{
  "markdown": "# buildkite-mcp-server\n\n[![Build status](https://badge.buildkite.com/79fefd75bc7f1898fb35249f7ebd8541a99beef6776e7da1b4.svg?branch=main)](https://buildkite.com/buildkite/buildkite-mcp-server)\n\n> **[Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction) server exposing Buildkite data (pipelines, builds, jobs, tests) to AI tooling and editors.**\n\nFull documentation is available at [buildkite.com/docs/apis/mcp-server](https://buildkite.com/docs/apis/mcp-server).\n\n---\n\n## Library Usage\n\nThe exported Go API of this module should be considered unstable, and subject to breaking changes as we evolve this project.\n\n---\n\n## Security\n\nTo ensure the MCP server is run in a secure environment, we recommend running it in a container.\n\nThis image is built from [cgr.dev/chainguard/static](https://images.chainguard.dev/directory/image/static/versions) and runs as an unprivileged user.\n\n### Passing identity headers through HTTP mode\n\nSelf-hosted HTTP deployments can forward selected headers from each inbound MCP request to the Buildkite API:\n\n```bash\nBUILDKITE_API_TOKEN=bkua_xxx \\\n  buildkite-mcp-server http \\\n  --passthrough-http-header X-User-Identity\n```\n\nRepeat `--passthrough-http-header` to allow more than one header, or set a comma-separated `BUILDKITE_PASSTHROUGH_HTTP_HEADERS` value. Only explicitly allowed headers are forwarded, and only to the origin configured by `BUILDKITE_BASE_URL`. They are removed from requests redirected elsewhere.\n\nTo authenticate each MCP request with its own Buildkite API token, allow `Authorization` and omit the process-wide token:\n\n```bash\nBUILDKITE_PASSTHROUGH_HTTP_HEADERS=Authorization \\\n  buildkite-mcp-server http\n```\n\nIn this mode every `/mcp` request must contain exactly one non-empty `Authorization` header. Missing credentials return HTTP 401; the server never falls back to a shared API token. The reverse proxy in front of the MCP server is responsible for authenticating callers and setting or validating any forwarded identity headers.\n\nHeader passthrough is not available in stdio mode. Before serving job logs, the server verifies that the current caller can access the job log. This check is performed for every log-tool request, including when the log data is already cached.\n\n---\n\n## Contributing\n\nDevelopment guidelines are in [`DEVELOPMENT.md`](DEVELOPMENT.md).\n\n---\n\n## License\n\nMIT © Buildkite\n\nSPDX-License-Identifier: MIT\n",
  "bytes": 2412,
  "sha": "887169a507c30c65e18d82f419989c306aed833306978daa712ecf6cddafe400",
  "repo_slug": "buildkite/buildkite-mcp-server",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_buildkite_buildkite_mcp_server_ab0fc158/readme"
}