Heroku
Heroku's official MCP. Manage apps, databases, dynos, and pipelines through the platform CLI from inside an agent.
Delv Safety Grade: A
Score 84/100 · assessed 2026-04-28
Heroku's official MCP server wraps the Heroku CLI to manage apps, databases, dynos, and pipelines from within Claude or other MCP hosts. The maintainer score is excellent: Heroku (Salesforce) is a major platform vendor with strong institutional backing. Supply chain is solid via npm with standard package distribution. Transparency is good with open source code and clear documentation. The permissions profile is moderate: whilst scoped to Heroku's API, it grants broad control over production infrastructure including app restarts, database operations, dyno scaling, and log access. The HEROKU_API_KEY provides full account access, so compromise means complete control over all Heroku resources. No known security incidents. The main risk is the breadth of write permissions across critical production systems, though this is inherent to the tool's purpose. Appropriate for teams already trusting Heroku with production workloads.
Lethal Trifecta (prompt-injection exposure)
TWO OF THREESame shape as Vercel.
Green flags
- Official Heroku (Salesforce) maintained package with institutional backing
- Distributed via npm with standard versioning and package management
- Open source with clear documentation and issue tracking
- Permissions scoped to Heroku API, no arbitrary shell or filesystem access
- Well-defined CLI wrapper pattern limits attack surface
Red flags
- API key grants full account access to all Heroku apps and databases
- Can restart dynos, scale resources, and modify production infrastructure
- Database operations include destructive commands like pg:reset
- Log access may expose sensitive application data or credentials
Permissions requested
Install
npx -y @heroku/mcp-server
HEROKU_API_KEYReview
Install this if you manage Heroku apps regularly and want to collapse the terminal-to-browser-to-chat loop. Skip it if you're a casual deployer or not on Heroku at all. It's a well-executed tool for a specific audience.
Good at
- Wraps the Heroku CLI cleanly, so you can restart apps, tail logs, and query databases without leaving your chat window.
- The pg:psql integration lets you run natural-language Postgres queries, which is faster than opening a terminal for quick checks.
- Official vendor support means it tracks Heroku's API changes and won't break unexpectedly.
- Supports multiple MCP hosts, including Claude Desktop, Claude Code, and Cursor.
Watch out
- It's a thin wrapper, so slow CLI commands are still slow here, and there's no caching to speed up repeated queries.
- Vague natural-language prompts can misfire, so you need to be specific about app names and parameters.
- Only useful if you're already on Heroku, which limits its audience to a specific platform.
- Hosts beyond Claude Desktop require manual config setup, which adds friction.
Use cases
- Restarting an app from chat
- Inspecting recent deploy logs
- Running pg:psql via natural language
- Generating a list of paid add-ons across apps
Getting started
Works with
Similar MCPs
- TerraformHashiCorp's official Terraform MCP. Connects agents to the Terraform Registry for module discovery and infrastructure-as-code automation.
- ESXi MCPManages VMware ESXi and vCenter for VM lifecycle and real-time performance monitoring via REST and SSE.
- AWS LabsAWS Labs ships a growing family of MCPs for S3, Lambda, EKS, CDK, etc. Modular install — pick the services you actually use.
- LocalStackLocalStack's official MCP. Drive a local AWS environment from chat: create stacks, set quotas, inspect emulated services.