StuMason/coolify-mcp

npx -y @masonator/coolify-mcp (any MCP client JSON config, with COOLIFY_BASE_URL and COOLIFY_ACCESS_TOKEN env)
Claude Desktop one-click: download coolify-mcp.mcpb and drag into Settings → Extensions
claude mcp add coolify -e COOLIFY_BASE_URL=... -e COOLIFY_ACCESS_TOKEN=... -- npx @masonator/coolify-mcp@latest

Usage

• •Requires a running Coolify v4 instance and an API token (Coolify → Settings → API)
• •Every tool takes an action parameter; run one with no arguments and it lists what it accepts
• •Example prompts: 'Give me an overview of my infrastructure', 'Diagnose my {app}', 'Deploy application {uuid} and wait for it to finish', 'Update the DATABASE_URL env var for application {uuid}'
• •Behind Cloudflare Access or an auth proxy, add --header "Key: Value" args (repeatable)

Key features

• ✓44 consolidated action-param tools across infrastructure, diagnostics, servers, projects, apps, databases, services, env vars, storages, scheduled tasks, deployments, private keys, GitHub apps, teams, cloud tokens, Hetzner, and docs search
• ✓Token-optimized: consolidated tools keep the list at ~6,600 tokens instead of ~43,000
• ✓Summaries by default: list_* tools return uuid/name/status projections 90–99% smaller than raw API; get_* fetch full detail
• ✓Destructive operations pause and ask the human via MCP elicitation (Claude Code and VS Code Copilot today), stating the blast radius; also carries MCP destructiveHint annotations
• ✓Secrets masked at the API boundary by default (env var values return as ***) unless reveal: true; private key material is never returned
• ✓Verified deploys: deploy with wait:true polls to terminal status and returns a log tail on failure

Best for

Coolify self-hosters who want to deploy and operate their PaaS through AI assistants with human confirmation on destructive actions.

Caveats

• ⚠Requires a self-hosted Coolify v4 instance plus API token — not a standalone service
• ⚠Coolify v4.2: secrets hidden by default unless the token has sensitive-read scope; Member-role tokens are read-only (403 on writes)
• ⚠Elicitation confirmations are skipped on clients without support (Claude Desktop, claude.ai) — they behave as before
• ⚠COOLIFY_MCP_ELICITATION=off is an escape hatch for clients that advertise but don't implement elicitation
• ⚠delete_volumes defaults to true upstream, so leaving the flag unset is the destructive choice