PlugLayer MCP Server
OfficialProvides authentication and user role management via Authentik, enabling user identity and access control for the platform.
Allows deploying Docker images and Docker Compose applications to managed infrastructure.
Enables CI/CD integration by generating GitHub Actions workflows for automated deployments.
Generates GitHub Actions workflows for automated deployment on push to specified branches.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@PlugLayer MCP ServerDeploy image ghcr.io/myorg/api:latest to production project."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
PlugLayer MCP Server
Deploy and manage your infrastructure through natural language with any MCP-compatible AI assistant.
Installation
Option 1: uvx (recommended — no install needed)
PLUGLAYER_API_KEY=your-pluglayer-api-token uvx pluglayer-mcpThis local command mode uses the MCP stdio transport by default, which is the right mode for Cursor, Claude Code, and other editor-launched command servers.
The pluglayer-mcp command now always uses stdio so editor clients cannot accidentally switch it into HTTP mode.
Option 2: pip
pip install pluglayer-mcp
PLUGLAYER_API_KEY=your-pluglayer-api-token pluglayer-mcpRelated MCP server: CloudStack MCP Server
Configuration
Claude Desktop
Add to ~/.config/Claude/claude_desktop_config.json:
{
"mcpServers": {
"pluglayer": {
"command": "uvx",
"type": "stdio",
"args": ["pluglayer-mcp"],
"env": {
"PLUGLAYER_API_KEY": "your-pluglayer-api-token"
}
}
}
}Cursor
Add to ~/.cursor/mcp.json:
{
"pluglayer": {
"command": "uvx",
"type": "stdio",
"args": ["pluglayer-mcp"],
"env": {
"PLUGLAYER_API_KEY": "your-pluglayer-api-token"
}
}
}Remote HTTP (hosted)
The remote MCP server runs at mcp.pluglayer.com. Pass your token as:
Authorization: Bearer your-pluglayer-api-tokenIf you intentionally want to run the package itself as an HTTP MCP server, use:
pluglayer-mcp-httpRelease Checklist
Before publishing a new pluglayer-mcp build:
Confirm local command mode still uses
stdioby default.Confirm
PLUGLAYER_API_URLoverride works when pointed at a dev API.Confirm package version will be unique for the publish run.
Publish from the public repo
mainbranch after reviewing thedev -> mainPR.
After publishing:
Restart Cursor, Claude Code, or the MCP client you are testing.
If the editor still behaves like an older MCP build, remove and re-add the MCP server entry, then restart the editor.
Re-test with a simple command such as:
get_current_userlist_projectsget_compute_summary
Cursor Notes
For
command-based MCP setup, useuvx pluglayer-mcp.Do not force HTTP transport for local editor usage.
pluglayer-mcpalways usesstdio, which is the correct transport for Cursor-launched command servers.Only use
pluglayer-mcp-httpwhen you intentionally want to run the package itself as an HTTP MCP server.
Available Tools
The MCP calls the PlugLayer FastAPI backend instead of re-implementing backend business logic. Auth, roles, ownership, compute guards, and k3s orchestration remain in the backend. MCP and editor plugins should authenticate with a PlugLayer API token created in the PlugLayer Settings page, not the browser/session auth token.
Managed registries are configured by PlugLayer admins in the platform UI/API. When deploy_image uses mirroring, the backend picks a registry the current user is allowed to use and keeps Kubernetes pull secrets in sync automatically.
Databases are a first-class Data Layer workflow in MCP. When a user needs a new database, wants to know whether one already exists, asks for a connection string, or needs env vars to wire an app to a database, the preferred MCP path is:
list_user_databasesif needed,
list_database_templatescheck_slug_availabilityoptionally
check_database_slug_availabilitycreate_databasethe MCP tool resolves required deploy-time database env vars itself
password/secret/token/key fields are generated there when the template expects a random value
database-name placeholders are filled from the chosen app name
get_task_statusget_database_connection_detailsoptionally
get_database_logswhen troubleshootinguse
update_database_access,restart_database, orremove_databasefor follow-up lifecycle actions
After provisioning a database, the assistant should proactively suggest or apply exact env var updates for dependent apps instead of leaving the user with only a raw connection string.
