NewAgent Observability is live.
Back to directory
Katalon logo

Katalon MCP server: 40 tools, 18 skills on top

What the forty tools cover, why the vendor ships a written list of things the server cannot do, and which tool its own documentation calls unreliable.

Connector
Official, hosted, in the MCP registry
Coverage
Requirements, test cases, suites, runs, results, defects
Tools
Forty, stage-tagged by the vendor
Biggest risk for an agent
Fifteen of them create, update, delete, link, schedule or run

Last verified 25 August 2026 · from The MCP registry, katalon-labs/true-skills and the live endpoint

This page is one of 90 in a directory of monitoring and developer tools. Each page checks what an AI coding agent can get out of the tool through its MCP server, the connector that lets the agent query the tool directly.

Summary

Katalon's hosted MCP server at https://platform.katalon.io/mcp returned HTTP 401 to an unauthenticated check on 25 August 2026. That confirms a live endpoint behind sign-in. Authentication is browser OAuth, and no token is pasted anywhere.

The tool index in Katalon's own repository lists 40 tools, each tagged with the lifecycle stage it belongs to. Fifteen of them create, update, delete, link, schedule or run something.

The same repository publishes a section headed Not available via MCP, naming eleven things the server cannot do. Almost no vendor in this directory writes that list down.

On top of the server sit 18 skills, MIT-licensed and agent-neutral, installed with npx skills add katalon-labs/true-skills. The repository had 6 stars on 25 August 2026. This is a young project.

What is the Katalon MCP server?

Katalon is a test management platform: requirements come in from Jira or Azure, test cases are written against them, suites run, and results come back with defects attached.

The MCP server exposes that platform to an agent, so a model can read a requirement, design cases against it, run a suite and report whether the release is safe to ship.

The skills are the unusual part. They are markdown instructions, not code, and they encode the order the tools should be called in. The repository states that every skill names which Katalon MCP tools it uses and where the platform stops.

Testing is its whole subject, and it reaches nothing outside it.

Part of the workWhat Katalon has hereCan an agent reach it
Code, tests & reviewRequirements, cases, suites, coverage, stability and defectsYes. Deep. Coverage against requirements, flakiness signals and a review verdict are all reachable
CI & releaseScheduled runs and release readinessPartial. Runs can be scheduled and results read, but authoring release gates is on the published exclusion list
Production observabilityNoneNo metrics, logs or traces from running services
Agent observability & evalsNoneNo traces or evaluations of model behavior
AI cost managementNoneNo spend data of any kind

For an agent, Katalon answers whether the tests cover the requirement and whether the suite is stable enough to trust. It says nothing about the code under test, or about anything after release.

What can an AI agent do with Katalon?

TaskToolsWorksWatch out for
Read a requirementfind_requirements read_requirementYesRequirements sync in from Jira or Azure; creating one is on the boundary list
Design cases against a requirementcreate_test_case link_requirements_to_test_caseYesBoth write, so ask before calling either
Run a suitebuild_run_configuration schedule_test_runPartialScheduling starts billable automation; rerunning or terminating a run is on the boundary list
Read coveragefind_test_cases_by_requirement fetch_test_stability_dataYesCoverage is read against the requirements that have synced from the ALM
File a defectcreate_defectYesIt requires a failed result ID, and the defect lands in the connected ALM

Fifteen of the 40 tools write, and the vendor's own boundary list decides several rows above. Read that list before promising a task an agent cannot finish.

40 published, 25 that read and 15 that create, change, link, schedule or run.

