Flagsmith MCP server: 54 tools for managing feature flags
Where the real server is, which of its tools change flags, how to connect each client, and how to run it beside a self-hosted Flagsmith.
Checked 3 October 2026 · from Flagsmith's MCP documentation, its main repository, Docker Hub and the live endpoint's OAuth metadata
One of 91 guides to monitoring and developer tools. Each covers what an AI coding agent can get out of the tool through MCP, the protocol that lets the agent query the tool directly.
Summary
Flagsmith runs a first-party MCP server at `https://mcp.flagsmith.com`. Interactive clients sign in with OAuth, and CI jobs send an Organisation API key in the Authorization header.
The documentation lists 47 core tools and 7 enterprise tools, each with a written description. Enterprise tools cover change requests, release pipelines and custom roles, and appear only on paid SaaS plans or self-hosted Enterprise.
Self-hosted Flagsmith gets the same server as a flagsmith/flagsmith-mcp container. A separate repository, Flagsmith/flagsmith-mcp, holds a Speakeasy-generated build pushed once on 13 March 2026, and the docs do not use it.
What is the Flagsmith MCP server?
MCP (the Model Context Protocol) lets an AI assistant call a service's functions as tools. Flagsmith is a feature-flag platform, so this server lets an agent read and change flags without opening the dashboard.
Tool names are plain verbs on Flagsmith objects: list_project_features, create_segment_override, publish_environment_feature_version. Several descriptions say whether they apply to environments with v2 feature versioning, which tells the agent which of two write paths to use.
Flagsmith first hosted the server on Gram, Speakeasy's MCP hosting service. That endpoint was deprecated and shut down on 30 June 2026; the docs say tool names did not change in the move.
Flagsmith controls releases, so the server is strongest in CI and release, with a thin reach into code references and flag health.
| Part of the work | What Flagsmith has here | Can an agent reach it |
|---|---|---|
| Code, tests & review | Code references | Partial. get_feature_code_references returns where a flag is used in code |
| CI & release | Flags, feature versions, segments, change requests, release pipelines | Yes. Create, update and publish flags and versions; change requests and release pipelines need an enterprise plan |
| Production observability | Feature health events, evaluation data | Partial. get_feature_health_events and get_feature_evaluation_data cover flags only; no logs, metrics or traces |
| Agent observability & evals | None | Nothing for tracing or evaluating the agents you build |
| AI cost management | None | No spend data of any kind |
An agent can take a flag from creation to a published version in one session. The beta experiment tools add exposure counts and results, which is as close as the server gets to measuring a release.
What can an AI agent do with Flagsmith?
54 documented: 47 core on every deployment, 7 enterprise on paid SaaS or self-hosted Enterprise
- Projects and environments5
list_organizationslist_projects_in_organizationget_projectlist_project_environmentslist_environments- Features5
list_project_featuresget_feature_flagget_feature_code_referencesget_feature_evaluation_dataget_feature_health_events- Segments3
list_project_segmentsget_project_segmentlist_feature_segments- Experiments (beta)5
list_experimentsget_experimentget_experiment_exposuresget_experiment_resultslist_metrics- Enterprise5
list_project_change_requestslist_environment_change_requestslist_project_release_pipelinesget_release_pipelinelist_organization_roles- Writing10Write
create_featureupdate_feature_stateupdate_environment_feature_statepublish_environment_feature_versioncreate_segment_overridedelete_feature_segmentcreate_project_segmentcreate_organization_invitecreate_environment_feature_change_requestadd_feature_to_release_pipeline
Groups follow Flagsmith's documented tool table as of 3 October 2026. 21 core tools and 2 enterprise tools begin with create, update, delete, publish or add; the Writing group names ten of them.
Flagsmith MCP server limits: where answers come back incomplete
Two limits are about which tool the agent picks; the third is about which server a search turns up.
The agent says: “I updated the flag in production.” It created a version that is not live yet.
Environments with v2 feature versioning change flags through create_environment_feature_version and its state tools. Nothing reaches users until publish_environment_feature_version runs.
Older environments use update_environment_feature_state, which applies at once. The two paths look alike in a summary.
Guard: Ask the agent to report whether the environment uses v2 versioning and whether it published, every time it writes.
The agent says: “This project has no change requests.” The change request tools are not loaded.
list_project_change_requests and list_environment_change_requests are enterprise tools. On other plans they never register, so the agent cannot see change requests at all.
Guard: On a non-enterprise plan, tell the agent that change requests and release pipelines are out of its reach.
A search for the Flagsmith MCP server can land on a generated test build.
Flagsmith/flagsmith-mcp was created and last pushed on 13 March 2026. Its README still says the server "is not yet ready for production use", and its tool names are REST paths such as mcp-api-v1-projects-features-list.
The documented server lives in Flagsmith/flagsmith under mcp/, with names such as list_project_features.
Guard: Use the hosted URL or the uvx command from Flagsmith's docs. Ignore Flagsmith/flagsmith-mcp.
