coolify
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@coolifyShow me all applications and their deployment statuses."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
@vbcdx/coolify-plugin
An MCP server for the Coolify v4 API. It gives AI agents a fixed set of 27 tools for applications, deployments, environment variables, databases, services, projects and servers, with a write gate and verified results.
Runs over stdio (for a local agent harness) or Streamable HTTP (as a network service or container).
Write gate: reads only by default. Writes and destructive operations need explicit opt-in.
Per-call credentials: each call names the credential file it uses, so several agents can share one server with their own tokens.
Verified results: a write that cannot be confirmed is reported as unverified, never as success, and is never retried.
deploy,start_application,restart_application,stop_applicationandcancel_deploymentreturnaccepted: Coolify took the request, but the tool does not wait for the result.
Coolify also ships a native MCP endpoint. This package covers a smaller, fixed set of operations and adds per-call credentials and the write gate.
The full specification is in docs/contract.md.
Requirements
Node.js 22 or later
A Coolify v4 instance and an API token for it
Related MCP server: Coolify MCP Server
Install
npm install -g @vbcdx/coolify-pluginThis installs the vbcdx-coolify command. To run it without installing:
npx -y --package=@vbcdx/coolify-plugin vbcdx-coolify --helpUsage
vbcdx-coolify mcp Start the stdio MCP server (default)
vbcdx-coolify serve Start the network MCP server (Streamable HTTP)
vbcdx-coolify healthcheck Probe a running serve endpoint; exit 0 if healthy
vbcdx-coolify manifest Print the JSON tool manifest
vbcdx-coolify --help
vbcdx-coolify --versionRegister with an MCP client
Claude Code:
claude mcp add coolify --scope user \
-e VBCDX_COOLIFY_URL=https://coolify.example.com \
-e VBCDX_COOLIFY_WRITES=off \
-- vbcdx-coolify mcpCodex:
codex mcp add coolify \
--env VBCDX_COOLIFY_URL=https://coolify.example.com \
--env VBCDX_COOLIFY_WRITES=off \
-- vbcdx-coolify mcpFor OpenCode, see examples/opencode.json. More detail is in examples/mcp-registration.md.
The package also ships a vbcdx.json declaration, so the
vbcdx installer can register it for you:
npm install -g @vbcdx/vbcdx
vbcdx install tool @vbcdx/coolify-plugin --harness=claudeConfiguration
Settings are read from the environment once, at startup. See .env.example.
Variable | Default | Description |
| none | Coolify instance URL, optionally ending in |
|
|
|
|
| Total deadline per tool call, 1000 to 120000 ms. |
Tools are always listed. A call made without valid configuration or credentials returns an error explaining what is missing.
Credentials (stdio mode)
Credentials are never passed on the command line or in the environment. Every tool except
health takes a credential_file argument: the absolute path to a file like this:
VBCDX_AGENTS_ROLE=devops-agent
VBCDX_AGENTS_TOKEN=<coolify api token>The file must be a regular file you own with mode 0600, in a directory with mode 0700:
install -d -m 0700 ~/.config/vbcdx/coolify
install -m 0600 /dev/null ~/.config/vbcdx/coolify/devops-agent.envThe token is sent as Authorization: Bearer <token>. What it can do is set by its Coolify
permissions (read, read:sensitive, write, deploy, root); use the narrowest one that
works. See examples/credential-file.env.example.
Network mode
vbcdx-coolify serve exposes the same tools over MCP Streamable HTTP:
VBCDX_COOLIFY_URL=https://coolify.example.com vbcdx-coolify serve
# MCP endpoint: POST http://127.0.0.1:8080/mcp
# Liveness: GET http://127.0.0.1:8080/healthzIn this mode there is no credential file. Each request carries its Coolify API token in the
Authorization header (Bearer <token> or token <token>), which is used for that request only.
Variable | Default | Description |
|
| Listen port. |
|
| Bind address. |
| none | PEM certificate path. Set together with the key to serve HTTPS. |
| none | PEM private key path. |
| none | Comma-separated browser origins allowed to call the server. Requests with any other |
Without TLS settings the server speaks plain HTTP; run it behind a TLS-terminating reverse proxy or
on a trusted network. Outbound connections to Coolify always verify TLS. Request bodies over 1 MiB
are refused with 413.
Docker
docker build -t vbcdx-coolify .
docker run --rm -p 8080:8080 \
-e VBCDX_COOLIFY_URL=https://coolify.example.com \
vbcdx-coolifyThe image runs serve as a non-root user, listens on all interfaces and includes a health check.
No credentials are stored in the image.
Tools
Run vbcdx-coolify manifest for every tool's input and output schema and required token
permissions.
Effect | Tools |
Read |
|
Write ( |
|
Destructive ( |
|
Destructive tools also require an exact confirmation string naming the target. The confirmation guards against accidents; it is not an approval mechanism and is never sent to Coolify.
Results
Each call returns a text summary and a JSON envelope with outcome, effect,
request (method, path, attempted) and verification; failures add a reason and a
message. HTTP status is checked before the response body, and a mutation whose outcome cannot be
confirmed is reported as unverified or indeterminate.
Development
npm ci
npm test
node bin/vbcdx-coolify.js --helpLicense
This server cannot be deployed
Maintenance
Related MCP Connectors
The bridge from K2 agents through Wrangler to your master AI - safe, approval-gated Cloudflare ops.
Supervised API-write gateway for AI agents with policy, human approval and execution receipts.
Tenant-scoped control plane over the TeleQuick platform's full API surface
- FullmaktOAuthai.fullmakt
Credential broker for AI agents: scoped, revocable API access with policy enforcement and audit.
Related MCP Servers
- FlicenseAqualityFmaintenanceEnables interaction with Coolify applications and resources through the Coolify API via a standardized interface, supporting application management operations such as listing, starting, stopping, restarting, and deploying.1113-
- AlicenseDqualityFmaintenanceProvides programmatic and CLI tools for managing Coolify deployments, allowing users to control applications, services, databases, and infrastructure through natural language or command line.1055 npm7Good Luck With That Public
- AlicenseBqualityBmaintenanceEnables control and management of Coolify self-hosted PaaS instances, allowing you to deploy applications, manage databases, monitor servers, and execute operations directly from AI assistants.8912 npm28MIT
- AlicenseNot gradedqualityCmaintenanceEnables LLMs to manage a self-hosted Coolify instance, including applications, databases, services, servers, projects, deployments, environment variables, tags, teams, private keys, and S3 backup storages via the Coolify REST API.215 npmMIT