Discovery3
list_projectslist_repositoriesfind_iterations
Requirements3
find_requirementsread_requirementfetch_requirement_data
Test cases2
read_test_casefind_test_cases
Test case writes5
create_test_caseupdate_test_caseduplicate_test_casedelete_test_casemove_test_case
Folders and suites3
find_test_foldersfind_test_suitesread_test_suite
Folder and suite writes2
manage_test_foldermanage_test_suite
Requirement links1
find_test_cases_by_requirement
Requirement link writes2
link_requirements_to_test_caseunlink_requirements_from_test_case
Manual execution2
read_autsread_manual_ai_session
Manual execution writes2
create_manual_test_runcreate_manual_ai_session
Automated execution2
find_execution_profileslist_test_cloud_environments
Automated execution writes3
build_run_configurationbuild_scheduleschedule_test_run
Results4
read_executionread_execution_test_resultsread_test_resultfind_test_results
Quality data4
fetch_defect_datafetch_test_case_datafetch_test_stability_datafetch_test_configuration_data
ALM defects1
find_alm_integration_projects
ALM defect writes1
create_defect

Counted from mcp-tool-index.md in katalon-labs/true-skills on 25 August 2026, which tags every tool with the lifecycle stage it belongs to. The same index annotates delete_test_case as unreliable and advises updating or moving a case instead. read_auts reads the applications under test that a project has registered.

What connecting costs before the first question

A context window is the amount of text a model can hold at once. Forty tools across the testing lifecycle cost 2,193 to 2,495 tokens on Claude at the hosted endpoint. Katalon publishes a boundary list, which is unusual and worth reading before connecting.

The lifecycle framing is what drives the number. A server organized by test phase carries a tool for each, and all of them arrive together.

Tool setToolsTokens (GPT-5.6, GPT-5.5)Tokens (GPT-4, GPT-3.5)Tokens (Claude Haiku 4.5 to Opus 5)Share of a 200,000-token window
Every tool documented40642 to 1,008641 to 1,0072,193 to 2,4950.3% to 1.2%

Encodings: GPT-5.6, GPT-5.5 o200k_base; GPT-4, GPT-3.5 cl100k_base; Claude Haiku 4.5 to Opus 5 count_tokens. Counted from the 40 tool entries in the vendor's own documentation. That is the only public inventory.

The server could not be run for a live tools/list. So no input schemas are available. These figures cover each tool's name and description only. They are a floor, not the figure.

The Claude columns are measured through the API's count_tokens endpoint, with an empty schema per tool. So they cover the same content as the GPT columns. The range there is two tokenizer generations. Haiku 4.5 and Opus 4.6 sit at the low end. Opus 5 and Sonnet 5 sit at the high end. The gap between them is about a tenth.

Katalon MCP server limits: where answers come back incomplete

Katalon documents its key limitation explicitly, an unusual level of detail among these vendors.

Eleven capabilities are named as unavailable, and one of them is release gates.

Katalon's tool index ends with a section headed Not available via MCP. It names creating requirements, creating a Release, Build or Test Plan entity, authoring release gates, and guaranteeing Run with AI completion. It also names seven more: inspecting the application under test, self-healing, TrueTest regeneration, rerunning or terminating a run, custom fields and tags, Git repository configuration, and project governance.

The list is the vendor's, which makes it the most useful paragraph on this page. It is also a list an agent will not discover from tool descriptions alone.

Guard: Paste the exclusions into the agent's instructions. The disclosure block above names the three that come up most.

The agent says: I removed the duplicate case. The delete tool is documented as unreliable.

delete_test_case carries the annotation unreliable; prefer update/move in Katalon's own tool index.

Guard: Keep the tool away from the agent. Moving a case to an archive folder is the documented alternative.

The agent says: Defect filed. In Jira, not only in Katalon.

create_defect creates an ALM-linked defect and requires a failed result ID. The record lands in whichever ALM tool the workspace integrates with.

Guard: Require approval before create_defect. It writes into a system outside Katalon.

The agent says: Let me search the test cases. Four tools could mean that.

find_test_cases, find_test_cases_by_requirement, fetch_test_case_data and read_test_case all sound like reading a case. The 18 skills exist to impose an order on choices like this.

Guard: Install the skills, or name the tool in the prompt.

How to configure Katalon MCP for agents

  1. 1

    One endpoint, one picker

    https://platform.katalon.io/mcp serves every workspace, and sign-in presents a workspace chooser. A dedicated Katalon domain substitutes your own subdomain in place of platform.

