jenkins-mcp-cli 0.1.0

Jenkins CLI + MCP server — manage nodes, users, and jobs from the terminal or from AI agents

jenkins-mcp

A Jenkins CLI + MCP server — manage nodes, users, and jobs from the terminal or from AI agents.

Features

• Node Management: Add, remove, and list worker nodes/agents.
• Account Management: Create and configure Jenkins user accounts.
• Job Overview: List jobs and their status.
• CSRF Token / Crumb Handling: Automatically acquires and attaches Jenkins-Crumb for Jenkins 2.x instances with security enabled.
• Dual Mode: Works as a standalone terminal CLI (jenkins-mcp) or as an MCP server for AI agents (jenkins-mcp serve).

Install

pip install jenkins-mcp-cli

or with uv:

uv tool install jenkins-mcp-cli

(installs the jenkins-mcp command)

Quickstart

export JENKINS_URL="https://jenkins.example.com"
export JENKINS_USER="admin"
export JENKINS_PASSWORD="your-api-token"

jenkins-mcp status

CLI Usage

# Check status of all nodes
jenkins-mcp status

# Add a worker node
jenkins-mcp node add worker-01 --ip 192.0.2.10 --labels "linux worker"

# Remove a worker node
jenkins-mcp node remove worker-01

# Create a new user account
jenkins-mcp user create someuser 'a-strong-password' --email [e-mail]

# List all jobs
jenkins-mcp jobs

# Run the MCP stdio server
jenkins-mcp serve

Credentials can also be passed explicitly, overriding env vars / config file:

jenkins-mcp --url https://jenkins.example.com --user admin --password '...' status

Configuration

jenkins-mcp never ships with credentials. It resolves connection settings in this order, first match wins:

1. Explicit CLI flags: --url, --user, --password
2. Environment variables: JENKINS_URL, JENKINS_USER, JENKINS_PASSWORD
3. A JSON config file at ~/.config/jenkins-mcp/config.json

If no username/password is found by any of the above, the command exits with a clear error instead of connecting anonymously.

Environment variables

export JENKINS_URL="https://jenkins.example.com"
export JENKINS_USER="your-jenkins-username"
export JENKINS_PASSWORD="your-jenkins-api-token"

Config file

Create ~/.config/jenkins-mcp/config.json:

{
  "url": "https://jenkins.example.com",
  "username": "your-jenkins-username",
  "password": "your-jenkins-api-token"
}

Running as an MCP Server for AI Agents

jenkins-mcp ships a serve subcommand that runs the MCP stdio server:

jenkins-mcp serve

Register it with Claude Code:

claude mcp add jenkins -- jenkins-mcp serve

Exposed MCP Tools:

• jenkins_get_status()
• jenkins_add_node(name, ip, labels, remote_fs)
• jenkins_remove_node(name)
• jenkins_create_user(username, password, email)
• jenkins_list_jobs()

Security

Requests use HTTP Basic Auth, which sends username:password base64-encoded on every request — base64 is trivially reversible, not encryption. Use an https:// Jenkins URL, or make sure the connection stays on a trusted network, before sending real credentials.

Prefer a Jenkins API token over your account password: generate one under your Jenkins user profile ("Configure" → "API Token") and set it as JENKINS_PASSWORD. jenkins-mcp accepts an API token anywhere it accepts a password, and tokens can be revoked independently of your login credentials.

Development

git clone https://github.com/ml-lubich/jenkins-mcp.git
cd jenkins-mcp
python3 -m venv .venv
source .venv/bin/activate
pip install -e ".[dev]"

Running Tests

pytest -q

License

MIT