- Go 92.9%
- PLpgSQL 3.1%
- HTML 1.9%
- Shell 1.6%
- Makefile 0.5%
| Filename | Latest commit message | Latest commit date |
|---|---|---|
Bumps [github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi) from 3.255.0 to 3.257.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pulumi/pulumi/releases">github.com/pulumi/pulumi/sdk/v3's releases</a>.</em></p> <blockquote> <h2>v3.257.0</h2> <h2>3.257.0 (2026-08-13)</h2> <h3>Features</h3> <ul> <li>[cli] Offer to create a first project after logging in to an account with no stacks <a href="https://redirect.github.com/pulumi/pulumi/pull/24133">#24133</a></li> <li>[cli/do] Auto-assign identifiers to existing stack resources in <code>pulumi do</code> input expressions, and add <code>pulumi do show-resources</code> to list them <a href="https://redirect.github.com/pulumi/pulumi/pull/24184">#24184</a></li> <li>[cli/do] Make "<code>pulumi do <pkg> <resource> patch <name></code> work in stateful mode, overlaying the supplied inputs onto the existing snippet" <a href="https://redirect.github.com/pulumi/pulumi/pull/24295">#24295</a></li> <li>[cli/state] Implement <code>pulumi state get</code> to show individual resources <a href="https://redirect.github.com/pulumi/pulumi/pull/24191">#24191</a></li> <li>[cli/do] Fall back to an auto-created project and stack under PULUMI_HOME when <code>pulumi do</code> is invoked outside of a Pulumi project <a href="https://redirect.github.com/pulumi/pulumi/pull/24231">#24231</a></li> </ul> <h3>Bug Fixes</h3> <ul> <li>[sdkgen/go] Generated output-form invokes pass their arguments to the core SDK without resolving them first, so invoke dependencies can be inferred from arguments; generated SDKs now require pulumi SDK v3.255.0 or later <a href="https://redirect.github.com/pulumi/pulumi/pull/24060">#24060</a></li> <li>[cli] Make '<code>pulumi stack history events --summary</code> report the program errors from the language host <a href="https://redirect.github.com/pulumi/pulumi/pull/24111">#24111</a></li> <li>[cli/cloud] <code>pulumi api</code>: repeated <code>-H</code>/<code>--header</code> values for the same header name now all reach the wire, instead of each one silently overwriting the last <a href="https://redirect.github.com/pulumi/pulumi/pull/24180">#24180</a></li> <li>[cli/package] Maintain <code>--server</code> when adding to the packages section of Pulumi.yaml <a href="https://redirect.github.com/pulumi/pulumi/pull/24189">#24189</a></li> <li>[sdk/go] Fix panics in hooks to not crash the entire process <a href="https://redirect.github.com/pulumi/pulumi/pull/24218">#24218</a></li> <li>[programgen/go] <code>for</code> expressions are now generated as Go loops <a href="https://redirect.github.com/pulumi/pulumi/pull/24228">#24228</a></li> <li>[programgen/go] Fix invalid <code>_ := index</code> statement emitted for resources with a numeric <code>range</code> whose value variable is unused <a href="https://redirect.github.com/pulumi/pulumi/pull/24227">#24227</a></li> <li>[sdk/python] Report an error instead of hanging when a Python resource depends on its own parent <a href="https://redirect.github.com/pulumi/pulumi/pull/24230">#24230</a></li> <li>[sdkgen/go] Generate the missing Go input types for resource input properties that are deeply nested collections of object types <a href="https://redirect.github.com/pulumi/pulumi/pull/24236">#24236</a></li> <li>[programgen/go] Rename properties that collide with reserved names (e.g. <code>elementType</code>) the same way SDK codegen does, instead of emitting uncompilable code <a href="https://redirect.github.com/pulumi/pulumi/pull/24235">#24235</a></li> <li>[cli/display] Show the value being added when a refresh or provider diff reports an added property <a href="https://redirect.github.com/pulumi/pulumi/pull/24245">#24245</a></li> <li>[cli/plugin] Track when a plugin