  2. 2

    Decide about the fifteen write tools before connecting

    They create and delete cases, move them between folders, link requirements, file defects and schedule runs.

  3. 3

    Read the boundary list

    Eleven capabilities are named as unavailable, including creating requirements, authoring release gates and rerunning or terminating a run.

  4. 4

    Install the skills or accept guesswork

    Forty tool descriptions with overlapping names are a lot to choose between. The skills exist to impose an order on them.

  5. 5

    Never call delete_test_case from an agent

    Katalon's own index calls it unreliable and recommends update or move instead.

Paste this into your agent’s instructions

The server covers the lifecycle unevenly, and the gaps are documented rather than obvious. The block makes the agent name the boundary instead of inventing a way across it.

Terminal
When you answer using Katalon MCP tools, state:
- The project and workspace the call acted on.
- Whether the call read or changed something. Fifteen of the
  40 tools write. Ask before any of them.
- When a request falls on the published boundary list, say
  so. Creating requirements, authoring release gates and
  rerunning or terminating a run are not available.
Never state that data does not exist. State which tool you
called and what it returned.
Write your answer in ASD-STE100 Simplified Technical
English. Use short sentences with one idea in each.

Do you need the MCP server at all?

Not for anything unattended. The Katalon TestOps UI remains the direct route, and a human reading the coverage report is still faster than describing it.

Allure TestOps and ReportPortal cover the same reporting ground with their own servers, and both are cheaper to connect for teams that only need results.

For the test code rather than the test management, Cypress and Playwright answer questions about the run itself. Katalon converts cases into Playwright specs rather than replacing it.

Requirements stay in Jira or Azure either way. Katalon syncs them and reads them, and creating one is on the published exclusion list.

With MCP, an agent can go from a requirement key to a ship decision in one conversation. The 18 skills are written to enforce that sequence.

Connect it for the lifecycle. Read the boundary list before promising anything to a release manager.

Katalon MCP server setup

Nothing is installed for the server itself. The endpoint is https://platform.katalon.io/mcp, and one endpoint serves every workspace.

No configuration block below holds a credential. The first connection opens a browser OAuth flow and then a workspace picker. Katalon's repository states the rule plainly: never paste passwords, API tokens, cookies, JWTs, MFA codes or OAuth callback URLs into chat.

The 18 skills are separate and optional. npx skills add katalon-labs/true-skills installs them into whichever agent directory it detects.

Claude Code

Katalon publishes a plugin marketplace, which ships the skills and an .mcp.json together. If the bundled server does not load, add it with claude mcp add --transport http.

No credential appears anywhere. The first connection opens browser OAuth, then the workspace picker.

Terminal
claude plugin marketplace add katalon-labs/true-skills
claude plugin install \
  katalon-true-platform@katalon-true-platform-marketplace

Cursor

In ~/.cursor/mcp.json for all projects, or .cursor/mcp.json in one. Authorization is the browser OAuth flow on first connect, followed by the workspace picker.

Terminal
{"mcpServers":{"katalon-prod-mcp":{"type":"http",
  "url":"https://platform.katalon.io/mcp"}}}

Codex CLI

Codex reads TOML, so the JSON blocks will not transfer. Katalon also ships a Codex plugin marketplace entry, and notes that Codex needs the mcp-remote wrapper for the endpoint.

No credential appears in the block. The wrapper opens the browser OAuth page on first connect.

Terminal
[mcp_servers.katalon-prod-mcp]
command = "npx"
args = ["-y", "mcp-remote",
  "https://platform.katalon.io/mcp",
  "--transport", "http-first"]

The skills

Optional, MIT-licensed, and separate from the server. The CLI detects the agent already installed and writes the files into its native directory.

The CLI installs skill files only, so it stores no credentials. The server is still reached through browser OAuth.

Terminal
npx skills add katalon-labs/true-skills
npx skills add katalon-labs/true-skills -g   # every agent
npx skills update

Every other client

Each block below is the configuration for one client, with the file path and the key that client expects.

