$ loading_
Manage Codemagic apps and CI/CD builds directly inside Claude Code.
This MCP tool is described as managing Codemagic CI/CD builds and does not declare local secrets or remote endpoints in the provided material; however, its core capabilities include triggering and canceling builds, making it an operational tool that can affect external development workflows. As it is open source under MIT, the overall posture trends toward lower risk, but sparse documentation and low adoption warrant verification of actual permission scope and dependencies before use.
The material explicitly states that no keys or environment variables are required, and no API tokens, account passwords, or other sensitive credentials are mentioned. Based on the provided facts, credential exposure appears low, though the source should still be checked for implicit reliance on existing user sessions or local config.
Although no remote endpoints are declared in the metadata, the stated functionality—managing Codemagic builds by listing apps, triggering builds, checking status, and canceling builds—would normally require communication with Codemagic or related services. The material does not specify domains, transmitted data, or minimization practices, so there is a standard network egress and remote-operation surface, but no concrete red flag for unrelated or unknown endpoints is shown.
The system check indicates this tool has executes-code capability, meaning it may run code locally or start related processes. For an MCP tool this is a normal capability and should be treated as caution; the provided material does not show requests for unusual system privileges or actions clearly unrelated to its stated purpose, so this alone does not justify a high-risk rating.
The description does not specify which local files, directories, or other resources it can read or write. Since it is an MCP tool with code-execution capability, it may interact with the local workspace or build-related configuration; no explicit overbroad authorization is stated, but the permission boundary is opaque, so least-privilege deployment is advisable.
Positive signals include a public GitHub repository and an MIT license, making the source in principle auditable. However, it comes from a third-party registry, lacks a README, has 0 stars, and shows unknown maintenance status, which reduces trust and verifiability. Overall this is a caution-level supply-chain concern rather than a high-risk case based on the current facts.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "mcp-codemagic" yet — see the docs or source repo.
List all my apps in Codemagic and show the latest build status, start time, and result for each app.
A list of apps with a summary of each app’s latest build status for quick monitoring.
Trigger a new build for the iOS app on the main branch and tell me the build ID and current queue status.
A new build is started successfully, returning the build ID, target branch, and current status.
Find any Android builds that are still running for more than 30 minutes, cancel them if found, and summarize the results.
Identifies long-running builds, cancels them, and outputs the canceled build list and results.
Enable Claude Code to perform coding tasks through the OpenAI Codex CLI.
Make project docs instantly accessible so Claude Code understands architecture and conventions.
Manage MCP servers in Claude App and discover or install packages.
Get technical advice, code reviews, and explanations via Codex CLI.
Run a production-ready MCP server for files, HTTP, system info, and environment tools.
Manage Claude Code sessions with hot restart and context compaction commands.