Heroku MCP Server

Findings (6)

• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@3.25.76: 1 known vulnerability

  GHSA-mrhx-c7xc-m3w5

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  glob@13.0.6: 1 known vulnerability

  GHSA-3g3m-2fjr-6pw4

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  minimatch@10.2.5: 1 known vulnerability

  GHSA-g3hv-75wg-m249

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  minimatch@10.2.6: 1 known vulnerability

  GHSA-g3hv-75wg-m249

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  package.json has a prepare script

  husky

  package.json
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)

Network activity

Tools exposed (33)

• list_apps

  List Heroku apps: owned, collaborator access, team/space filtering

• get_app_info

  Get app details: config, dynos, addons, access, domains

• create_app

  Create app: custom name, region (US/EU), team, private space

• rename_app

  Rename app: validate and update app name

• maintenance_on

  Enable maintenance mode and redirect traffic for a Heroku app

• maintenance_off

  Disable maintenance mode and restore normal app operations

• get_app_logs

  App logs: monitor/debug/filter by dyno/process/source

• list_private_spaces

  Lists Heroku Private Spaces with CIDR blocks, regions, compliance and capacity details. JSON output supported.

• list_teams

  Lists accessible Heroku Teams. Use for: viewing teams, checking membership, getting team metadata, and verifying access. JSON output available.

• list_addons

  List add-ons: all apps or specific app, detailed metadata

• get_addon_info

  Get add-on details: plan, state, billing

• create_addon

  Create add-on: specify service, plan, custom names

• list_addon_services

  List available add-on services and features

• list_addon_plans

  List service plans: features, pricing, availability

• pg_psql

  Execute SQL queries: analyze, debug, modify schema, manage data

• pg_info

  View database status: config, metrics, resources, health

• pg_ps

  Monitor active queries: progress, resources, performance

• pg_locks

  Analyze locks: blocked queries, deadlocks, concurrency

• pg_outliers

  Find resource-heavy queries: performance, patterns, optimization

• pg_credentials

  Manage access: credentials, permissions, security, monitoring

• pg_kill

  Stop processes: stuck queries, blocking transactions, runaway operations

• pg_maintenance

  Track maintenance: windows, schedules, progress, planning

• pg_backups

  Manage backups: schedules, status, verification, recovery

• pg_upgrade

  Upgrade PostgreSQL: version migration, compatibility, safety

• ps_list

  List and monitor Heroku app dynos. View running dynos, check status/health, monitor process states, verify configurations.

• ps_scale

  Scale Heroku app dynos. Adjust quantities, change sizes, view formation details, manage resources.

• ps_restart

  Restart Heroku app processes. Restart specific dynos, process types, or all dynos. Reset dyno states selectively.

• pipelines_create

  Creates new Heroku deployment pipeline with configurable stages, apps, and team settings

• pipelines_promote

  Promotes apps between pipeline stages with configurable target applications

• pipelines_list

  Lists accessible Heroku pipelines with ownership and configuration details

• pipelines_info

  Displays detailed pipeline configuration, stages, and connected applications

• deploy_to_heroku

  Use for all deployments. Deploys new/existing apps, with or without teams/spaces, and env vars to Heroku. Ask for app name if missing. Requires valid app.json via appJson param.

• deploy_one_off_dyno

  Run code/commands in Heroku one-off dyno with network and filesystem access. Requirements: - Show command output - Use app_info for buildpack detection - Support shell setup commands - Use stdout/stderr Features: - Network/filesystem access - Environment variables - File operations - Temp directo