Claude Desktop

macOS ~/Library/Application Support/Claude/claude_desktop_config.json. Windows %APPDATA%\Claude\claude_desktop_config.json. There is no CLI. Edit through Settings, Developer, Edit Config.

Quit and restart fully for changes to load. No credential appears in the block; the browser handles OAuth and the workspace picker.

Terminal
{"mcpServers":{"katalon-prod-mcp":{"type":"http",
  "url":"https://platform.katalon.io/mcp"}}}
Gemini CLI

~/.gemini/settings.json globally, or .gemini/settings.json per project. Key mcpServers. CLI: gemini mcp add. Authorization is the browser OAuth flow.

Terminal
{"mcpServers":{"katalon-prod-mcp":{
  "httpUrl":"https://platform.katalon.io/mcp"}}}
VS Code Copilot

Katalon ships .github/mcp.json and .vscode/mcp.json in the repository, alongside skills in .github/skills/ that load automatically in agent mode. Browser OAuth on first connect.

Terminal
{"servers":{"katalon-prod-mcp":{"type":"http",
  "url":"https://platform.katalon.io/mcp"}}}

The key is `servers`, not `mcpServers`. VS Code is the only client that uses that name, and copying a config from anywhere else fails silently.

Windsurf

~/.codeium/windsurf/mcp_config.json, which is the path Windsurf documents. Key mcpServers. No credential in the file; OAuth opens in the browser.

Terminal
{"mcpServers":{"katalon-prod-mcp":{"serverUrl":
  "https://platform.katalon.io/mcp"}}}
Zed

~/.config/zed/settings.json, under context_servers. Browser OAuth on first connect, then the workspace picker.

Terminal
{"context_servers":{"katalon-prod-mcp":{
  "url":"https://platform.katalon.io/mcp"}}}
Google Antigravity

~/.gemini/config/mcp_config.json globally, or .agents/mcp_config.json per project. Key mcpServers. There is no CLI. Use the /mcp overlay. Streamable HTTP is supported directly, and authorization is in the browser.

Terminal
{"mcpServers":{"katalon-prod-mcp":{"type":"http",
  "url":"https://platform.katalon.io/mcp"}}}
Amp (Sourcegraph)

~/.config/amp/settings.json or .amp/settings.json. The amp mcp CLI covers approve, doctor and oauth. No credential is stored; the browser handles OAuth.

Terminal
{"amp.mcpServers":{"katalon-prod-mcp":{
  "url":"https://platform.katalon.io/mcp"}}}
Cline

~/.cline/mcp.json per the docs. The source also reads ~/.cline/data/settings/cline_mcp_settings.json. Key mcpServers. Streamable HTTP is supported, and authorization is in the browser.

Terminal
{"mcpServers":{"katalon-prod-mcp":{
  "type":"streamableHttp",
  "url":"https://platform.katalon.io/mcp"}}}
Goose (Block)

~/.config/goose/config.yaml. The streamable_http type reaches the endpoint directly, with browser OAuth on first connect.

Terminal
extensions:
  katalon:
    type: streamable_http
    uri: https://platform.katalon.io/mcp
Kiro (AWS)

.kiro/settings/mcp.json per workspace, or ~/.kiro/settings/mcp.json globally. Katalon names Kiro as one of the agents needing the mcp-remote wrapper. No credential is stored; OAuth opens in the browser.

Terminal
{"mcpServers":{"katalon-prod-mcp":{"command":"npx",
  "args":["-y","mcp-remote",
    "https://platform.katalon.io/mcp",
    "--transport","http-first"]}}}
Warp

~/.warp/.mcp.json or .warp/.mcp.json. Key mcpServers. Also addable through the /agent-add-mcp skill. Authorization is the browser OAuth flow.

Terminal
{"mcpServers":{"katalon-prod-mcp":{
  "url":"https://platform.katalon.io/mcp"}}}
JetBrains Junie

.junie/mcp/mcp.json per project, or ~/.junie/mcp/mcp.json. Key mcpServers. Use /mcp in the CLI to complete the browser authorization.

