RepoAI
Browse MCPs
Verified

Unleash MCP Server

Feature flag management for Unleash via MCP for AI-driven development workflows.

Data last scanned today · Reviewed today

171 dangerous tool11 tools★ 21TypeScript

Overview

Unleash MCP Server provides a suite of tools for coding assistants to manage feature flags directly through the Unleash Admin API. It guides AI models through the lifecycle of a feature, from evaluating the necessity of a flag for a specific code change to generating the implementation code and configuring rollout strategies. By leveraging this server, assistants can programmatically list existing projects, detect duplicate flags, and execute administrative tasks like toggling flag environments. The tools are designed to follow established best practices, including instructions for the eventual cleanup of flagged code paths.

Our verdict

This server carries a high risk level with a security score of 32/100, primarily because the project lacks a defined license and relies on community maintenance rather than official vendor support. Additionally, critical security aspects such as authentication methods and read-only mode configurations have not yet been editorially reviewed. It is suitable for experimental environments or non-sensitive internal projects, but teams requiring strict legal compliance or verified security audits should exercise caution before integration.

  • Follows Unleash feature flag best practices
  • Provides automated guidance for wrapping code in flags
  • Low supply-chain surface with only 3 direct dependencies
  • Active development with a commit within the last day
  • No license detected for usage
  • Lacks official vendor support
  • Authentication methods remain unreviewed

Setup

Claude Desktop
{
  "mcpServers": {
    "unleash-mcp": {
      "args": [
        "-y",
        "@unleash/mcp"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

  • No read-only mode — running this grants full read/write access.
  • No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

ToolDescriptionRisk
create_flagCreates a feature flag in Unleash.medium
evaluate_changeScores risk and recommends feature flag usage.low
detect_flagDiscovers existing feature flags to avoid duplicates.low
wrap_changeProvides guidance on how to wrap a change in a feature flag.low
set_flag_rolloutConfigures rollout strategies for a feature flag (does not enable the flag).medium
get_flag_stateSurfaces a feature flag's metadata and its activation strategies.low
list_flagsLists all feature flags in a project, with optional pagination and sort order.low
list_projectsLists Unleash projects available to the configured token, with optional pagination.low
toggle_flag_environmentEnables or disables a feature flag in an environment.medium
remove_flag_strategyDeletes a feature flag's strategy from an environment.high

Compatibility

ClientLocalDockerRemoteRead-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

›What are the environment prerequisites for running this server?

You need Node.js version 22 or higher and either the pnpm or npm package manager installed.

›What kind of credentials are required to use the server?

You need an Unleash instance and a personal access token (PAT) that has permissions specifically granted to create feature flags.

›Does the server support remote connections without a local process?

Yes, you can connect directly to your Unleash instance's built-in remote MCP server over HTTP if that experimental feature is enabled on your instance.

›How does the OAuth authentication flow work for remote connections?

When using the HTTP transport, the client opens your browser for login and automatically provisions a short-lived personal access token that expires after 24 hours.

›Can I use this server in headless or CI environments?

Yes, you can bypass the OAuth flow by using the --header flag to provide your own personal access token directly when connecting to the remote MCP URL.

›Does the set_flag_rollout tool automatically enable a feature flag?

No, the set_flag_rollout tool is used to configure rollout strategies for a flag, but it does not enable the flag itself.

Changelog

Badge

Unleash MCP Server security score, rated on RepoAI

Maintain this server? Add the live badge to your README.