Is Jenkins Mcp Server safe to use?

Jenkins Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install Jenkins Mcp Server?

Jenkins Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with Jenkins Mcp Server?

Jenkins Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Jenkins Mcp Server actively maintained?

Jenkins Mcp Server is less actively maintained — last commit was 342 days ago. It has 13 GitHub stars.

Jenkins Mcp Server

Name: Jenkins Mcp Server
Author: AshwiniGhuge3012

npx · by AshwiniGhuge3012

An MCP server for interacting with a Jenkins server. Allows you to trigger jobs, check build statuses, and manage your Jenkins instance through MCP.

13 163.2k/wk GitHub npm PyPI

No known CVEs

No license

Stale

Last commit 342d ago

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

Edit this pageView history

DevOps

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "jenkins": {
      "env": {
        "JENKINS_URL": "http://your-jenkins-server:8080",
        "JENKINS_USER": "your-username",
        "JENKINS_API_TOKEN": "your-api-token"
      },
      "command": "jenkins-mcp"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/jenkins-mcp-server)](https://mcppedia.org/s/jenkins-mcp-server)

Read me

What Jenkins Mcp Server does

An enterprise-grade MCP (Model Context Protocol) server for seamless Jenkins CI/CD integration. Enables AI assistants like Claude to interact with Jenkins through a comprehensive, production-ready API.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

45/100across 5 weighted dimensions

How we score →

0255075100

−55

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

6 fixed

CVE-2026-59950info · fixed

MCP Python SDK: WebSocket server transport does not support Host/Origin validation

### Summary In affected versions, the deprecated WebSocket server transport (`mcp.server.websocket.websocket_server`) accepted the WebSocket handshake without applying any `Host` or `Origin` header validation. The `TransportSecuritySettings` mechanism that the SSE and Streamable HTTP transports use for this purpose was not wired into the WebSocket transport, so there was no SDK-level way to restrict which origins could connect. ### Am I affected? Only if a developer's application server exposes

Affected: >= 0Fixed in 1.28.1source →

CVE-2026-52869high · fixedCVSS 7.1

MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

### Summary In affected versions, the SSE and Streamable HTTP server transports routed incoming requests to an existing session based only on the session identifier, without verifying that the request was authenticated as the same principal that created the session. Anyone who learned or guessed a session ID could send JSON-RPC messages on that session, regardless of which bearer token the request carried. ### Am I affected? Only if a developer's application server uses an HTTP transport (SSE,

Affected: >= 0Fixed in 1.27.2source →

CVE-2026-52870high · fixedCVSS 7.6

MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks

### Summary In affected versions, the default request handlers installed by the experimental tasks feature (`server.experimental.enable_tasks()`) did not check which session created a task before acting on it. On a server with more than one connected client, any client could observe, read results from, and cancel tasks belonging to other clients. ### Am I affected? Only if the developer's application server calls `server.experimental.enable_tasks()`. If `grep -r enable_tasks` over their codebas

Affected: >= 1.23.0Fixed in 1.27.2source →

CVE-2025-66416info · fixed

Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default

### Description The Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server is run on localhost without authentication using `FastMCP` with streamable HTTP or SSE transport, and has not configured `TransportSecuritySettings`, a malicious website could exploit DNS rebinding to bypass same-origin policy restrictions and send requests to the local MCP server. This could allow an attacker to invoke tools or ac

Affected: >= 0Fixed in 1.23.0source →

CVE-2025-53366info · fixed

MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS

A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability (500 errors) until manually restarted. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures. Thank you to Rich Harang for reporting this issue.

Affected: >= 0Fixed in 1.9.4source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Jenkins Mcp Server safe to use?: Jenkins Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Jenkins Mcp Server?: Jenkins Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with Jenkins Mcp Server?: Jenkins Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Jenkins Mcp Server actively maintained?: Jenkins Mcp Server is less actively maintained — last commit was 342 days ago. It has 13 GitHub stars.

Similar servers

Others in devops

View all →

Mcp Gitlab94

MCP server for using the GitLab API

1.7k 12

Mcp Server Kubernetes90

MCP Server for kubernetes management commands

1.4k 22

io.github.dynatrace-oss/dynatrace-managed-mcp88

MCP server for Dynatrace Managed to access logs, events, and metrics.

21 2

io.github.TateLyman/x402-triage-mcp87

MCP server for no-payment x402 surface triage, 402 Index health checks, and paid review handoff.

