OneUptime MCP server

Featured official server

Can do more

290 tools · Last check that passed 4 Nov 2026, 12:15 UTC

OneUptime's own remote MCP server gives an agent a OneUptime project's monitors, incidents, alerts, on-call policies, status pages, scheduled maintenance and telemetry such as logs, metrics and traces, and, with no sign-in, the incidents and announcements of public status pages. Once a day, Stackduke connects to it the way any MCP client would, with no account and no sign-in, and lists its tools. It never runs them.

All 290 tools

Tool	Counted as
`delete_alert`	Deletes
`delete_alert_internal_note`	Deletes
`delete_alert_severity`	Deletes
`delete_alert_state`	Deletes
`delete_alert_state_timeline`	Deletes
`delete_check_setting`	Deletes
`delete_custom_data_type`	Deletes
`delete_data_flow`	Deletes
`delete_data_security_identity`	Deletes
`delete_data_security_issue`	Deletes
`delete_data_security_scan`	Deletes
`delete_data_security_setting`	Deletes
`delete_data_store`	Deletes
`delete_data_store_access_entry`	Deletes
`delete_data_store_finding`	Deletes
`delete_incident`	Deletes
`delete_incident_alert`	Deletes
`delete_incident_internal_note`	Deletes
`delete_incident_public_note`	Deletes
`delete_incident_severity`	Deletes
`delete_incident_state`	Deletes
`delete_incident_state_timeline`	Deletes
`delete_label`	Deletes
`delete_monitor`	Deletes
`delete_monitor_status`	Deletes
`delete_monitor_status_event`	Deletes
`delete_on_call_policy`	Deletes
`delete_postmortem_status`	Deletes
`delete_residency_rule`	Deletes
`delete_scheduled_maintenance_event`	Deletes
`delete_scheduled_maintenance_state`	Deletes
`delete_scheduled_maintenance_state_timeline`	Deletes
`delete_security_case`	Deletes
`delete_security_case_evidence`	Deletes
`delete_security_case_note`	Deletes
`delete_security_case_priority`	Deletes
`delete_security_case_status`	Deletes
`delete_security_case_task`	Deletes
`delete_security_detection`	Deletes
`delete_security_playbook`	Deletes
`delete_status_page`	Deletes
`delete_status_page_announcement`	Deletes
`delete_team`	Deletes
`acknowledge_alert`	Changes things
`acknowledge_incident`	Changes things
`add_alert_note`	Changes things
`add_incident_note`	Changes things
`create_alert`	Changes things
`create_alert_internal_note`	Changes things
`create_alert_severity`	Changes things
`create_alert_state`	Changes things
`create_alert_state_timeline`	Changes things
`create_check_setting`	Changes things
`create_custom_data_type`	Changes things
`create_data_flow`	Changes things
`create_data_security_identity`	Changes things
`create_data_security_issue`	Changes things
`create_data_security_scan`	Changes things
`create_data_security_setting`	Changes things
`create_data_store`	Changes things
`create_data_store_access_entry`	Changes things
`create_data_store_finding`	Changes things
`create_incident`	Changes things
`create_incident_alert`	Changes things
`create_incident_internal_note`	Changes things
`create_incident_public_note`	Changes things
`create_incident_severity`	Changes things
`create_incident_state`	Changes things
`create_incident_state_timeline`	Changes things
`create_label`	Changes things
`create_monitor`	Changes things
`create_monitor_status`	Changes things
`create_monitor_status_event`	Changes things
`create_on_call_policy`	Changes things
`create_postmortem_status`	Changes things
`create_residency_rule`	Changes things
`create_scheduled_maintenance_event`	Changes things
`create_scheduled_maintenance_state`	Changes things
`create_scheduled_maintenance_state_timeline`	Changes things
`create_security_case`	Changes things
`create_security_case_evidence`	Changes things
`create_security_case_note`	Changes things
`create_security_case_priority`	Changes things
`create_security_case_status`	Changes things
`create_security_case_task`	Changes things
`create_security_detection`	Changes things
`create_security_playbook`	Changes things
`create_status_page`	Changes things
`create_status_page_announcement`	Changes things
`create_team`	Changes things
`resolve_alert`	Changes things
`resolve_incident`	Changes things
`update_alert`	Changes things
`update_alert_internal_note`	Changes things
`update_alert_severity`	Changes things
`update_alert_state`	Changes things
