Harness MCP Server

An MCP server that gives AI agents full access to the Harness.io platform through 11 consolidated tools and 207 resource types.

→ harness/mcp-server · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

1 flow detected: GITHUB_TOKEN. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 1 credential: GITHUB_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretGITHUB_TOKEN

configHARNESS_ACCOUNT_ID— Note: The account ID is auto-extracted from PAT and SAT tokens (pat.<accountId>... or sat.<accountId>...), so is only needed for API keys without an embedded account segment.

configHARNESS_BASE_URL— must use HTTPS by default. If you set a non-HTTPS URL (e.g. http://localhost:8080), the server will refuse to start with:

configHARNESS_MCP_LOG_FILE— No ~/.claude/harness-mcp.log File used for stdio disconnect/crash diagnostics when stderr may no longer be available

configHARNESS_ORG

configHARNESS_PIPELINE_VERSION

configHARNESS_PROJECT— No -- Project ID. Used when project_id is not specified per tool call. Agents can also discover projects dynamically via harness_list(resource_type="project")

configHARNESS_READ_ONLY— No false Block all mutating operations (create, update, delete, execute). Only list and get are allowed. Useful for shared/demo environments

configHARNESS_TOOLSETS— chaos,-ccm

configHOST

configOTEL_EXPORTER_OTLP_ENDPOINT— No -- Enables OpenTelemetry audit spans when the optional OpenTelemetry packages are installed

configOTEL_RESOURCE_ATTRIBUTES

configOTEL_SERVICE_NAME

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/harness-mcp-server-1x7s26)](https://m8ven.ai/mcp/harness-mcp-server-1x7s26)

commit: 92cd444dcb8503b17d19cb301ab6623d4ffcba3f

code hash: 57ead1e942a8128b04f029da89f249cf60f4b33d61123f4980c90aa7e6498a5d

verified: 6/13/2026, 10:14:23 AM

view raw JSON →