MCP Server

The Coldrune MCP server (coldrune-mcp) exposes secret management tools over the Model Context Protocol using stdio transport.

Install

# Download the binary
curl -L -o coldrune-mcp https://github.com/user/coldrune/releases/latest/download/coldrune-mcp-linux-amd64
chmod +x coldrune-mcp
sudo mv coldrune-mcp /usr/local/bin/

Or build from source:

cd mcp
cargo build --release
# Binary at target/release/coldrune-mcp

Configure

The MCP server reads configuration from three sources (in priority order):

1. Environment variables: COLDRUNE_SERVER_URL, COLDRUNE_API_KEY, COLDRUNE_ORG, COLDRUNE_PROJECT, COLDRUNE_ENV
2. coldrune.yml in the working directory
3. Tool parameters (per-call overrides)

Authentication

Set COLDRUNE_API_KEY with a service account API key:

export COLDRUNE_API_KEY=cr_sa_...

Or the server falls back to the session token at ~/.config/coldrune/session.

Caution

For non-localhost servers, always use HTTPS. The MCP server warns when sending auth tokens over unencrypted HTTP.

Defaults

Create a coldrune.yml in your project root so the agent doesn’t need to pass org/project/env on every call:

server_url: https://api.coldrune.com
org: my-org
project: api-backend
env: dev

Client configuration

Claude Desktop

Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):

{
  "mcpServers": {
    "coldrune": {
      "command": "coldrune-mcp",
      "env": {
        "COLDRUNE_SERVER_URL": "https://api.coldrune.com",
        "COLDRUNE_API_KEY": "cr_sa_..."
      }
    }
  }
}

Claude Code

Add to your project’s .mcp.json:

{
  "mcpServers": {
    "coldrune": {
      "command": "coldrune-mcp",
      "env": {
        "COLDRUNE_SERVER_URL": "https://api.coldrune.com",
        "COLDRUNE_API_KEY": "cr_sa_..."
      }
    }
  }
}

Generic MCP client

The server uses stdio transport (JSON-RPC over stdin/stdout). Launch it as a subprocess:

COLDRUNE_API_KEY=cr_sa_... coldrune-mcp

Logs go to stderr. Protocol messages go to stdout.

Available tools

The server exposes 15 tools. See the MCP Tools Reference for the complete list.

Category	Tools
Secrets	secret_set, secret_get, secret_list, secret_delete
Projects	project_create, project_list, project_delete
Environments	env_create, env_list, env_delete
Organization	org_list, org_members_list
Access & Audit	acl_list, audit_list
Health	health_check