was last run so <code>pulumi plugin ls</code> reports an accurate last-used time on all platforms <a href="https://redirect.github.com/pulumi/pulumi/pull/24251">#24251</a></li> <li>[engine] Show secrets in diff display when <code>--show-secrets</code> is passed <a href="https://redirect.github.com/pulumi/pulumi/pull/24253">#24253</a></li> <li>[cli] Exit promptly when a command is cancelled while an HTTP request is being retried <a href="https://redirect.github.com/pulumi/pulumi/pull/24276">#24276</a></li> </ul> <h3>Improvements</h3> <ul> <li>[sdk/nodejs] Improve error message when resource registrations are still pending when pulumi exits <a href="https://redirect.github.com/pulumi/pulumi/pull/24082">#24082</a></li> <li>[cli] Pass the invoked command (e.g. <code>pulumi new</code>) to the browser-based login/signup flow so Pulumi Cloud can attribute signups to the command that triggered them <a href="https://redirect.github.com/pulumi/pulumi/pull/24192">#24192</a></li> </ul> <h3>Miscellaneous</h3> <ul> <li>[sdkgen] Extension-parameterized packages now namespace their resource and function tokens under their own package name rather than the base provider's <a href="https://redirect.github.com/pulumi/pulumi/pull/24143">#24143</a></li> <li>[java] Upgrade java to v1.35.0 <a href="https://redirect.github.com/pulumi/pulumi/pull/24202">#24202</a></li> <li>[backend/diy] The deprecation warning is now an error. PULUMI_DIY_BACKEND_IGNORE_DEPRECATION_WARNING is now PULUMI_DIY_BACKEND_IGNORE_DEPRECATION_ERROR. <a href="https://redirect.github.com/pulumi/pulumi/pull/24216">#24216</a></li> <li>[java] Upgrade java to v1.36.0 <a href="https://redirect.github.com/pulumi/pulumi/pull/24243">#24243</a></li> <li>[sdk/dotnet] Upgrade dotnet to v3.111.1 <a href="https://redirect.github.com/pulumi/pulumi/pull/24249">#24249</a></li> </ul> <h2>v3.256.0</h2> <h2>3.256.0 (2026-08-04)</h2> <h3>Features</h3> <ul> <li>[cli] Add <code>--ignore-protect</code> flag to <code>pulumi up</code>, <code>pulumi preview</code> and <code>pulumi destroy</code> to allow deleting protected resources without unprotecting them in the state first <a href="https://redirect.github.com/pulumi/pulumi/pull/24053">#24053</a></li> <li>[cli/env] Add an optional <code>--export-env-vars</code> flag to the <code>env provider {aws,azure,gcp}-login</code> commands to also set the standard SDK environment variables referencing the login outputs <a href="https://redirect.github.com/pulumi/pulumi/pull/24055">#24055</a></li> <li>[cli] Add a <code>--server</code> flag to <code>pulumi package add</code>, <code>publish</code>, <code>get-schema</code>, <code>get-mapping</code>, <code>gen-sdk</code>, <code>info</code> and <code>pulumi schema check</code> that skips package resolution and uses the given URL as the plugin download URL <a href="https://redirect.github.com/pulumi/pulumi/pull/24107">#24107</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md">github.com/pulumi/pulumi/sdk/v3's changelog</a>.</em></p> <blockquote> <h2>3.257.0 (2026-08-13)</h2> <h3>Features</h3> <ul> <li>[cli] Offer to create a first project after logging in to an account with no stacks <a href="https://redirect.github.com/pulumi/pulumi/pull/24133">#24133</a></li> <li>[cli/do] Auto-assign identifiers to existing stack resources in <code>pulumi do</code> input expressions, and add <code>pulumi do show-resources</code> to list them <a href="https://redirect.github.com/pulumi/pulumi/pull/24184">#24184</a></li> <li>[cli/do] Make "<code>pulumi do <pkg> <resource> patch <name></code> work in stateful mode, overlaying the supplied inputs onto the existing snippet" <a href="https://redirect.github.com/pulumi/pulumi/pull/24295">#24295</a></li> <li>[cli/state] Implement <code>pulumi state get</code> to show individual resources <a href="https://redirect.github.com/pulumi/pulumi/pull/24191">#24191</a></li> <li>[cli/do] Fall