MCP Security Weekly

Get CVE alerts and security updates for Jenkins Mcp Server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

DevOps

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "jenkins": {
      "env": {
        "JENKINS_URL": "http://your-jenkins-server:8080",
        "JENKINS_USER": "your-username",
        "JENKINS_API_TOKEN": "your-api-token"
      },
      "command": "jenkins-mcp"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/jenkins-mcp-server)](https://mcppedia.org/s/jenkins-mcp-server)

Read me

What Jenkins Mcp Server does

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

README

Jenkins MCP Server

🚀 Quick Start

npm Installation (Recommended)

# Global installation
npm install -g @ashwinighuge/jenkins-mcp-server

# Or use directly with npx
npx @ashwinighuge/jenkins-mcp-server --help

Claude Desktop Integration

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "jenkins": {
      "command": "jenkins-mcp",
      "env": {
        "JENKINS_URL": "http://your-jenkins-server:8080",
        "JENKINS_USER": "your-username",
        "JENKINS_API_TOKEN": "your-api-token"
      }
    }
  }
}

✨ Features

🔧 Job Management: Trigger, list, search, and monitor Jenkins jobs with full folder support
📊 Build Status: Real-time build status tracking and console log streaming
🔄 Pipeline Support: Stage-by-stage pipeline execution monitoring with detailed logs
📦 Artifact Management: List, download, and search build artifacts across multiple builds
⚡ Batch Operations: Parallel job execution with intelligent priority queuing
🚀 Performance Caching: Multi-tier intelligent caching system with automatic invalidation
🔍 Advanced Filtering: Filter jobs by status, results, dates, and more with regex support
📋 Queue Management: Real-time build queue monitoring and management
🔒 Enterprise Security: CSRF protection, 2FA support, and secure authentication
🌐 Cross-Platform: Works on Windows, macOS, and Linux
🔄 Retry Logic: Built-in exponential backoff for improved reliability
📡 Transport Flexibility: Supports both STDIO and HTTP transports
✅ Input Validation: Robust Pydantic-based validation and error handling

📋 Prerequisites

Node.js: 14.0.0 or higher
Python: 3.12 or higher
Jenkins: 2.401+ (recommended)
Jenkins API Token: For authentication

🛠 Installation Methods

Method 1: npm (Recommended)

# Install globally for system-wide access
npm install -g @ashwinighuge/jenkins-mcp-server

# Verify installation
jenkins-mcp --help

Method 2: Development Setup

# Clone the repository
git clone https://github.com/AshwiniGhuge3012/jenkins-mcp-server
cd jenkins-mcp-server

# Install Node.js dependencies
npm install

# Install Python dependencies
pip install -r requirements.txt  # or use uv pip install

# Run locally
node bin/jenkins-mcp.js --help

🔐 Configuration

Environment Variables

Create a .env file in your working directory:

# Required Jenkins Configuration
JENKINS_URL="http://your-jenkins-server:8080"
JENKINS_USER="your-username"
JENKINS_API_TOKEN="your-api-token"

# Optional: Server Configuration
MCP_PORT=8010
MCP_HOST=0.0.0.0

# Optional: Retry Configuration
JENKINS_MAX_RETRIES=3
JENKINS_RETRY_BASE_DELAY=1.0
JENKINS_RETRY_MAX_DELAY=60.0
JENKINS_RETRY_BACKOFF_MULTIPLIER=2.0

# Optional: Performance Cache Configuration
JENKINS_CACHE_STATIC_TTL=3600        # 1 hour
JENKINS_CACHE_SEMI_STATIC_TTL=300    # 5 minutes
JENKINS_CACHE_DYNAMIC_TTL=30         # 30 seconds
JENKINS_CACHE_SHORT_TTL=10           # 10 seconds
JENKINS_CACHE_STATIC_SIZE=1000       # Max cached items
JENKINS_CACHE_SEMI_STATIC_SIZE=500
JENKINS_CACHE_DYNAMIC_SIZE=200
JENKINS_CACHE_PERMANENT_SIZE=2000
JENKINS_CACHE_SHORT_SIZE=100

Getting Jenkins API Token

Log into your Jenkins instance
Click your username → Configure
Scroll to API Token section
Click Add new Token
Give it a name and click Generate
Copy the generated token (save it securely!)

🚀 Usage

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

45/100across 5 weighted dimensions

How we score →

0255075100

−55

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

6 fixed

CVE-2026-59950info · fixed

MCP Python SDK: WebSocket server transport does not support Host/Origin validation

Affected: >= 0Fixed in 1.28.1source →

CVE-2026-52869high · fixedCVSS 7.1

MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

Affected: >= 0Fixed in 1.27.2source →

CVE-2026-52870high · fixedCVSS 7.6

MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks

Affected: >= 1.23.0Fixed in 1.27.2source →

CVE-2025-66416info · fixed

Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default

Affected: >= 0Fixed in 1.23.0source →

CVE-2025-53366info · fixed

MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS

Affected: >= 0Fixed in 1.9.4source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Jenkins Mcp Server safe to use?: Jenkins Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Jenkins Mcp Server?: Jenkins Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with Jenkins Mcp Server?: Jenkins Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Jenkins Mcp Server actively maintained?: Jenkins Mcp Server is less actively maintained — last commit was 342 days ago. It has 13 GitHub stars.