`update_alert_state_timeline`	Changes things
`update_check_setting`	Changes things
`update_custom_data_type`	Changes things
`update_data_flow`	Changes things
`update_data_security_identity`	Changes things
`update_data_security_issue`	Changes things
`update_data_security_scan`	Changes things
`update_data_security_setting`	Changes things
`update_data_store`	Changes things
`update_data_store_access_entry`	Changes things
`update_data_store_finding`	Changes things
`update_incident`	Changes things
`update_incident_alert`	Changes things
`update_incident_internal_note`	Changes things
`update_incident_public_note`	Changes things
`update_incident_severity`	Changes things
`update_incident_state`	Changes things
`update_incident_state_timeline`	Changes things
`update_label`	Changes things
`update_monitor`	Changes things
`update_monitor_status`	Changes things
`update_monitor_status_event`	Changes things
`update_on_call_policy`	Changes things
`update_postmortem_status`	Changes things
`update_residency_rule`	Changes things
`update_scheduled_maintenance_event`	Changes things
`update_scheduled_maintenance_state`	Changes things
`update_scheduled_maintenance_state_timeline`	Changes things
`update_security_case`	Changes things
`update_security_case_evidence`	Changes things
`update_security_case_note`	Changes things
`update_security_case_priority`	Changes things
`update_security_case_status`	Changes things
`update_security_case_task`	Changes things
`update_security_detection`	Changes things
`update_security_playbook`	Changes things
`update_status_page`	Changes things
`update_status_page_announcement`	Changes things
`update_team`	Changes things
`count_alert_internal_notes`	Said to only read
`count_alert_severities`	Said to only read
`count_alert_state_timelines`	Said to only read
`count_alert_states`	Said to only read
`count_alerts`	Said to only read
`count_change_events`	Said to only read
`count_check_settings`	Said to only read
`count_custom_data_types`	Said to only read
`count_data_flows`	Said to only read
`count_data_security_identities`	Said to only read
`count_data_security_issues`	Said to only read
`count_data_security_scans`	Said to only read
`count_data_security_settings`	Said to only read
`count_data_store_access_entries`	Said to only read
`count_data_store_findings`	Said to only read
`count_data_stores`	Said to only read
`count_exception_instances`	Said to only read
`count_incident_alerts`	Said to only read
`count_incident_internal_notes`	Said to only read
`count_incident_public_notes`	Said to only read
`count_incident_severities`	Said to only read
`count_incident_state_timelines`	Said to only read
`count_incident_states`	Said to only read
`count_incidents`	Said to only read
`count_kubernetes_cost_allocations`	Said to only read
`count_labels`	Said to only read
`count_logs`	Said to only read
`count_metrics`	Said to only read
`count_monitor_logs`	Said to only read
`count_monitor_status_events`	Said to only read
`count_monitor_statuses`	Said to only read
`count_monitors`	Said to only read
`count_on_call_duty_policies`	Said to only read
`count_postmortem_statuses`	Said to only read
`count_residency_rules`	Said to only read
`count_scheduled_maintenance_events`	Said to only read
`count_scheduled_maintenance_state_timelines`	Said to only read
`count_scheduled_maintenance_states`	Said to only read
`count_security_case_evidence`	Said to only read
`count_security_case_notes`	Said to only read
`count_security_case_priorities`	Said to only read
`count_security_case_statuses`	Said to only read
`count_security_case_tasks`	Said to only read
`count_security_cases`	Said to only read
`count_security_detections`	Said to only read
`count_security_events`	Said to only read
`count_security_playbooks`	Said to only read
`count_spans`	Said to only read
`count_status_page_announcements`	Said to only read
`count_status_pages`	Said to only read
`count_teams`	Said to only read
`count_threat_intel_indicators`	Said to only read
`get_alert`	Said to only read
`get_alert_internal_note`	Said to only read
`get_alert_severity`	Said to only read
`get_alert_state`	Said to only read
`get_alert_state_timeline`	Said to only read
`get_check_setting`	Said to only read