back to an auto-created project and stack under PULUMI_HOME when <code>pulumi do</code> is invoked outside of a Pulumi project <a href="https://redirect.github.com/pulumi/pulumi/pull/24231">#24231</a></li> </ul> <h3>Bug Fixes</h3> <ul> <li>[sdkgen/go] Generated output-form invokes pass their arguments to the core SDK without resolving them first, so invoke dependencies can be inferred from arguments; generated SDKs now require pulumi SDK v3.255.0 or later <a href="https://redirect.github.com/pulumi/pulumi/pull/24060">#24060</a></li> <li>[cli] Make '<code>pulumi stack history events --summary</code> report the program errors from the language host <a href="https://redirect.github.com/pulumi/pulumi/pull/24111">#24111</a></li> <li>[cli/cloud] <code>pulumi api</code>: repeated <code>-H</code>/<code>--header</code> values for the same header name now all reach the wire, instead of each one silently overwriting the last <a href="https://redirect.github.com/pulumi/pulumi/pull/24180">#24180</a></li> <li>[cli/package] Maintain <code>--server</code> when adding to the packages section of Pulumi.yaml <a href="https://redirect.github.com/pulumi/pulumi/pull/24189">#24189</a></li> <li>[sdk/go] Fix panics in hooks to not crash the entire process <a href="https://redirect.github.com/pulumi/pulumi/pull/24218">#24218</a></li> <li>[programgen/go] <code>for</code> expressions are now generated as Go loops <a href="https://redirect.github.com/pulumi/pulumi/pull/24228">#24228</a></li> <li>[programgen/go] Fix invalid <code>_ := index</code> statement emitted for resources with a numeric <code>range</code> whose value variable is unused <a href="https://redirect.github.com/pulumi/pulumi/pull/24227">#24227</a></li> <li>[sdk/python] Report an error instead of hanging when a Python resource depends on its own parent <a href="https://redirect.github.com/pulumi/pulumi/pull/24230">#24230</a></li> <li>[sdkgen/go] Generate the missing Go input types for resource input properties that are deeply nested collections of object types <a href="https://redirect.github.com/pulumi/pulumi/pull/24236">#24236</a></li> <li>[programgen/go] Rename properties that collide with reserved names (e.g. <code>elementType</code>) the same way SDK codegen does, instead of emitting uncompilable code <a href="https://redirect.github.com/pulumi/pulumi/pull/24235">#24235</a></li> <li>[cli/display] Show the value being added when a refresh or provider diff reports an added property <a href="https://redirect.github.com/pulumi/pulumi/pull/24245">#24245</a></li> <li>[cli/plugin] Track when a plugin was last run so <code>pulumi plugin ls</code> reports an accurate last-used time on all platforms <a href="https://redirect.github.com/pulumi/pulumi/pull/24251">#24251</a></li> <li>[engine] Show secrets in diff display when <code>--show-secrets</code> is passed <a href="https://redirect.github.com/pulumi/pulumi/pull/24253">#24253</a></li> <li>[cli] Exit promptly when a command is cancelled while an HTTP request is being retried <a href="https://redirect.github.com/pulumi/pulumi/pull/24276">#24276</a></li> </ul> <h3>Improvements</h3> <ul> <li>[sdk/nodejs] Improve error message when resource registrations are still pending when pulumi exits <a href="https://redirect.github.com/pulumi/pulumi/pull/24082">#24082</a></li> <li>[cli] Pass the invoked command (e.g. <code>pulumi new</code>) to the browser-based login/signup flow so Pulumi Cloud can attribute signups to the command that triggered them <a href="https://redirect.github.com/pulumi/pulumi/pull/24192">#24192</a></li> </ul> <h3>Miscellaneous</h3> <ul> <li>[sdkgen] Extension-parameterized packages now namespace their resource and function tokens under their own package name rather than the base provider's <a href="https://redirect.github.com/pulumi/pulumi/pull/24143">#24143</a></li> <li>[java] Upgrade