This release includes 1 security fix for security teams reviewing exposed deployments.
Published 28d
MCP Developer Tools
✓ No known CVEs patched
This release patches 1 known CVE
Topics
ansible
ci-cd
devops
mcp
mcp-server
model-context-protocol
+2 more
zuul
zuul-ci
Affected surfaces
auth
Summary
AI summaryAdded seven new CLI tools and updated the PyPI description.
Full changelog
Added
promotetool: reorder changes in a pipeline queue (write operation, requires auth). Use for urgent fixes when the gate has a long queueget_autoholdtool: get full details of a specific autohold request — held nodes, timing, project/joblist_system_eventstool: list system events (config updates, reconfigurations, pipeline changes). Useful for debugging "why did my job stop running?"list_providerstool: list nodepool cloud providers with flavors, images, and labelslist_imagestool: list nodepool disk images with build status and provider upload stateget_badgetool: get a CI status badge URL (SVG) for a project, with embeddable Markdown snippetsmithery.yamlfor Smithery registry integrationCODE_OF_CONDUCT.md(Contributor Covenant v2.1)- Download count badge in README
- Listings section in README with all marketplace links
Changed
- PyPI description updated to "build failure analysis, log search, pipeline status, and job configuration" (previously said "read-only access")
- Added PyPI classifiers: Build Tools, Systems Administration
- Tool count: 38 → 44 (36 read-only + 6 write + 1 LogJuicer + 1 console stream)
Fixed
get_badgeusesurllib.parse.urlencodefor query parameters instead of raw string concatenation, preventing URL injection via project names containing special characterslist_system_eventsonly sends non-default query parameters, consistent with other tools
Security Fixes
- `get_badge` fixed to use `urllib.parse.urlencode` preventing URL injection from special characters in project names
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About imatza-rh/mcp-zuul
Zuul CI integration with 14 tools for build failure analysis, log search, pipeline status, and job configuration.
Related context
Beta — feedback welcome: [email protected]