Check Coolify API and MCP server connectivity. Returns health status, auth status, and latency. No secrets in response.

List all Coolify projects with optional name filter.

Get a single project by UUID with its environments and resource counts.

List all resources with filters: project_uuid, environment_uuid, resource_type, status, search.

Get a single resource detail by UUID and type. Sensitive fields are redacted.

High-level project overview: project info, all environments, resources with status, recent deployments, and health summary. Optimized to prevent multiple separate calls.

List deployments with filters: resource_uuid, status, limit. Newest first.

Get deployment detail by UUID: status, timestamps, commit info, error summary.

Get application logs with configurable line count (capped by COOLIFY_LOG_MAX_LINES). Secrets are redacted.

List environment variables for a resource. Returns keys and metadata only — VALUES ARE NEVER RETURNED.

List available Docker images for rolling back an application. Returns current tag and available image tags.

List all S3 storages for the authenticated team with optional name filter. Credentials are NEVER returned.

Deploy a resource. Subject to operation mode, allowlist, and production guard policies.

Queue a rollback deployment for an application to a previous image tag/commit. Deploy-only operation subject to operation mode, allowlist, and production guard policies. Audit: coolify.application.rollback

Restart a resource. Production policy check is mandatory.

Start a stopped resource.

Stop a resource. DEFAULT DISABLED — COOLIFY_ALLOW_STOP must be true. Marked destructive.

Set an environment variable on a resource. DEFAULT DISABLED — COOLIFY_ALLOW_ENV_WRITE must be true. Value is NEVER returned in response.

Create a new project. Requires safe-write operation mode.

Create a new environment within a project. Requires safe-write operation mode.

Create a new application in a project environment. Subject to operation mode, allowlist, and production guard policies.

Create a new service in a project environment. Requires safe-write operation mode.

Create a new database in a project environment. Passwords and connection strings are NEVER returned in response. Requires safe-write operation mode.

Set multiple environment variables on a resource in bulk (1-50). DEFAULT DISABLED — COOLIFY_ALLOW_ENV_WRITE must be true. Values are NEVER returned in response.

List GitHub Apps connected to your Coolify instance. Returns team and system-wide apps.

List repositories accessible via a GitHub App. Supports pagination and search.

List branches of a GitHub repository via a GitHub App.

List scheduled tasks for an application or service.

Get execution history for a scheduled task. Output is redacted for security.

Create a scheduled task (cron job) on an application or service. Subject to operation mode, allowlist, and production guard policies. Cron expression is validated.

Update a scheduled task. Subject to operation mode, allowlist, and production guard policies.

Execute a scheduled task immediately. Subject to operation mode, allowlist, and production guard policies.

Cancel a queued or in-progress deployment. Returns UNSUPPORTED_OPERATION for terminal states. Audit: coolify.deployment.cancel.

List backup executions for a database. Sensitive destination paths are redacted.

Create a backup configuration for a database. Cron expression is validated. Audit: coolify.database_backup_config.create

List backup executions for a scheduled backup configuration. Output is redacted for security.

Run a volume backup for a storage mount on an application, database, or service. Subject to operation mode, allowlist, and production guard policies.

Update a backup configuration for a database. PATCH semantics — only provided fields are updated. Cron expression is validated.

List all servers connected to your Coolify instance. Sensitive network info and SSH keys are redacted.

Get a single server detail by UUID. SSH keys and sensitive network info are redacted.

List resources associated with a specific server with optional type and status filters.

Validate server connectivity and configuration. Audited as a mutation action.

List domains associated with a server.

Get the current team context: id, name, and permission scope.

List members of the current team. Email addresses are policy-gated and redacted by default.

Update application configuration: health check, resource limits, replicas, ports, build settings. PATCH semantics. Audit: coolify.application.config.update

Update database configuration: CPU/memory limits, name, description. PATCH semantics. Audit: coolify.database.config.update

List storage mounts for an application, service, or database. Sensitive host paths are redacted.

Create a storage mount for a resource. Path traversal is validated. Subject to operation mode, allowlist, and production guard policies. Audit: coolify.storage.create

Create a new S3 storage configuration for the authenticated team. Credentials are never returned or logged. Subject to operation mode policy. Audit: coolify.s3_storage.create

Validate an S3 storage connection using ListObjectsV2. Audited as a mutation action.

List notification channel settings. Credential values (webhook URLs, tokens, passwords) are never exposed.

Update notification settings for a channel. PATCH semantics. Credential values are never echoed back or logged. Subject to operation mode and production guard policies. Audit: coolify.notification.update.

List all Docker network destinations for the authenticated team.

Get a single destination by UUID.

Create a Docker network destination on a server. Subject to operation mode, allowlist, and production guard policies. Audit: coolify.destination.create.

Get database container logs. Secrets are redacted.

Get service container logs. Secrets are redacted.

Get the Coolify instance version.