Terminal
{"mcpServers":{"katalon-prod-mcp":{"type":"http",
  "url":"https://platform.katalon.io/mcp"}}}
Roo Code

.roo/mcp.json per project. The global file is mcp_settings.json, opened from the Roo Code MCP settings view with Edit Global MCP. Key mcpServers, with OAuth in the browser.

Terminal
{"mcpServers":{"katalon-prod-mcp":{
  "type":"streamable-http",
  "url":"https://platform.katalon.io/mcp"}}}
Continue

.continue/mcpServers/*.yaml, one file per server. Katalon names Continue as one of the agents needing the mcp-remote wrapper. No credentials appear in the file.

Terminal
name: Katalon
version: 0.0.1
schema: v1
mcpServers:
  - name: katalon-prod-mcp
    command: npx
    args: ["-y", "mcp-remote",
      "https://platform.katalon.io/mcp",
      "--transport", "http-first"]
Trae

.trae/mcp.json per project, or paste into the UI under Raw Config (JSON). Key mcpServers, standard shape, browser authorization on connect.

Terminal
{"mcpServers":{"katalon-prod-mcp":{
  "url":"https://platform.katalon.io/mcp"}}}
Devin

Devin has no config file to edit. Servers are added through a web form in the settings UI, and Devin's documentation states you do not need to write or paste JSON. The block below is the shape those fields describe, shown for reference. Either route completes OAuth in the browser.

Terminal
{"mcpServers":{"katalon-prod-mcp":{"type":"http",
  "url":"https://platform.katalon.io/mcp"}}}
Any Agent Plugins client

The repository conforms to the Agent Plugins specification 1.0.0. plugin.json, skills/ and mcp.json at the repository root form a portable plugin. That mcp.json already declares the endpoint as a streamable-http server, so nothing needs filling in. Authorization is the same browser OAuth flow.

Terminal
npx skills add katalon-labs/true-skills

Read-only access, permissions and security

  • Browser OAuth only, and the vendor says so in bold

    The repository instructs readers never to paste passwords, API tokens, cookies, JWTs, MFA codes or OAuth callback URLs into chat, and states that the skills enforce this.

  • Fifteen of the forty tools change things

    They create and delete test cases, move them between folders, link and unlink requirements, schedule runs and file defects in a connected ALM.

  • create_defect writes into Jira or Azure

    Those are the application lifecycle management (ALM) tools Katalon integrates with, so the defect lands outside Katalon.

  • schedule_test_run starts real work

    Scheduled automation consumes TestCloud environments and execution profiles, which cost money and hold state.

  • The workspace picker is the boundary

    One endpoint serves every workspace, so the choice made at sign-in decides what the whole session can reach.

Troubleshooting

The tools do not appear after connecting
Reload the agent. Katalon's install steps list that as the third step after completing OAuth and picking a workspace.
The endpoint in an older article is different
There are two registry entries. Version 0.0.1, published 5 December 2025, pointed at product-katalon.katalon.io/mcp. Version 1.0.0, published 10 July 2026 and marked latest, points at platform.katalon.io/mcp.
The agent cannot connect from Kiro, Continue or Codex
Those three have no native remote-MCP support. Katalon documents the mcp-remote wrapper against the same endpoint with --transport http-first.
`delete_test_case` does not delete
Known. Katalon's own tool index annotates it as unreliable and recommends update_test_case or move_test_case instead.
The agent cannot create a requirement
It is on the published boundary list. Requirements come from Jira or Azure and are synced in, so find_requirements and read_requirement are reads only.
A Run with AI session never finishes
Guaranteeing completion is on the boundary list. read_manual_ai_session reports the current state of each item.