Marketplace template deployment through MCP now supports both:
deploying into an existing project by
project_idcreating a new project inline by passing
project_name
Tool | Description |
| Show the Authentik-backed user and |
| Load the caller's stored user memory/context |
| Update the caller's stored user memory/context |
| List authenticated user's projects |
| Alias for listing the current user's projects |
| Create a new project namespace |
| Get project details, current apps in the project, and attached custom-domain state |
| Remove one of the user's projects by deleting its apps first, requesting namespace cleanup, and then archiving the project record/history |
| Alias for |
| Show account-level personal + shared compute capacity; estimate first when sizing is still unclear |
| Show the current user's available compute capacity; pair with estimate first for planning |
| Alias for available compute capacity |
| Estimate required compute, monthly price, and a tailored offer link; preferred before purchase/allocation decisions |
| List accessible compute nodes |
| List the registries currently available to the user |
| Mirror a Docker image into PlugLayer's managed Docker Hub namespace, then deploy it after backend compute checks; if a similar app already exists and the namespace is full, use update/replace flow instead of a brand-new app |
| Upload a locally built image archive from the user's machine; if the target app already exists, switch to the app upload-first redeploy flow, otherwise create and deploy a new app |
| Upload a newly rebuilt image archive for an existing app, push it with a new tag, keep the slug unchanged, and redeploy that app |
| Analyze docker-compose.yml, split it into separate deploy units, route known databases through Data Layer templates, deploy remaining services as separate apps, and require uploaded archives for local-build services |
| Preview how PlugLayer will split a docker-compose stack into Data Layer databases, separate compose apps, and local-build image services |
| Generate exact |
| List running apps/deployments |
| List apps inside a specific project; use this before deploy when you need to clarify update vs replace vs separate new app, especially when a full namespace should block duplicate new-app deploys |
| Check whether a PlugLayer slug is free inside a project before deploy or rename |
| Check app status and URL |
| Get app logs |
| Alias for getting app logs |
| Get concrete connection env vars and connection strings for an app/database so dependent apps can be updated correctly |
| List deployable marketplace templates before choosing one for a project |
| Inspect one marketplace template, including its required env vars |
| Deploy a marketplace template into an existing project or create a new project inline during the same MCP flow |
| Execute a command in the caller's own deployed app container with a fixed 360-second timeout; keep terminal input at or below 10,000 characters and about 350 lines |
| Redeploy an app after confirming the exact app name; the existing slug stays unchanged |
| Alias for restarting an app by redeploying it |
| Roll back to previous version |
| Remove one of the user's apps, tear down its runtime workload, revoke active routing, and mark it as removed |
| Alias for |
| Alias for |
| List ready-to-deploy database templates |
| List the caller's provisioned databases, optionally by project |
| Check whether a Data Layer slug is free in a project before provisioning or renaming a database |
| Provision a database from a template after backend compute and project checks, resolving password-like env vars inside the MCP flow first |
| Get connection strings, env vars, and docs for a provisioned database |
| Patch one app's env vars from a provisioned database's concrete connection fields, then restart the existing app |
| Read logs from a provisioned database app |
| Update the public TCP IP allowlist for a provisioned database |
| Restart a provisioned database by queueing its restart flow |
| Remove a provisioned database and tear down its runtime workload/routing |
| Alias for |
| List custom domains for a project |
| Alias for project-domain lookup; use this before asking which domain the user wants so existing project domains can be offered as options |
| Detect the likely DNS/domain provider so the user can confirm it before DNS instructions are shown |
| Add a single or wildcard custom domain and return DNS records in a provider-friendly table |
| Verify TXT/CNAME DNS and activate if attached |
| Attach a verified custom domain to an app |
| Detach a domain while keeping verification |
| Poll async operation progress |
| Check whether the local repo has git plus a GitHub |
| Get GitHub Actions YAML for a 3-step PlugLayer CI/CD flow: build OCI image, upload it to the same app id, then merge env vars and restart/redeploy |
Example Conversations
Deploy your first app:
"I have a FastAPI app at
ghcr.io/myorg/api:latestthat runs on port 8000. Deploy it into myproductionproject in my cloud."
Convert docker-compose:
"Here's my docker-compose.yml: [paste]. Deploy this to PlugLayer."
CI/CD setup:
"Generate a GitHub Actions workflow for my
apiapp so every push rebuilds it, uploads it to PlugLayer, and redeploys the same app id."
The generated workflow expects:
public reusable actions from
pluglayer/actionsrequired secrets:
PLUGLAYER_API_KEY
optional secrets:
PLUGLAYER_API_URL(defaults tohttps://api.pluglayer.com)PLUGLAYER_BUILD_ENV_JSON(JSON object of build-time env vars/build args to inject during image build)
Add a custom domain:
"Add
api.example.comto my production project, detect the provider, show me the DNS records in a table, then verify it and attach it to my API app."
Provision a database and wire the backend to it:
"Create a Postgres database in my
marketplaceproject, check whether the slugpostgresis available first, and after it finishes show me the connection env vars so we can update my backend."
Reuse an existing database instead of creating a new one:
"Check whether I already have a Mongo or Postgres database in my project. If I do, show me the connection details and suggest the backend env vars I should update."
Getting Your API Key
Go to PlugLayer Settings
Create a PlugLayer API token
Copy it once and store it safely
Use it as
PLUGLAYER_API_KEYfor MCP, editor plugins, and the 3-step CI/CD actions flow
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Latest Blog Posts
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/pluglayer/mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server