Model Context Protocol (MCP) server for GoCD, with per-user access-token auth
View on GitHub ↗A production-grade Model Context Protocol (MCP) server that exposes GoCD over Streamable HTTP, authenticated per-user with GoCD Personal Access Tokens (PAT).
It lets MCP-capable agents (Claude Code, Claude Desktop, IDE extensions, …) inspect and operate GoCD pipelines — list and trigger pipelines, read statuses/history/console logs, pause/cancel, and (optionally) edit pipeline configuration — while GoCD's own RBAC is enforced for every call, because the server acts strictly as the authenticated user.
- Protocol: MCP revision 2025-11-25, Streamable HTTP transport - SDK: official modelcontextprotocol/go-sdk - Language: Go (1.25+) - Target: a single GoCD instance (verified against GoCD 25.4.0)
- Features - Tools & resources - Requirements - Installation - Configuration - Authentication & authorization - Running the server - Connecting an MCP client - Toolsets (risk tiers) - Architecture - Security - Logging & observability - Development - Troubleshooting - Contributing - License
- 🔐 Per-user identity — the MCP client presents a GoCD PAT as a bearer token; the server validates it and acts as that user, so GoCD RBAC applies automatically. No shared service account. - 🧰 17 tools across three risk tiers — read-only, safe actions, and config editing — gated by a single TOOLSET switch. - 🧱 Typed, compact outputs — focused projections of GoCD's responses to keep token usage low. - 📓 Audit log — every mutating operation is logged (login, action, target); tokens are never logged. - 🩺 Health probes — /healthz (liveness) and /readyz (checks GoCD reachability). - 🧪 Well-tested — unit
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/Ivinco--gocd-mcp.html)
Git-native persistent memory for AI coding agents. Implements Google OKF v0.2 with sub-300µs in-memory BM25 search, embedded MCP server, and progressive disclosure. Slashes token bloat by 80% with zer
vshulcz/deja-vuYour agents already solved this. deja finds it — retroactive search and MCP recall over the session logs your coding agents already wrote. Cross-agent, SSH-portable, one zero-dep binary, fully local.
olucurious/watchtowerSelf-hosted error tracking. A drop-in for Sentry and AppSignal SDKs: one Go binary and Postgres, with Slack, Linear, email and an MCP server for coding agents.
KnifeLemon/DroidlineAndroid automation from code. Test your apps on real phones, script the tasks you repeat, run a shelf of phones, or let an AI agent use one, from Python, Node.js, the CLI, HTTP or Appium clients. No A
enowdev/succubusCross-agent coordination for AI coding agents. One daemon, one database — so multiple agents in one repo can see each other's plan, tasks, and file claims.
AsWali/CallBoardA shared to-do list for you and your AI coding agents
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.