Katalon MCP server: Reference

ItemValue
Endpointhttps://platform.katalon.io/mcp
Live checkHTTP 401 to an unauthenticated call, 25 August 2026
Registry nameio.github.katalon-studio/testops-mcp
Registry version1.0.0, published 10 July 2026, marked latest
Earlier entry0.0.1, 5 December 2025, at product-katalon.katalon.io/mcp
TransportStreamable HTTP. mcp-remote for Kiro, Continue and Codex
AuthBrowser OAuth, then a workspace picker. No tokens
Tools40, stage-tagged in the vendor's index
Write tools15 that create, update, delete, link, schedule or run
Published exclusions11 capabilities named as unavailable
Skills repositorykatalon-labs/true-skills · MIT · 6 stars · pushed 19 August 2026
Skills18, across seven lifecycle stages that Katalon names in its repository
Inventory sourcemcp-tool-index.md in that repository, read 25 August 2026

What engineers report

Public discussion of this connector is thin. What exists instead is unusually candid vendor documentation, so the counts below come from it.

What was checkedWhat it shows
Tools published40
Write-capable tools15
Capabilities named as unavailable11
Skills18
Lifecycle stages7, plus setup
Skills repository stars6
Tools annotated as unreliable1, delete_test_case

“Auth is browser OAuth only. Never paste passwords, API tokens, cookies, JWTs, MFA codes, or OAuth callback URLs into chat, and never commit them. The skills enforce this.”

“Delete a case (unreliable; prefer update/move).”

“Every skill states which Katalon MCP tools it uses and where the platform stops.”

The MCP registry was queried for katalon on 25 August 2026 and returned two entries for io.github.katalon-studio/testops-mcp. Tool names, counts and annotations come from mcp-tool-index.md in the repository that the latest entry names. The endpoint was probed on the same date.

Should you connect an agent to Katalon?

Yes. Best for coverage and readiness questions, with the write tools gated behind approval.

Strongest fit
Katalon TestOps customers who want an agent moving from a requirement key to a ship decision without opening the UI.
Main advantage
The vendor publishes both the tool list and the exclusion list, which removes most of the guesswork an evaluation usually pays for.
Main weakness
Fifteen write tools with no documented read-only mode, and a skills project at 6 stars.
Operational risk
create_defect writes into the connected ALM, and schedule_test_run starts billable automation.

From Oodle

One platform for agent traces and infrastructure

Agent traces usually sit in a different product from the rest of your telemetry, so when a slow database makes an agent slow the symptom is in one tool and the cause is in another. Oodle keeps both in one query surface, from $10 per million spans.

See agent observability

Frequently asked questions

Does Katalon have an official MCP server?

Yes. It is registered as io.github.katalon-studio/testops-mcp, version 1.0.0 published 10 July 2026, and hosted at https://platform.katalon.io/mcp.

How many tools does it expose?

Forty, per the tool index in katalon-labs/true-skills on 25 August 2026. Fifteen of them create, update, delete, link, schedule or run something.

What can it not do?

Katalon publishes the list. It names eleven items including creating requirements, authoring release gates, rerunning or terminating a run, and configuring a Git repository.

Do I need an API token?

No. Authentication is browser OAuth followed by a workspace picker, and the repository instructs readers never to paste tokens into chat.

What are the 18 skills?

MIT-licensed markdown instructions that encode the order to call the tools in, across seven lifecycle stages. They are optional and install with npx skills add katalon-labs/true-skills.

Why does my client fail to connect?

Kiro, Continue and Codex have no native remote-MCP support. Katalon documents the mcp-remote wrapper against the same endpoint with --transport http-first.

Changelog

  • 19 August 2026. Last push to katalon-labs/true-skills, the repository the registry entry names.
  • 10 July 2026. Registry entry version 1.0.0 published, at platform.katalon.io/mcp, and marked the latest.
  • 5 December 2025. Registry entry version 0.0.1 published, at the earlier host product-katalon.katalon.io/mcp.

Sources

Every number on this page traces to one of these

  1. MCP registry · io.github.katalon-studio/testops-mcp, both entries, read 25 August 2026
  2. katalon-labs/true-skills README and mcp-tool-index.md · same date
  3. GitHub API · repository facts for that project, same date
  4. Live check · POST https://platform.katalon.io/mcp returned HTTP 401, same date

Katalon’s own MCP documentation

Also test reporting:

Code quality beside the tests: