Back to Browse

Spring Runtime MCP Server

Developer ToolsLow Risk10.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

Read-only Spring Boot runtime evidence for agents: beans, routes, health, startup.

About

Read-only Spring Boot runtime evidence for agents: beans, routes, health, startup.

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (1 strong, 3 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry. Trust signals: trusted author (4/4 approved).

7 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-neilmorse-spring-runtime-mcp": {
      "args": [
        "spring-runtime-mcp"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Spring Boot Runtime Diagnostics MCP

Chinese README

Give your coding assistant access to what is actually running in a Spring Boot application. This MCP server reads authorized Actuator and OpenAPI data to help investigate Beans, routes, health, database migrations and startup problems.

What can it check?

Your questionWhat it provides
Why was a Bean not created?Beans, dependencies and condition reports, with blocking chains when evidence is sufficient
Is this route registered?Actual paths, HTTP methods, Controllers and MVC/WebFlux mappings
What is unhealthy?Visible components and liveness/readiness status
Did a migration fail?Reported Flyway/Liquibase records, states and checksums
What made startup slow?Slow steps and their parent chains
Where did a configuration value come from?Sources for registered properties; configuration diagnostics require opt-in
Is this API in OpenAPI?Operations, schemas and references within the document
Does the process match my expectations?Compare the Bean, route, migration version and profile expectations you supply

For example, ask: “Check whether GET /orders/{id} is registered and tell me which Controller handles it.” The server reads mapping metadata without calling the business endpoint.

Get started

You need Python 3.11+, uv and an authorized local Spring Boot application. Confirm its management endpoints and permissions using the target setup guide, then check and start 0.2.12 Alpha:

uvx --default-index https://pypi.org/simple spring-runtime-mcp==0.2.12 --version
uvx --default-index https://pypi.org/simple spring-runtime-mcp==0.2.12 --base-url http://127.0.0.1:18081

Use the second command as your MCP client's STDIO server command. In a terminal it waits for client requests. Follow the English first-query guide; additional client configuration templates cover other clients.

Try the synthetic route demo using the public package without preparing an application, then share first-query feedback. The replay needs no Spring process and does not establish live application or client compatibility.

Boundaries

The server connects only to loopback addresses, uses fixed endpoints and supports optional Bearer authentication from a named environment variable. OpenAPI uses /actuator/openapi. Configuration diagnostics are disabled by default and require explicit opt-in via CLI flags (--config-prefix, --config-property, --config-profiles). When enabled, values remain hidden unless both --config-allow-values and the tool’s includeValues=true are set. Output is sanitized, and each tool response is capped at 16 KiB. Missing evidence is reported as partial/unknown.

Tools do not write to the target, restart applications, or read heap dumps or raw logs. The complete Boot/Java/client matrix, Windows/macOS and production-cluster compatibility remain unverified.

Documentation · Tool contract · Source facts · Development and checks

Apache-2.0 · Contributing · Report a security issue

Reviews

No reviews yet

Be the first to review this server!