Trigger.dev MCP (official)
Score = points from our five tests (install, handshake, maintenance, docs, license). Not a quality or security rating. Methodology
- Install20/20
- Handshake30/30
- Maintenance25/25
- Docs5/15
- License10/10
Tested npm trigger.dev 4.8.3 (Trigger.dev CLI), started as `trigger mcp` (the docs use `npx trigger.dev@latest mcp`; repo triggerdotdev/trigger.dev). Its 55 tools listed without credentials. Real tool calls (no LLM, no credentials): search_docs returned Trigger.dev docs on schedules and list_profiles reported no profiles. whoami tried to start a sign-in and timed out after 60 s; every project, run, deploy and dashboard tool needs a Trigger.dev login and was not called.
Tool-call test (2026-11-03, direct MCP stdio client, no LLM): pass. 2 of 3 calls passed: search_docs and list_profiles. whoami needs a login and timed out. No account; project and run tools not tested. Evidence: local test run, Nov 3, 2026.
Transport (tested 2026-11-03): stdio
Tested version: 4.8.3 · tested 2026-11-03
Token cost (estimate): approx. 17869 tokens, cl100k estimate (55 tools, measured 2026-11-11, version 4.8.3). This is an estimate from our testing of the tool names, descriptions and input schemas, counted with cl100k_base.
Permissions: 32 read, 23 write (state-changing), 0 unclassified · Auth: none · Rate limit: unknown · Pricing unit: unknown
Auth: none. Rate limit: unknown. Pricing unit: unknown.
cancel_run— write (state-changing)close_agent_chat— write (state-changing)create_alert— write (state-changing)create_dashboard— write (state-changing)create_project_in_org— write (state-changing)create_prompt_override— write (state-changing)deploy— write (state-changing)dev_server_status— readgenerate_webhook_secret— write (state-changing)get_current_worker— readget_prompt_versions— readget_query_schema— readget_report— readget_run_details— readget_span_details— readget_task_schema— readget_webhook_delivery— readget_webhook_endpoint_details— readinitialize_project— write (state-changing)list_agents— readlist_alert_capabilities— readlist_alerts— readlist_dashboards— readlist_deploys— readlist_orgs— readlist_preview_branches— readlist_profiles— readlist_projects— readlist_prompts— readlist_runs— readlist_webhook_deliveries— readlist_webhook_endpoints— readpromote_prompt_version— write (state-changing)query— readreactivate_prompt_override— write (state-changing)read_session_channel— readremove_prompt_override— write (state-changing)replay_run— write (state-changing)replay_webhook_delivery— write (state-changing)resolve_alert— write (state-changing)run_dashboard_query— readsearch_docs— readsend_agent_message— write (state-changing)set_dashboard_widgets— write (state-changing)set_webhook_secret— write (state-changing)start_agent_chat— write (state-changing)start_dev_server— readstop_dev_server— readsubmit_feedback— write (state-changing)switch_profile— readtrigger_task— write (state-changing)update_prompt_override— write (state-changing)wait_for_run_to_complete— readwhoami— readwrite_session_channel— write (state-changing)
handshake and tools listed without a recorded key or OAuth
Score 90/100 · Tools 55 · Token cost approx. 17,869 tokens · Compare · Last tested 2026-11-03 · Version tested 4.8.3 · Package trigger.dev · Repo triggerdotdev/trigger.dev
Summary: Trigger.dev MCP (official) completed an MCP handshake without credentials and exposed 55 tools.
Evidence summary
- Handshake
- pass
- Tools listed
- 55
- Context cost
- approx. 17869 tokens, cl100k estimate (55 tools, measured 2026-11-11, version 4.8.3; an estimate) ranking · add up your servers' context cost
- API key
- No key needed for the tools we called
- Tested
- 2026-11-03
Test results
| Test | Result | Points | Evidence |
|---|---|---|---|
| install | pass | 20 | npm install trigger.dev (Node 20, Linux) succeeded in 7s. |
| handshake | pass | 30 | MCP initialize + tools/list over stdio succeeded with no credentials; 55 tools listed in 11.7s. |
| maintenance | pass | 25 | Repo pushed 2 days before test; 16,700 GitHub stars. |
| docs | partial | 5 | README over 3,000 chars. Check of the package's own README (README shipped in npm package). |
| license | pass | 10 | MIT (OSI-approved). |
Local-model readiness
Token cost (estimate): approx. 17869 tokens, cl100k estimate for 55 tools · about 218% of an 8k context. This is an estimate from our testing (counted with cl100k_base).
Small-model friendly (schema heuristic, not a model result): unknown.
Not tested
Small-model task runs: Not yet tested.
What we tested and what we didn't
Tested on 2026-11-03
- Install from the registry
- We connected with no credentials and asked for its tool list: it listed 55 tools (Method details: MCP
initializethentools/list) - Maintenance signals (last push, archived/deprecated status)
- Docs (README length, install and config example)
- License (OSI-approved or not)
- Token cost (estimate)
Not tested
- Security: not audited (no code review, no permission or data-flow analysis)
- Real tasks (no functional task runs yet)
- Behaviour with real credentials or a real account
- Performance, rate limits or load
- Correctness of results beyond the listed tasks
Methodology: how we test. A high score means it installs and responds, not that giving it access to your data carries no risk.
Known security issues
Checked on 2026-11-09 for version 4.8.3 against OSV, GitHub advisories, GitHub repository advisories. Scope: the package itself; dependencies not scanned.
- High 8.1 · GHSA-qwrm-2cq8-xfr8: Authorize parent runs before attaching batch-created waitpoints
GHSA-qwrm-2cq8-xfr8 states no version range; applicability unknown. · Affected: not stated · Fixed in: not stated · Published 2026-10-01 - Low 3.1 · GHSA-m8pr-xr7c-frh3: Authenticated project members could complete another member’s development waitpoint using a known ID
GHSA-m8pr-xr7c-frh3 states no version range; applicability unknown. · Affected: not stated · Fixed in: not stated · Published 2026-09-08 - High 8.5 · GHSA-p28v-f755-9qrg (CVE-2026-73654): Prototype pollution via run metadata operations → process-wide cross-tenant DoS (CWE-1321)
GHSA-p28v-f755-9qrg states no version range; applicability unknown. · Affected: not stated · Fixed in: not stated · Published 2026-07-21 - Medium 4.2 · GHSA-jx48-qfwm-xq67 (CVE-2026-73657): Cross-tenant payload poisoning via packet write + replay
GHSA-jx48-qfwm-xq67 states no version range; applicability unknown. · Affected: not stated · Fixed in: not stated · Published 2026-07-09 - High 8.2 · GHSA-888c-px7m-736v (CVE-2026-73658): Cross-tenant object store read and write via URL path traversal
GHSA-888c-px7m-736v states no version range; applicability unknown. · Affected: not stated · Fixed in: not stated · Published 2026-07-09 - Critical 9.6 · GHSA-58mc-m3qq-6qrh: CLI auth-code phishing → PAT takeover and org destruction
GHSA-58mc-m3qq-6qrh states no version range; applicability unknown. · Affected: not stated · Fixed in: not stated · Published 2026-07-09 - Medium 4.3 · GHSA-2cqj-rq4j-8835: CSRF Logout
GHSA-2cqj-rq4j-8835 states no version range; applicability unknown. · Affected: not stated · Fixed in: not stated · Published 2026-07-21
Other advisories we checked (20)
- Tested version 4.8.3 is not in the affected range of GHSA-9fq3-68cw-r7p2.
- Tested version 4.8.3 is not in the affected range of GHSA-qxpp-qjg8-x4jv.
- Tested version 4.8.3 is not in the affected range of GHSA-xxv7-2vv3-h682.
- Tested version 4.8.3 is not in the affected range of GHSA-pp95-gc86-jq6q.
- Tested version 4.8.3 is not in the affected range of GHSA-rp8c-h4xr-w9qv.
- Tested version 4.8.3 is not in the affected range of GHSA-2wgf-7gx2-hcpw.
- Tested version 4.8.3 is not in the affected range of GHSA-q567-cr4x-96w4.
- Tested version 4.8.3 is not in the affected range of GHSA-gg6r-gp4c-89hp.
- Tested version 4.8.3 is not in the affected range of GHSA-pqxw-g93w-hj9x.
- Tested version 4.8.3 is not in the affected range of GHSA-59h8-w5q6-mfmp.
- Tested version 4.8.3 is not in the affected range of GHSA-9q4r-4842-93vw.
- Tested version 4.8.3 is not in the affected range of GHSA-h4pj-26m5-j4r3.
- Tested version 4.8.3 is not in the affected range of GHSA-4672-hwv6-gq62.
