Buildkite MCP
Official Buildkite MCP for pipelines, builds, jobs, and tests with container-first deployment.
Delv Safety Grade: A
Score 83/100 · assessed 2026-04-28
Buildkite MCP is an official server from Buildkite, a well-established CI/CD platform trusted by engineering teams globally. The maintainer score is excellent given Buildkite's track record and professional operations. Permissions are reasonably scoped: read access to pipelines, builds, jobs, and test results, plus write access to trigger builds and modify pipeline YAML. This is broader than pure read-only but appropriate for CI/CD workflows. The container-first deployment via Docker is a genuine security positive, isolating the API token and simplifying updates. Supply chain score is moderate because there's no npm or PyPI package, just a Docker image, which reduces verifiability compared to standard registries. Transparency is strong with open source code and Buildkite's public documentation. No known security incidents. The API token requirement is standard for Buildkite integrations and properly documented.
Lethal Trifecta (prompt-injection exposure)
TRIFECTA RISKSame shape as CircleCI. Pipeline definitions read user-controlled YAML; agents run with privileged tokens.
Green flags
- Official vendor implementation from Buildkite themselves
- Container isolation protects API token from host filesystem exposure
- Read-heavy design appropriate for CI/CD monitoring use cases
- Open source repository enables community audit and contribution
- Buildkite has strong enterprise security track record
Red flags
- Write access to trigger builds could enable resource exhaustion attacks
- Pipeline YAML editing allows arbitrary CI command injection if misused
- Docker-only distribution limits supply chain verification vs npm/pypi
- API token grants full account access within Buildkite permissions scope
Permissions requested
Install
docker run buildkite/buildkite-mcp-server
BUILDKITE_API_TOKENReview
Install this if you're already on Buildkite and you regularly investigate build failures or analyse test trends. The Docker deployment is clean, the API coverage is comprehensive, and it's maintained by the vendor. Skip it if you only check build status in passing or if your CI/CD is elsewhere.
Good at
- Official vendor support means it tracks Buildkite API changes without lag.
- Container deployment isolates credentials and simplifies updates.
- Covers the full build lifecycle: pipelines, builds, jobs, and structured test results.
- Write access lets you trigger builds and edit pipeline YAML from Claude.
- Test analytics queries are particularly strong for spotting flaky tests across builds.
Watch out
- Requires Docker running locally, which adds a dependency if you're not already using containers.
- Tool-based interface means Claude can't passively browse build history without explicit queries.
- Limited to Buildkite users, no cross-platform CI/CD support.
- Manual config required for hosts beyond Claude Desktop, though the Docker approach is consistent.
Use cases
- build orchestration
- failure triage
- pipeline edits
- test result queries
Getting started
Works with
Similar MCPs
- GitHubFull GitHub API access - manage repos, issues, PRs, and code search. One of the most useful MCPs for any developer workflow.
- GrafanaGrafana Labs' official MCP. Read dashboards, datasources, alerts, and run Loki/Prometheus queries from inside your agent.
- SentryPull live errors, issues, and replays from Sentry into Claude. Great for debugging sessions where the model can see what actually broke in prod.
- MCP CLIInteractive CLI inspector for MCP servers supporting OAuth, tool calls, resource reads, and prompt runs.