java to v1.35.0 <a href="https://redirect.github.com/pulumi/pulumi/pull/24202">#24202</a></li> <li>[backend/diy] The deprecation warning is now an error. PULUMI_DIY_BACKEND_IGNORE_DEPRECATION_WARNING is now PULUMI_DIY_BACKEND_IGNORE_DEPRECATION_ERROR. <a href="https://redirect.github.com/pulumi/pulumi/pull/24216">#24216</a></li> <li>[java] Upgrade java to v1.36.0 <a href="https://redirect.github.com/pulumi/pulumi/pull/24243">#24243</a></li> <li>[sdk/dotnet] Upgrade dotnet to v3.111.1 <a href="https://redirect.github.com/pulumi/pulumi/pull/24249">#24249</a></li> </ul> <h2>3.256.0 (2026-08-04)</h2> <h3>Features</h3> <ul> <li>[cli] Add <code>--ignore-protect</code> flag to <code>pulumi up</code>, <code>pulumi preview</code> and <code>pulumi destroy</code> to allow deleting protected resources without unprotecting them in the state first <a href="https://redirect.github.com/pulumi/pulumi/pull/24053">#24053</a></li> <li>[cli/env] Add an optional <code>--export-env-vars</code> flag to the <code>env provider {aws,azure,gcp}-login</code> commands to also set the standard SDK environment variables referencing the login outputs <a href="https://redirect.github.com/pulumi/pulumi/pull/24055">#24055</a></li> <li>[cli] Add a <code>--server</code> flag to <code>pulumi package add</code>, <code>publish</code>, <code>get-schema</code>, <code>get-mapping</code>, <code>gen-sdk</code>, <code>info</code> and <code>pulumi schema check</code> that skips package resolution and uses the given URL as the plugin download URL <a href="https://redirect.github.com/pulumi/pulumi/pull/24107">#24107</a></li> </ul> <h3>Bug Fixes</h3> <ul> <li>[backend/service] Fix <code>pulumi login --insecure</code> not being reflected in the stack's service secrets manager state, which caused TLS verification failures against self-hosted backends using self-signed certificates <a href="https://redirect.github.com/pulumi/pulumi/pull/24134">#24134</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
| .githooks | ||
| .github | ||
| .vscode | ||
| cmd | ||
| data | ||
| deploy | ||
| docs | ||
| internal | ||
| pkg | ||
| scripts | ||
| tests/integration | ||
| tools | ||
| .env.example | ||
| .gitignore | ||
| .golangci.yml | ||
| .goreleaser.yaml | ||
| .ko.dockerignore | ||
| .ko.yaml | ||
| CLAUDE.md | ||
| CONTRIBUTING.md | ||
| docker-compose.yml | ||
| go.mod | ||
| go.sum | ||
| LICENSE | ||
| Makefile | ||
| README.md | ||
| SECURITY.md | ||
MCP Registry
The MCP registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.
📤 Publish my MCP server | ⚡️ Live API docs | 👀 Ecosystem vision | 📖 Full documentation
Development Status
2025-10-24 update: The Registry API has entered an API freeze (v0.1) 🎉. For the next month or more, the API will remain stable with no breaking changes, allowing integrators to confidently implement support. This freeze applies to v0.1 while development continues on v0. We'll use this period to validate the API in real-world integrations and gather feedback to shape v1 for general availability. Thank you to everyone for your contributions and patience—your involvement has been key to getting us here!
2025-09-08 update: The registry has launched in preview 🎉 (announcement blog post). While the system is now more stable, this is still a preview release and breaking changes or data resets may occur. A general availability (GA) release will follow later. We'd love your feedback in GitHub discussions or in the #registry-dev Discord (joining details here).
Registry Working Group:
- Radoslav (Rado) Dimitrov (Stacklok) @rdimitrov - WG Lead
- Tadas Antanavicius (PulseMCP) @tadasant
- Bob Dickinson (TeamSpark) @BobDickinson
- Preeti (Pree) Dewani (Ravenmail) @pree-dew
Contributing
We use multiple channels for collaboration - see modelcontextprotocol.io/community/communication.
