MCP Jenkins

Findings (24)

• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  dnspython@2.8.0: 1 known vulnerability

  GHSA-45c3-73f7-pv4m

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  filelock@3.24.3: 9 known vulnerabilities

  GHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +4 more

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  mcp@1.26.0: 7 known vulnerabilities

  PYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  python-multipart@0.0.22: 6 known vulnerabilities

  PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039, PYSEC-2026-3040 +1 more

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  soupsieve@2.8.3: 4 known vulnerabilities

  PYSEC-2026-3071, PYSEC-2026-3072, PYSEC-2026-4170, PYSEC-2026-4171

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  starlette@0.52.1: 5 known vulnerabilities

  PYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  urllib3@2.6.3: 5 known vulnerabilities

  PYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  virtualenv@20.39.0: 19 known vulnerabilities

  PYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014, GHSA-394h-qwmc-48pf +14 more

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  idna@3.11: 1 known vulnerability

  PYSEC-2026-215

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  opentelemetry-api@1.39.1: 1 known vulnerability

  GHSA-xcq7-p3pf-p88h

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  pydantic-settings@2.13.1: 1 known vulnerability

  GHSA-4xgf-cpjx-pc3j

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  pygments@2.19.2: 1 known vulnerability

  PYSEC-2026-2987

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  pytest@9.0.2: 1 known vulnerability

  PYSEC-2026-1845

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  python-dotenv@1.2.1: 1 known vulnerability

  PYSEC-2026-2270

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  requests@2.32.5: 1 known vulnerability

  PYSEC-2026-2275

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)
• lowLow. Minor, or common in normal tools. Shown for information.
  Contacted these domains while starting up (no manifest to compare against)

  pypi.org

Network activity

Tools exposed (36)

• get_running_builds

  Get all running builds from Jenkins

• get_build

  Get specific build info from Jenkins

• get_build_scripts

  Get the scripts used in a specific build in Jenkins

• get_build_console_output

  Get the console output of a specific build in Jenkins

• get_build_test_report

  Get the test report of a specific build in Jenkins The report lists every test case, passing ones included, so it can be very large; use get_build_test_failures to see what failed.

• get_build_test_failures

  Get the failing tests of a specific build in Jenkins, with their error details For a matrix build, the failures of all configurations are returned, each with the URL of its configuration build.

• get_build_parameters

  Get the parameters of a specific build in Jenkins

• stop_build

  Stop a specific build in Jenkins

• get_pending_inputs

  Get the pending input steps of a specific build in Jenkins A pipeline showing "Paused for Input" is waiting on an input step. Call this before submit_input to discover the input id and the parameter definitions the pipeline is waiting for. Only the given build is inspected. With number=None that i

• submit_input

  Respond to a pipeline input step of a build that is paused for input in Jenkins

• get_all_build_artifacts

  List the artifacts of a specific build in Jenkins

• get_build_artifact

  Download an artifact from a specific build in Jenkins Binary files are returned as base64-encoded content; text files are returned as plain text.

• get_build_artifact_url

  Get the direct URL of an artifact from a specific build in Jenkins

• get_all_items

  Get all items from Jenkins

• get_item

  Get specific item from Jenkins

• get_item_config

  Get specific item config from Jenkins

• set_item_config

  Set specific item config in Jenkins

• query_items

  Query items from Jenkins

• build_item

  Build an item in Jenkins

• get_item_parameters

  Get the parameter definitions of a Jenkins job

• get_all_nodes

  Get all nodes from Jenkins

• get_node

  Get a specific node from Jenkins Contains executor about the node.

• get_node_config

  Get node config from Jenkins

• set_node_config

  Set specific node config in Jenkins

• get_all_plugins

  Get all installed plugins from Jenkins

• get_plugin

  Get a specific plugin from Jenkins Contains detailed information about the plugin, including dependencies when depth >= 2.

• get_plugins_with_problems

  Get all plugins with problems from Jenkins These are plugins that have issues such as missing dependencies, incompatible versions, core version mismatch, or other configuration problems.

• get_plugins_with_backup

  Get plugins that can be downgraded Returns plugins that have a backupVersion and can be rolled back.

• get_plugins_with_updates

  Get plugins that have available updates

• get_plugin_dependency_graph

  Get dependency graph for a specific plugin in Graphviz format Recursively analyzes dependencies down to leaf nodes. Returns nodes and edges that can be used to generate a dependency graph.

• get_all_queue_items

  Get all items in Jenkins queue

• get_queue_item

  Get a specific item in Jenkins queue by id

• cancel_queue_item

  Cancel a specific item in Jenkins queue by id

• get_all_views

  Get all top-level views from Jenkins.

• get_view

  Get a Jenkins view by path, returning its jobs and/or nested sub-views. Views can be nested up to multiple levels deep. Use "/" to separate levels in the path. If the view contains sub-views instead of jobs, the response will include their names so you can drill down further.

• run_groovy_script

  Execute an arbitrary Groovy script on Jenkins. This tool provides access to Jenkins internal features that are not available via REST API.