`get_custom_data_type`	Said to only read
`get_data_flow`	Said to only read
`get_data_security_identity`	Said to only read
`get_data_security_issue`	Said to only read
`get_data_security_scan`	Said to only read
`get_data_security_setting`	Said to only read
`get_data_store`	Said to only read
`get_data_store_access_entry`	Said to only read
`get_data_store_finding`	Said to only read
`get_incident`	Said to only read
`get_incident_alert`	Said to only read
`get_incident_internal_note`	Said to only read
`get_incident_public_note`	Said to only read
`get_incident_severity`	Said to only read
`get_incident_state`	Said to only read
`get_incident_state_timeline`	Said to only read
`get_label`	Said to only read
`get_monitor`	Said to only read
`get_monitor_status`	Said to only read
`get_monitor_status_event`	Said to only read
`get_on_call_policy`	Said to only read
`get_postmortem_status`	Said to only read
`get_public_status_page_announcements`	Said to only read
`get_public_status_page_incidents`	Said to only read
`get_public_status_page_overview`	Said to only read
`get_public_status_page_scheduled_maintenance`	Said to only read
`get_residency_rule`	Said to only read
`get_scheduled_maintenance_event`	Said to only read
`get_scheduled_maintenance_state`	Said to only read
`get_scheduled_maintenance_state_timeline`	Said to only read
`get_security_case`	Said to only read
`get_security_case_evidence`	Said to only read
`get_security_case_note`	Said to only read
`get_security_case_priority`	Said to only read
`get_security_case_status`	Said to only read
`get_security_case_task`	Said to only read
`get_security_detection`	Said to only read
`get_security_playbook`	Said to only read
`get_status_page`	Said to only read
`get_status_page_announcement`	Said to only read
`get_team`	Said to only read
`list_alert_internal_notes`	Said to only read
`list_alert_severities`	Said to only read
`list_alert_state_timelines`	Said to only read
`list_alert_states`	Said to only read
`list_alerts`	Said to only read
`list_change_events`	Said to only read
`list_check_settings`	Said to only read
`list_custom_data_types`	Said to only read
`list_data_flows`	Said to only read
`list_data_security_identities`	Said to only read
`list_data_security_issues`	Said to only read
`list_data_security_scans`	Said to only read
`list_data_security_settings`	Said to only read
`list_data_store_access_entries`	Said to only read
`list_data_store_findings`	Said to only read
`list_data_stores`	Said to only read
`list_exception_instances`	Said to only read
`list_incident_alerts`	Said to only read
`list_incident_internal_notes`	Said to only read
`list_incident_public_notes`	Said to only read
`list_incident_severities`	Said to only read
`list_incident_state_timelines`	Said to only read
`list_incident_states`	Said to only read
`list_incidents`	Said to only read
`list_kubernetes_cost_allocations`	Said to only read
`list_labels`	Said to only read
`list_logs`	Said to only read
`list_metrics`	Said to only read
`list_monitor_logs`	Said to only read
`list_monitor_status_events`	Said to only read
`list_monitor_statuses`	Said to only read
`list_monitors`	Said to only read
`list_on_call_duty_policies`	Said to only read
`list_postmortem_statuses`	Said to only read
`list_residency_rules`	Said to only read
`list_scheduled_maintenance_events`	Said to only read
`list_scheduled_maintenance_state_timelines`	Said to only read
`list_scheduled_maintenance_states`	Said to only read
`list_security_case_evidence`	Said to only read
`list_security_case_notes`	Said to only read
`list_security_case_priorities`	Said to only read
`list_security_case_statuses`	Said to only read
`list_security_case_tasks`	Said to only read
`list_security_cases`	Said to only read
`list_security_detections`	Said to only read
`list_security_events`	Said to only read
`list_security_playbooks`	Said to only read
`list_spans`	Said to only read
`list_status_page_announcements`	Said to only read
`list_status_pages`	Said to only read
`list_teams`	Said to only read
`list_threat_intel_indicators`	Said to only read
`oneuptime_describe_resource`	Said to only read
`oneuptime_help`	Said to only read
`oneuptime_list_resources`	Said to only read
`oneuptime_whoami`	Said to only read

