
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
hatchbox-mcp-server
Advanced tools
Note: This package is part of the MCP Servers monorepo. For the latest updates and full source code, visit the Hatchbox MCP Server directory.
An MCP server for Hatchbox - Rails hosting made simple for small businesses.
This MCP server provides tools to interact with Hatchbox's API, allowing you to manage environment variables and deployments for your Rails applications directly from your AI assistant.
npm install hatchbox-mcp-server
HATCHBOX_API_KEY: Your Hatchbox API key for authenticationHATCHBOX_ACCOUNT_ID: Your Hatchbox account IDHATCHBOX_APP_ID: Your Hatchbox application IDHATCHBOX_DEPLOY_KEY: Your deployment webhook keyWEB_SERVER_IP_ADDRESS: IP address of your Hatchbox server (enables getEnvVars and getEnvVar tools)SSH_KEY_PATH: Path to SSH private key (defaults to ~/.ssh/id_rsa)HATCHBOX_APP_NAME: App name to filter processes if multiple apps on server (see example below)READONLY: Set to false to enable write operations (default: true)ALLOW_DEPLOYS: Set to false to disable deployment operations (default: true)You can find these values in your Hatchbox dashboard:
To enable the getEnvVars and getEnvVar tools, you need SSH access to your Hatchbox server:
Add your SSH public key to the deploy user on your Hatchbox server:
ssh-copy-id deploy@your-server-ip
Test SSH access:
ssh deploy@your-server-ip "echo 'SSH access working'"
Configure the MCP server with your server's IP address (see configuration below)
If you have multiple Rails applications running on the same Hatchbox server, you'll need to specify the HATCHBOX_APP_NAME to identify which app's environment variables to read:
# Example: If your server has multiple apps running
# App 1: mystore (running on port 3000)
# App 2: blog (running on port 3001)
# App 3: api (running on port 3002)
# To read env vars for the 'mystore' app:
HATCHBOX_APP_NAME=mystore
# To read env vars for the 'blog' app:
HATCHBOX_APP_NAME=blog
The app name should match the name shown in your Hatchbox dashboard. This filters the process list to find the correct puma process for your specific application.
Add the server to your Claude Desktop configuration file:
~/Library/Application Support/Claude/claude_desktop_config.json
%APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"hatchbox": {
"command": "npx",
"args": ["-y", "hatchbox-mcp-server"],
"env": {
"HATCHBOX_API_KEY": "your-api-key-here",
"HATCHBOX_ACCOUNT_ID": "1852",
"HATCHBOX_APP_ID": "8540",
"HATCHBOX_DEPLOY_KEY": "your-deploy-key-here",
"// Optional - for SSH access to read env vars": "",
"WEB_SERVER_IP_ADDRESS": "165.232.133.75",
"SSH_KEY_PATH": "/Users/yourname/.ssh/id_rsa",
"HATCHBOX_APP_NAME": "myapp",
"// Optional - security settings": "",
"READONLY": "false",
"ALLOW_DEPLOYS": "true"
}
}
}
}
getEnvVarsGet all environment variables from the Hatchbox server via SSH.
Requirements: WEB_SERVER_IP_ADDRESS must be configured.
Parameters: None
Example:
"Show me all environment variables"
getEnvVarGet a specific environment variable from the Hatchbox server via SSH.
Requirements: WEB_SERVER_IP_ADDRESS must be configured.
Parameters:
name (string, required): The name of the environment variable to retrieveExample:
{
"name": "RAILS_ENV"
}
setEnvVarSet or update an environment variable.
Requirements: READONLY must be set to false.
Parameters:
name (string, required): The environment variable namevalue (string, required): The environment variable valueExample:
{
"name": "DATABASE_URL",
"value": "postgres://user:pass@host:5432/dbname"
}
deleteEnvVarsDelete one or more environment variables.
Requirements: READONLY must be set to false.
Parameters:
names (array of strings, required): Array of environment variable names to deleteExample:
{
"names": ["OLD_VAR", "UNUSED_VAR"]
}
triggerDeployTrigger a new deployment for your application.
Requirements: ALLOW_DEPLOYS must be set to true (default).
Parameters:
sha (string, optional): Specific commit SHA to deploy (latest if not provided)Example:
{
"sha": "abc123def456"
}
checkDeployCheck the status of a deployment.
Requirements: ALLOW_DEPLOYS must be set to true (default).
Parameters:
activityId (string, required): The deployment activity ID returned from triggerDeployExample:
{
"activityId": "12345"
}
Here are some example queries you can use with Claude:
View all environment variables: "Show me all environment variables"
Get a specific variable: "What is the value of RAILS_ENV?"
Set an environment variable: "Set the RAILS_ENV to production"
Delete environment variables: "Delete the OLD_VAR and UNUSED_VAR environment variables"
Deploy the latest code: "Deploy the latest commit to Hatchbox"
Deploy a specific commit: "Deploy commit abc123def456 to Hatchbox"
Check deployment status: "Check the status of deployment activity 12345"
READONLY=false, ALLOW_DEPLOYS=trueREADONLY=false, ALLOW_DEPLOYS=trueREADONLY=true, ALLOW_DEPLOYS=false (recommended)This server is part of the PulseMCP organization's collection of MCP servers. For development instructions and contribution guidelines, see the main repository.
This project is licensed under the MIT License.
FAQs
Local implementation of Hatchbox MCP server
The npm package hatchbox-mcp-server receives a total of 59 weekly downloads. As such, hatchbox-mcp-server popularity was classified as not popular.
We found that hatchbox-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.