buildkite-mcp-serverBLOCK
Official MCP Server for Buildkite.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://buildkite.com/buildkite/buildkite-mcp-server)
[Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction) server exposing Buildkite data (pipelines, builds, jobs, tests) to AI tooling and editors.
Full documentation is available at buildkite.com/docs/apis/mcp-server.
Comparing builds
The read-only compare_builds tool in the investigations toolset answers questions such as “What changed since this build last worked on main?” Supply org_slug, pipeline_slug, and the target build_number. It selects the most recently created earlier build that is currently passed on the same pipeline and exact branch. It does not require that the baseline had already passed when the target started. Supply baseline_build_number to compare against a specific build in that pipeline instead, including a failed build or one on another branch.
The response identifies the baseline and selection rule, counts outcomes across all jobs, and returns up to 100 job comparisons, prioritizing newly failing, recovered, and still-failing steps. Matching uses step keys, job type, matrix values, and parallel index/total. When both jobs lack keys, it falls back to the exact nonblank name plus type, group key, matrix values, and parallel index/total, only when that combination is unique in each build. Matched pairs expose match_method: "step_key" or "name_fallback"; fallback matches carry a warning that they are heuristic. Unnamed unkeyed jobs and duplicate identities remain unmatched. Explicit keys never fall back to names, even when a key was added, removed, or changed between builds. Added/removed means a job identity is present in only one build, so renaming unkeyed jobs or changing matrix values or parallelism can also produce added/removed entries. Retried attempt
2d5fa5a8222fOBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add buildkite-mcp-server --env BUILDKITE_API_TOKEN=${BUILDKITE_API_TOKEN} -- docker run -i --rm buildkite/buildkite-mcp-server:0.7.0Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (2 observation(s))
- Network
- declared (7 observation(s))
- Shell
- declared (2 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (7)
You are comparing two runs of an automated eval (a "base" and a "target").
# readable (and exfiltratable) by the agent under test.
.golangci.yml
.goreleaser.yaml
CLAUDE.md
@types/node, prettier, typescript
Gates applied: no_behavioural_pass.
2d5fa5a8222ffull audit observations/trust-audit/mcp-server/buildkite__buildkite-mcp-server.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 2d5fa5a8222f | BLOCK | D | 69 | first audit |
Questions
What is the buildkite-mcp-server MCP server?
Official MCP Server for Buildkite.
Is buildkite-mcp-server safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does buildkite-mcp-server need?
It reads BUILDKITE_API_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does buildkite-mcp-server run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as pipeline at 0.7.0.
How current is this page?
The grade is for one exact copy of the source (2d5fa5a8222f), read on 2026-10-08. The repository is watched and re-audited when it changes.