How to configure Flagsmith MCP for agents
- 1
Choose OAuth or an API key
OAuth suits a person in an IDE. An Organisation API key suits CI, and its permissions become the agent's permissions.
- 2
Know your versioning mode
Environments with v2 feature versioning change flags through versions you then publish. Older environments change feature states directly, and the tool descriptions say which applies.
- 3
Decide who may publish
publish_environment_feature_versionmakes a change live. Keep a person in the loop for production environments. - 4
Pin the stdio build on self-hosted
Flagsmith recommends pinning
uvxto the release tag that matches your Flagsmith version rather than@main.
Paste this into your agent’s instructions
Writes can reach production flags, and two versioning modes use different tools. The block below makes the agent say which environment and which mode it touched.
When you answer using Flagsmith MCP tools, state: - The project and environment the answer covers. - Whether the environment uses v2 feature versioning. - Every tool you called that changed a flag, segment, version, experiment or project, and what it changed. - Whether a feature version was published, or only created. Never state that data does not exist. State that the tool above returned no results. Write your answer in ASD-STE100 Simplified Technical English. Use short sentences with one idea in each.
Do you need the MCP server at all?
The Flagsmith REST API covers the same Management API the server proxies. A script or CI step that calls it directly is easier to audit than an agent choosing among 54 tools.
The Flagsmith CLI is listed beside the MCP server in the docs, and suits pipelines that only need to read flag state.
If you are comparing flag platforms, LaunchDarkly also runs a first-party MCP server.
Use the hosted MCP server when a person wants to manage flags from an IDE or chat. Use the REST API for fixed CI steps.
Flagsmith MCP server setup
Flagsmith SaaS users connect to https://mcp.flagsmith.com and need nothing installed. OAuth opens a browser on first connection; for CI, send Authorization: Api-Key <your-api-key> instead.
The Api-Key prefix is required in that header. The docs warn that the raw key on its own is rejected.
Claude Code
Add the hosted server, then run /mcp inside Claude Code to finish the OAuth login. For a headless agent, pass the API key header on the same command.
claude mcp add --transport http flagsmith https://mcp.flagsmith.com
# non-interactive
claude mcp add --transport http flagsmith https://mcp.flagsmith.com \
--header "Authorization: Api-Key <your-api-key>"Cursor
In ~/.cursor/mcp.json globally, or .cursor/mcp.json per project. Add a headers block with the API key to skip OAuth.
{"mcpServers":{"flagsmith":{"url":"https://mcp.flagsmith.com"}}}Codex CLI
In ~/.codex/config.toml. Codex reads TOML, so the JSON blocks above will not transfer.
[mcp_servers.flagsmith] url = "https://mcp.flagsmith.com"
Every other client
Each block below is the configuration for one client, with the file path and the key that client expects.
Claude Desktop
Open Settings, Connectors, Add custom connector. Name it Flagsmith, give it https://mcp.flagsmith.com, then complete the OAuth login.
For stdio instead, edit claude_desktop_config.json and quit and restart fully for changes to load.
{"mcpServers":{"flagsmith":{"command":"uvx",
"args":["--from","git+https://github.com/Flagsmith/flagsmith.git@main#subdirectory=mcp","flagsmith-mcp"],
"env":{"TRANSPORT":"stdio","FLAGSMITH_API_TOKEN":"<your-api-key>"}}}}Gemini CLI
~/.gemini/settings.json. Gemini names the remote URL field httpUrl. Add a headers entry with the API key to skip OAuth.
{"mcpServers":{"flagsmith":{"httpUrl":"https://mcp.flagsmith.com"}}}VS Code Copilot
.vscode/mcp.json per workspace, or your user mcp.json. The entry needs "type": "http".
{"servers":{"flagsmith":{"type":"http","url":"https://mcp.flagsmith.com"}}}`.vscode/mcp.json` uses the key `servers`. VS Code's portable files, .mcp.json at the project root and ~/.copilot/mcp-config.json, use mcpServers. VS Code recommends them for new servers.
Windsurf
~/.codeium/windsurf/mcp_config.json. Windsurf names the remote URL field serverUrl, not url.
{"mcpServers":{"flagsmith":{"serverUrl":"https://mcp.flagsmith.com"}}}Zed
~/.config/zed/settings.json, pointing at the hosted URL or launching the uvx command shown under Claude Desktop.
The key is `context_servers`. Zed does not call them MCP servers in config, so searching its settings for mcp finds nothing.
Other clients
Any client that supports Streamable HTTP can use https://mcp.flagsmith.com with OAuth or the Authorization: Api-Key header. Clients that only run stdio servers can launch the uvx command with TRANSPORT=stdio and FLAGSMITH_API_TOKEN set.