- Tested version 4.8.3 is not in the affected range of GHSA-2gvw-9968-v578.
- Tested version 4.8.3 is not in the affected range of GHSA-fj2x-mqqp-3v2w.
- Tested version 4.8.3 is not in the affected range of GHSA-fhh4-xvj5-m7pq.
- Tested version 4.8.3 is not in the affected range of GHSA-wpjq-q67r-pg6m.
- Tested version 4.8.3 is not in the affected range of GHSA-9rx3-j5hm-5f27.
- Tested version 4.8.3 is not in the affected range of GHSA-jc26-22qp-cgqj.
- Tested version 4.8.3 is not in the affected range of GHSA-m79r-84cc-xwg9.
Monthly roundup: MCP security issues, October 2026.
Tool list changes
Unchanged since the previous snapshot (latest 2026-11-11).
Snapshot hash (fingerprint of the tool list)
abc2495d30a7: SHA-256 of the canonical tool names, descriptions and input schemas. If it changes, the tool list changed.
Raw test record (JSON)
{
"name": "trigger.dev",
"version": "4.8.3",
"registry": "npm",
"status": "working",
"tested": "2026-11-03",
"tools_count": 55,
"deprecated": false,
"archived": false,
"tests": {
"install": [
"pass",
20,
"`npm install trigger.dev` (Node 20, Linux) succeeded in 7s."
],
"handshake": [
"pass",
30,
"MCP `initialize` + `tools/list` over stdio succeeded with no credentials; 55 tools listed in 11.7s."
],
"maintenance": [
"pass",
25,
"Repo pushed 2 days before test; 16,700 GitHub stars."
],
"docs": [
"partial",
5,
"README over 3,000 chars. Check of the package's own README (README shipped in npm package)."
],
"license": [
"pass",
10,
"MIT (OSI-approved)."
]
}
}Install
npx -y trigger.dev mcp
Pin the version we tested
npx -y trigger.dev@4.8.3 mcp
tested 2026-11-03. Newer versions may differ and were not tested by us.
{
"mcpServers": {
"trigger-dev-mcp": {
"command": "npx",
"args": [
"-y",
"trigger.dev@4.8.3",
"mcp"
]
}
}
}Tools listed
cancel_run, close_agent_chat, create_alert, create_dashboard, create_project_in_org, create_prompt_override, deploy, dev_server_status, generate_webhook_secret, get_current_worker, get_prompt_versions, get_query_schema, get_report, get_run_details, get_span_details, get_task_schema, get_webhook_delivery, get_webhook_endpoint_details, initialize_project, list_agents, list_alert_capabilities, list_alerts, list_dashboards, list_deploys, list_orgs, list_preview_branches, list_profiles, list_projects, list_prompts, list_runs, list_webhook_deliveries, list_webhook_endpoints, promote_prompt_version, query, reactivate_prompt_override, read_session_channel, remove_prompt_override, replay_run, replay_webhook_delivery, resolve_alert
Tool history: captured Nov 11, 2026. All tool history.
Quick config
{
"mcpServers": {
"trigger-dev-mcp": {
"command": "npx",
"args": [
"-y",
"trigger.dev",
"mcp"
]
}
}
}Add to config Opens the config generator with this server selected.
Setup
- Install. Run
npm install trigger.dev(Node 20). This is the exact command we ran on 2026-11-03. - Configure. Add the mcpServers entry below to your MCP client config.
- Verify. Restart the client and check that tools/list returns tools (55 in our test).
{
"mcpServers": {
"trigger-dev-mcp": {
"command": "npx",
"args": [
"-y",
"trigger.dev",
"mcp"
]
}
}
}Test history
- 2026-11-03: New
Related: Best DevOps MCP servers
FAQ
Is Trigger.dev MCP deprecated?
No. trigger.dev was not deprecated or archived when we last tested it on 2026-11-03.
What replaces Trigger.dev MCP?
Nothing; Trigger.dev MCP (official) is not deprecated as of 2026-11-03.
Does Trigger.dev MCP need an API key?
No key for docs search: search_docs and list_profiles worked without one. Its project, run and deploy tools need a Trigger.dev login, which we did not test. It completed an MCP handshake with no credentials and listed 55 tools.
Embed the badge
Every tested server gets a free embeddable badge. It shows the current score and test date and expires after 90 days. Testing is free; payment never changes a score.