Unleash MCP ServerBLOCK
An MCP server for Unleash feature flagging server, and your new best coding buddy
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A purpose-driven Model Context Protocol (MCP) server for managing Unleash feature flags. This server enables LLM-powered coding assistants to create and manage feature flags following Unleash best practices.
To share feedback, join our community Slack or open an issue on GitHub.
Overview
This MCP server provides tools that integrate with the Unleash Admin API, allowing AI coding assistants to:
- Create feature flags with proper validation and typing.
- Detect existing flags to prevent duplicates or encourage reuse.
- Evaluate changes to decide when a feature flag is needed.
- Stream progress for visibility during operations.
- Handle errors gracefully with helpful hints.
- Report problems with the MCP to Unleash through
send_feedback, only after the user opts in. - Follow best practices from the Unleash documentation.
Available tools
The MCP server exposes the following tools:
create_flag: Creates a feature flag in Unleash.evaluate_change: Scores risk and recommends feature flag usage.detect_flag: Discovers existing feature flags to avoid duplicates.wrap_change: Provides guidance on how to wrap a change in a feature flag.set_flag_rollout: Configures rollout strategies for a feature flag (does not enable the flag).get_flag_state: Surfaces a feature flag's metadata and its activation strategies.list_flags: Lists all feature flags in a project, with optional pagination and sort order.list_projects: Lists Unleash projects available to the configured token, with optional pagination.toggle_flag_environment: Enables or disables a featur
db2fcd223918OBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add mcp --env UNLEASH_PAT=${UNLEASH_PAT} -- npx -y @unleash/[email protected]Exposed tools (2)
0 read · 2 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
dry-run-placeholder-archived-flag | write | Dry-run mode placeholder for an archived flag. Set UNLEASH_BASE_URL and UNLEASH_PAT to fetch real archived flags. |
dry-run-placeholder-flag | write | Dry-run mode placeholder. Set UNLEASH_BASE_URL and UNLEASH_PAT to fetch real feature flags. |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (5 observation(s))
- Shell
- declared (1 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (3)
codePatterns: ['crypto.createCipher', 'sanitize(', 'escape(', 'exec(', 'eval('],@modelcontextprotocol/sdk, dotenv, zod, @types/express, @types/node, @types/supertest, express, supertest
Gates applied: no_behavioural_pass, no_license.
db2fcd223918full audit observations/trust-audit/mcp-server/unleash__unleash-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | db2fcd223918 | BLOCK | D | 69 | first audit |
Questions
What is the @unleash/mcp MCP server?
An MCP server for Unleash feature flagging server, and your new best coding buddy
What tools does @unleash/mcp expose?
2 in total: 0 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is @unleash/mcp safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does @unleash/mcp need?
It reads UNLEASH_PAT from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does @unleash/mcp run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @unleash/mcp at 0.5.0-beta.3.
How current is this page?
The grade is for one exact copy of the source (db2fcd223918), read on 2026-10-12. The repository is watched and re-audited when it changes.