P4mcp Server MCP Server

Findings (7)

• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  network issue

  Details are available to the maintainer after claiming this listing.
• lowLow. Minor, or common in normal tools. Shown for information.
  fastmcp@3.4.4: 1 known vulnerability

  GHSA-7xgj-8392-5q4r

  requirements.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  fastmcp-slim@3.4.4: 1 known vulnerability

  GHSA-7xgj-8392-5q4r

  requirements.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  idna@3.9.0: 1 known vulnerability

  PYSEC-2026-215

  requirements.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  Reads environment variables not listed in the manifest

  P4MCP_LOG_DIR, P4MCP_MAX_RESULTS, P4MCP_MAX_SCAN_ROWS, P4MCP_CA_BUNDLE, P4MCP_SSL_VERIFY, P4MCP_TLS_CA_MODE, OTEL_EXPORTER_OTLP_ENDPOINT, OTEL_EXPORTER_OTLP_PROTOCOL, GITHUB_TOKEN, LOGSTASH_ENDPOINT, REPO_OWNER, REPO_NAME

Network activity

Tools exposed (38)

• query_server

  Get server info and current user information (READ permission)

• query_workspaces

  Get workspace details, list workspaces, check type and status (READ permission)

• modify_workspaces

  Create/delete workspace, Update workspace specs, and switch active workspace (WRITE permission)

• query_files

  Get file content, history, info, diff, annotations, search by name, grep by content (READ permission)

• modify_files

  Add, edit, move, delete, revert, reconcile, resolve, and sync files (WRITE permission)

• query_changelists

  Get changelist details and list changelists (READ permission)

• modify_changelists

  Create/delete changelists, update changelists and organize files/jobs (WRITE permission)

• query_shelves

  List shelves, get shelve diff and files (READ permission)

• modify_shelves

  Create/delete, update shelves and unshelve files (WRITE permission)

• query_jobs

  Get jobs from changelist and get job details (READ permission)

• modify_jobs

  Link or unlink jobs (WRITE permission)

• query_reviews

  Get review details and list reviews (READ permission). Open review - state is 'approved but pending=true' or 'needsReview' or 'needsRevision'. Closed review - state is 'approved but pending=false' or 'rejected' or 'archived'.

• modify_reviews

  Create/update/delete reviews (WRITE permission)

• query_streams

  Query streams: list, get spec, children/parent/graph, integration status, workspaces, validate files, check resolve, interchanges (READ permission)

• modify_streams

  Create/update/delete streams, edit/resolve/revert/shelve stream specs, copy/merge/integrate/populate between streams, switch workspace, create stream workspace (WRITE permission)

• query_p4dam_assets

  Search P4 DAM assets. Supports filtering by keyword, filename, tag, file type, depot path, project, repository, uploader, file size, and date range. Returns a list of matching assets with metadata and URLs. Use when you don't have a specific depot path yet. For full metadata on a known asset, use qu

• query_p4dam_asset

  Fetch full metadata for a single P4 DAM asset. Pass depot_path when project/repository scope is unknown; pass path + project_id + repository_id when scope is known (more efficient). For discovery without a known path, use query_p4dam_assets instead.

• query_p4dam_projects

  List P4 DAM projects.

• query_p4dam_repositories

  List repositories (collections) in a P4 DAM project. The response includes repository type (helix_stream or helix_classic) and linked_streams.

• query_p4dam_helix_classic_branches

  List Helix Classic branches in a repository. Only applies to helix_classic repositories.

• fetch_p4dam_media

  Fetch P4 DAM media and return it as a viewable image. Use thumbnail_url, preview_url, or sprite_url from query_p4dam_assets / query_p4dam_asset results — these are only present for image files. For file_url of non-image assets, returns the MIME type and size instead of image content.

• query_p4dam_file_reviews

  List P4 DAM file (asset) reviews for a project. Returns paginated results with metadata (total_count, more_results). For full detail on a single review including download_url, use query_p4dam_file_review instead.

• query_p4dam_file_review

  Fetch a single P4 DAM file review by UUID. Returns full detail including state, view_paths, asset_bundle, creator, and download_url (for bundle reviews). Use query_p4dam_file_reviews to discover review UUIDs.

• query_p4dam_workflows

  List P4 DAM workflows. Each workflow defines the set of states an asset review can be in (open, review, done kinds). Pass include=['states'] to get all states in one call. Use query_p4dam_workflow_states for the states of a specific workflow.

• query_p4dam_workflow

  Fetch a single P4 DAM workflow by short name or UUID. Pass include=['states'] to see all available review states with their kind (open/review/done), color, and position. Pass include=['transition_rules'] to see which state transitions are allowed and for which users.

• query_p4dam_workflow_states

  List states for a P4 DAM workflow. Each state has: name, short_name, kind (open/review/done), color, and position. The short_name is the value to pass as state when creating or updating a file review. State kinds: 'open' — initial state; 'review' — under review; 'done' — terminal. Preconfigured sta

• query_p4dam_custom_attribute_templates

  List custom file attribute templates available in a P4 DAM project. Each template defines an attribute name, type (text, single-select, multi-select, checkbox), and for select types the list of allowed values. Use the returned UUID when setting attribute values with update_p4dam_asset_custom_attribu

• create_p4dam_comment

  Add a comment to a file review (asset bundles only), a file within a file review, a committed file or asset bundle without a review, or reply to an existing comment.

• regenerate_p4dam_preview

  Trigger P4Search to regenerate the thumbnail and preview image for a specific asset revision. Deletes the existing preview attributes and asks P4Search to re-index the file. Returns 'accepted' immediately — the actual regeneration happens asynchronously. Requires P4.P4Search.URL and P4.P4Search.AUTH

• create_p4dam_asset_bundle

  Create a P4 DAM asset bundle — a named collection of depot files scoped for review. Requires a project, repository, depot_path (must end .p4bundle), and view_paths. Supply stream_path for helix_stream repos, or helix_classic_branch for helix_classic repos.

• update_p4dam_asset_bundle

  Update a P4 DAM asset bundle. Only description, view_paths, and hero_file_path can be changed after creation. depot_path is immutable. Provide only the fields you want to change.

• delete_p4dam_asset_bundle

  Delete a P4 DAM asset bundle. Prompts for confirmation before deleting.

• sync_p4dam_asset_bundle

  Sync an asset bundle's depot files to the local P4CLIENT workspace via p4 sync. Requires P4CLIENT to be set — returns an error if it is not. Sync is scoped to view_paths only; files outside those paths are not touched even if the client's View is broader.

• create_p4dam_file_review

  Create a P4 DAM file (asset) review. Supports both single-file reviews and asset bundle reviews (.p4bundle). For bundle reviews supply asset_bundle UUID (auto-detected from depot_path when omitted). For helix_classic repos supply helix_classic_branch. Always set base_commit_id to the changelist the

• update_p4dam_file_review

  Update a P4 DAM file review. Provide only the fields you want to change. State transitions must be permitted by the project's workflow for the current user.

• delete_p4dam_file_review

  Delete a P4 DAM file review. Prompts for confirmation before deleting.

• update_p4dam_asset_tags

  Add or remove user tags and auto-tags on one or more P4 DAM assets in a single call. Supports individual files, specific revisions, and recursive folder paths (//depot/folder/...). All three operations (create, delete, delete_auto) can be combined in one request. Returns an array with the updated t

• update_p4dam_asset_custom_attributes

  Set or remove custom attribute values on one or more P4 DAM assets. Use query_p4dam_custom_attribute_templates first to discover available templates and their UUIDs. Supports individual files, specific revisions (identifier in path), and recursive folders (//depot/folder/...).