execute_command: Execute a command on a server via terminal# Using an MCP client
result = await client.call_tool("komodo_list_deployments")
print(result)config = {
"name": "my-deployment",
"build": "build-id-here",
# ... other deployment config
}
result = await client.call_tool("komodo_create_deployment", {"config": config})
print(result)result = await client.call_tool("komodo_run_build", {
"build": "build-id-here",
"options": {
"environment": "production"
}
})
print(result)result = await client.call_tool("komodo_execute_command", {
"server": "server-id-here",
"command": "docker ps",
"options": {
"timeout": 30
}
})
print(result)The server provides comprehensive error handling:
All errors are properly formatted and include helpful error messages.
komodo-mcp/
├── src/
│ └── komodo_mcp/
│ ├── __init__.py
│ ├── main.py # Entry point
│ ├── server.py # FastMCP server with all tools
│ ├── client.py # Komodo HTTP client
│ ├── config.py # Configuration management
│ ├── errors.py # Custom exceptions
│ ├── models.py # Pydantic models
│ └── tools/ # Tool modules
│ ├── __init__.py
│ ├── auth.py
│ ├── user.py
│ ├── read.py
│ ├── write.py
│ ├── execute.py
│ └── terminal.py
├── tests/ # Test files
│ └── __init__.py
├── docker/
│ └── Dockerfile # Docker image definition
├── docker-compose.yml # Docker Compose configuration
├── .dockerignore # Docker ignore patterns
├── pyproject.toml # Project configuration
├── .env.example # Environment variable template
├── .gitignore
└── README.mdpytestFor development with Docker, you can mount the source code:
# In docker-compose.yml, uncomment the volumes section:
volumes:
- ./src:/app/src:roThen rebuild and run:
docker-compose up --buildThe Docker image uses Python 3.12-slim for a smaller footprint. The image includes:
komodo)MCP servers use stdio transport, so:
This project is licensed under the same license as the Komodo Client API.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.