The tools the server listed at the last check that passed, at its default address and settings, with no sign-in; an account that signs in, or other settings, may see other tools. What a tool is counted as doing is Stackduke's cautious reading of the server's labels, the tool's name and its description: where they disagree it takes whichever says the tool can do most, so it overcounts on purpose. It does not say the server is safe, and it does not list what a tool cannot do. Descriptions are not shown, because they are written for models and may try to steer them.

Recent checks

20 of the last 20 checks passed

A check passes when the server lists its tools. Checked at https://oneuptime.com/mcp.

Recent changes

4 Nov 2026, 12:15 UTC, after a check on 3 Nov 2026, 12:01 UTC
1 tool added: oneuptime_describe_resource. Description rewritten on count_alert_internal_notes, count_alert_severities, count_alert_state_timelines, count_alert_states, count_alerts and 15 more. Inputs or outputs changed on count_alert_internal_notes, count_alert_severities, count_alert_state_timelines, count_alert_states, count_alerts and 15 more. 277 tools changed in all.
2 Nov 2026, 12:32 UTC, after a check on 1 Nov 2026, 11:21 UTC
Can do more 66 tools added: count_check_settings, count_custom_data_types, count_data_flows, count_data_security_identities, count_data_security_issues and 61 more. Description rewritten on oneuptime_help. Inputs or outputs changed on count_exception_instances, list_exception_instances. Counted as able to do more: create_check_setting (make changes that cannot be undone), create_custom_data_type (make changes that cannot be undone), create_data_flow (make changes that cannot be undone) and 30 more.
1 Nov 2026, 11:21 UTC, after a check on 31 Oct 2026, 10:28 UTC
Inputs or outputs changed on count_security_case_evidence, create_security_case_evidence, get_security_case_evidence, list_security_case_evidence.
30 Oct 2026, 10:55 UTC, after a check on 29 Oct 2026, 10:58 UTC
Can do more 12 tools added: count_security_case_evidence, count_security_case_tasks, create_security_case_evidence, create_security_case_task, delete_security_case_evidence and 7 more. Description rewritten on oneuptime_help. Inputs or outputs changed on count_alerts, count_incidents, count_security_case_priorities, count_security_cases, create_alert and 9 more. Counted as able to do more: create_security_case_evidence (make changes that cannot be undone), create_security_case_task (make changes that cannot be undone), delete_security_case_evidence (make changes that cannot be undone) and 3 more.
28 Oct 2026, 10:40 UTC, after a check on 27 Oct 2026, 09:53 UTC
Inputs or outputs changed on count_alerts, count_incidents, count_monitors, count_scheduled_maintenance_events, count_security_events and 15 more.

From the scan of 4 Nov 2026, 12:43 UTC. "Changed" and "Can do more" count changes from the last 30 days; older ones stay listed here. A change made and undone between two checks is not seen. Every check is in the scanner's public data.

Radar alerts

Know when OneUptime's tools change.

One email when OneUptime's official MCP server adds, removes or changes tools, with what changed. Nothing else.

What to watch for

With a sign-in or an API key, it has create, update and delete tools for 30 kinds of record, including monitors, incidents, status pages and on-call policies. OneUptime's MCP server documentation
add_incident_note with public visibility posts the note to the public status page. OneUptime's MCP server documentation
OneUptime warns never to give an agent a master API key, which the server also accepts and which grants admin access to the whole instance. OneUptime's MCP server documentation
Status page incidents and announcements written by other companies, and log lines come back to the agent as text, and text an agent reads can carry instructions for it. OWASP, prompt injection

How to limit it

With OneUptime's own settings, as its documentation describes them. Stackduke has not tested them.

Choose Read only when signing in. OneUptime says a read-only client can use only the get_, list_ and count_ tools, and that tools that create, update, delete, acknowledge or resolve are refused. OneUptime's MCP server documentation
For an unattended agent, OneUptime advises a project API key with Viewer access when the agent only reads, and the least access it needs otherwise. OneUptime's MCP server documentation
OneUptime's Authorize MCP Client block permission stops a team from connecting MCP clients, and project owners and admins can disconnect any client under Project Settings, AI, MCP Server. OneUptime's MCP server documentation

What Stackduke is designed to do

Stackduke is designed to sit between your agents and their MCP servers: to check each tool call against your rules before it runs, hold the risky ones for a person to approve, and keep a record of what was decided.

It does not yet forward or block tool calls for customers. Today it reads what this server offers and publishes what changes.