Self-hosted Flagsmith
Run the server as a container beside your API. Set MCP_SERVER_URL to the public HTTPS address so the OAuth metadata matches what clients reach, and terminate TLS at a reverse proxy.
docker run \ -e FLAGSMITH_API_URL=https://flagsmith.example.com \ -e MCP_SERVER_URL=https://mcp.flagsmith.example.com \ -p 8000:8000 \ flagsmith/flagsmith-mcp:latest
Pinning the stdio build
Replace @main with the release tag that matches your Flagsmith version, so a client restart does not pull unreleased changes.
FLAGSMITH_API_URL=https://flagsmith.example.com \ TRANSPORT=stdio \ FLAGSMITH_API_TOKEN=<your-api-key> \ uvx --from "git+https://github.com/Flagsmith/flagsmith.git@v2.279.0#subdirectory=mcp" flagsmith-mcp
Read-only access, permissions and security
23 tools write
They create and update flags, feature states, segments, multivariate options, experiments and projects, and one sends organisation invites.
publish_environment_feature_versionmakes a change liveIn environments with v2 versioning, creating a version is reversible; publishing it is the step that affects users.
An API key carries its own scope
With key-based auth the server acts with whatever the Organisation API key can do, so issue a dedicated key for agents.
OAuth asks for one scope
The endpoint's metadata advertises a single
mcpscope, so access follows the signed-in user's Flagsmith permissions.
Troubleshooting
- 401 Unauthorized with an API key
- The header value needs the
Api-Keyprefix, as inAuthorization: Api-Key ser.abc123. A bare key is rejected. - Change request or release pipeline tools are missing
- Those are enterprise tools. They appear only on paid SaaS plans and self-hosted Enterprise deployments.
- The old Gram URL stopped working
https://app.getgram.ai/mcp/flagsmith-mcpwas shut down on 30 June 2026. Point the client athttps://mcp.flagsmith.comand replace anyMcp-Flagsmith-Token-Authheader withAuthorization: Api-Key.- OAuth fails on a self-hosted server
- Set
MCP_SERVER_URLto the publichttps://address. The server advertises that value in its OAuth metadata, and a mismatch breaks the login.
Flagsmith MCP server: Reference
| Item | Value |
|---|---|
| Endpoint | https://mcp.flagsmith.com (Streamable HTTP) |
| Source | mcp/ in Flagsmith/flagsmith, BSD-3-Clause, added 2 June 2026 |
| Distribution | Hosted SaaS · Docker flagsmith/flagsmith-mcp · uvx from Git |
| Auth | OAuth, or Authorization: Api-Key <key> |
| Tools | 47 core, 7 enterprise, per the docs |
| Writing tools | 23 of 54 |
| Docs page | Added 3 December 2025 |
What engineers report
The server is young and public discussion is thin. These counts come from Flagsmith's own repository, docs and Docker Hub.
| What was checked | What it shows |
|---|---|
| Documented tools | 47 core, 7 enterprise |
Docker Hub pulls of flagsmith/flagsmith-mcp | 6,156 as of 3 October 2026 |
| Latest image tag | 2.279.0, 1 October 2026 |
Commits touching mcp/ | 32, from 2 June to 1 October 2026 |
| Main repository stars | 6,584 |
Repository facts from the GitHub API and image facts from Docker Hub, both retrieved 3 October 2026. Tool counts come from the tool tables on Flagsmith's MCP documentation page on the same date. The docs label the server an early release.
Should you connect an agent to Flagsmith?
Yes. Best for developers creating and toggling flags from an IDE, and release managers reviewing change requests on enterprise plans.
- Strongest fit
- Yes, if your team manages flags in Flagsmith and wants an agent to read and change them with a person approving writes.
- Main advantage
- It is hosted with OAuth, so most clients connect with one URL and no key to store.
- Main weakness
- Change requests and release pipelines sit behind enterprise plans, and the docs still call it an early release.
- Operational risk
- 23 writing tools, including one that publishes a feature version to users.
From Oodle
One platform for agent traces and infrastructure
Agent traces usually sit in a different product from the rest of your telemetry, so when a slow database makes an agent slow the symptom is in one tool and the cause is in another. Oodle keeps both in one query surface.
See agent observabilityFrequently asked questions
Does Flagsmith have an official MCP server?
Yes. Flagsmith hosts it at https://mcp.flagsmith.com and documents setup for Claude Code, Cursor, Codex, Claude Desktop, Windsurf, Gemini CLI and VS Code.
How many tools does it have?
54 per the docs as of 3 October 2026: 47 core tools on every deployment and 7 enterprise tools on paid SaaS or self-hosted Enterprise.
Can I use it with self-hosted Flagsmith?
Yes. Run the flagsmith/flagsmith-mcp container next to your API, or launch it over stdio with uvx and FLAGSMITH_API_URL pointing at your instance.
What is the Flagsmith/flagsmith-mcp repository?
A Speakeasy-generated build created and last pushed on 13 March 2026. The documented server lives in the mcp folder of Flagsmith/flagsmith instead.
What happened to the Gram-hosted server?
It was deprecated and shut down on 30 June 2026. Tool names are unchanged at https://mcp.flagsmith.com, so only the URL and auth header need updating.