Often (but not always) ideas flow through this pipeline:
- Discord - Real-time community discussions
- Discussions - Propose and discuss product/technical requirements
- Issues - Track well-scoped technical work
- Pull Requests - Contribute work towards issues
Quick start:
Pre-requisites
- Docker
- Go - version per the
godirective in go.mod; the Go toolchain fetches it for you - ko - Container image builder for Go (installation instructions)
- golangci-lint - version per the
golangci-lint-actionpin in ci.yml, so local lint matches CI
Running the server
# Start full development environment
make dev-compose
This starts the registry at localhost:8080 with PostgreSQL. The database uses ephemeral storage and is reset each time you restart the containers, ensuring a clean state for development and testing.
Note: The registry uses ko to build container images. The make dev-compose command automatically builds the registry image with ko and loads it into your local Docker daemon before starting the services.
By default, the registry seeds from the production API with a filtered subset of servers (to keep startup fast). This ensures your local environment mirrors production behavior and all seed data passes validation. For offline development you can seed from a file without validation with MCP_REGISTRY_SEED_FROM=data/seed.json MCP_REGISTRY_ENABLE_REGISTRY_VALIDATION=false make dev-compose.
The setup can be configured with environment variables in docker-compose.yml - see .env.example for a reference.
Alternative: Running a pre-built Docker image
Pre-built Docker images are automatically published to GitHub Container Registry. Note that the image does not bundle PostgreSQL, so you need to run your own and point the registry at it via MCP_REGISTRY_DATABASE_URL (see docker-compose.yml for a working example):
# Run latest stable release
docker run -p 8080:8080 ghcr.io/modelcontextprotocol/registry:latest
# Run latest from main branch (continuous deployment)
docker run -p 8080:8080 ghcr.io/modelcontextprotocol/registry:main
# Run specific release version
docker run -p 8080:8080 ghcr.io/modelcontextprotocol/registry:v1.0.0
# Run development build from main branch
docker run -p 8080:8080 ghcr.io/modelcontextprotocol/registry:main-20250906-abc123d
Available tags:
- Releases:
latest,v1.0.0,v1.1.0, etc. - Continuous:
main(latest main branch build) - Development:
main-<date>-<sha>(specific commit builds)
Publishing a server
To publish a server, we've built a simple CLI. You can use it with:
# Build the latest CLI
make publisher
# Use it!
./bin/mcp-publisher --help
See the publisher guide for more details.
Other commands
# Run lint, schema validation, and all tests
# Note: this also runs `make dev-down`, stopping any running dev-compose environment
make check
There are also a few more helpful commands for development. Run make help to learn more, or look in Makefile.
Architecture
Project Structure
├── cmd/ # Application entry points
│ ├── publisher/ # Server publishing tool
│ └── registry/ # Registry API server
├── data/ # Seed data
├── deploy/ # Deployment configuration (Pulumi)
├── docs/ # Documentation
├── internal/ # Private application code
│ ├── api/ # HTTP handlers and routing
│ ├── auth/ # Authentication (GitHub OAuth, JWT, namespace blocking)
│ ├── config/ # Configuration management
│ ├── database/ # Data persistence (PostgreSQL)
│ ├── importer/ # Seed data import
│ ├── service/ # Business logic
│ ├── telemetry/ # Metrics and monitoring
│ └── validators/ # Input validation
├── pkg/ # Public packages
│ ├── api/ # API types and structures
│ │ └── v0/ # Version 0 API types
│ └── model/ # Data models for server.json
├── scripts/ # Development and testing scripts
├── tests/ # Integration tests
└── tools/ # CLI tools and utilities
└── validate-*.sh # Schema validation tools
Authentication
Publishing supports multiple authentication methods:
- GitHub OAuth - For publishing by logging into GitHub
- GitHub OIDC - For publishing from GitHub Actions
- DNS verification - For proving ownership of a domain and its subdomains
- HTTP verification - For proving ownership of a domain
The registry validates namespace ownership when publishing. E.g. to publish...:
io.github.domdomegg/my-cool-mcpyou must login to GitHub asdomdomegg, or be in a GitHub Action on domdomegg's reposme.adamjones/my-cool-mcpyou must prove ownership ofadamjones.mevia DNS or HTTP challenge
Community Projects
Check out community projects to explore notable registry-related work created by the community.
More documentation
See the documentation for more details if your question has not been answered here!