@heroku/mcp-server

MCPattested

v1.2.2HerokuApache-2.0Updated 5mo agonpm GitHub

Heroku Platform MCP Server

> The Heroku Platform MCP Server works on Common Runtime, Cedar Private and Shield Spaces, and Fir Private Spaces. - Heroku CLI must be installed globally on your system, version 10.8.1 or higher. - Install or upgrade the Heroku CLI ![Deploy](https://www.heroku.com/deploy?template=https://git

Works in

ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Attested build

A verified provenance attestation binds this artifact to the listed repository. Nobody has claimed the listing yet — this proves where the code was built, not who stands behind it.

6kDownloads/wk

81GitHub stars

29Forks

5mo agoLast update

Package

AuthorHeroku

LicenseApache-2.0

Version1.2.2

Sourcenpm

npm@heroku/mcp-server

GitHubheroku/heroku-mcp-server

SBOMCycloneDX 1.6 ↓

Trust Status

B

65/100Good

✓Listed in Forge index+10/10

✓Identity verified · attested build+20/20

—Ed25519 publish signature+0/5

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

✓npm Trusted Publishing (Sigstore)+5/5

—npm maintainer match+0/5

→ Publisher: add the verified GitHub login to the npm package's maintainers (npm owner add <login>)

✓CVE scan · clean+30/30

—Static analysis · clean+0/20

→ Suspicious install scripts or obfuscated code detected

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusIdentity verified

PublisherUnverified

SignatureUnsigned

Domain—

Provenance✓ Sigstore-verified · b672cb0

Dependencies✓ 60 resolved+ · none vulnerable

Tool surface39 tools · 3 privileged

Security scan⚠ Warnings (0)v1.2.6 · 1mo agoHow well does this scan work?

CHANGEmaintainer-addedNew maintainers since v1.2.3: pritamnaik, akitanaka, ytakamura, jkim-sfdc

EvalsNone

IndexedMay 24, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

39 tools · 3 privileged

Statically extracted from the published packagev1.2.6 · 1mo ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

Filter toolsPrivileged only

list_addonsNo description published

This tool published no description. Forge does not invent one.

get_addon_infoNo description published

This tool published no description. Forge does not invent one.

create_addonNo description published

This tool published no description. Forge does not invent one.

list_addon_servicesNo description published

This tool published no description. Forge does not invent one.

list_addon_plansNo description published

This tool published no description. Forge does not invent one.

list_ai_available_modelsNo description published

This tool published no description. Forge does not invent one.

provision_ai_modelNo description published

This tool published no description. Forge does not invent one.

make_ai_inferenceNo description published

This tool published no description. Forge does not invent one.

test_toolNo description published

This tool published no description. Forge does not invent one.

list_appsNo description published

This tool published no description. Forge does not invent one.

get_app_infoNo description published

This tool published no description. Forge does not invent one.

create_appNo description published

This tool published no description. Forge does not invent one.

rename_appprivilegedNo description published

This tool published no description. Forge does not invent one.

pg_psqlprivilegedNo description published

This tool published no description. Forge does not invent one.

pg_infoNo description published

This tool published no description. Forge does not invent one.

pg_psNo description published

This tool published no description. Forge does not invent one.

pg_locksNo description published

This tool published no description. Forge does not invent one.

pg_outliersNo description published

This tool published no description. Forge does not invent one.

pg_credentialsNo description published

This tool published no description. Forge does not invent one.

pg_killprivilegedNo description published

This tool published no description. Forge does not invent one.

pg_maintenanceNo description published

This tool published no description. Forge does not invent one.

pg_backupsNo description published

This tool published no description. Forge does not invent one.

pg_upgradeNo description published

This tool published no description. Forge does not invent one.

deploy_to_herokuNo description published

This tool published no description. Forge does not invent one.

deploy_one_off_dynoNo description published

This tool published no description. Forge does not invent one.

test-appNo description published

This tool published no description. Forge does not invent one.

get_app_logsNo description published

This tool published no description. Forge does not invent one.

maintenance_onNo description published

This tool published no description. Forge does not invent one.

maintenance_offNo description published

This tool published no description. Forge does not invent one.

pipelines_createNo description published

This tool published no description. Forge does not invent one.

pipelines_promoteNo description published

This tool published no description. Forge does not invent one.

pipelines_listNo description published

This tool published no description. Forge does not invent one.

pipelines_infoNo description published

This tool published no description. Forge does not invent one.

pipelinesNo description published

This tool published no description. Forge does not invent one.

ps_listNo description published

This tool published no description. Forge does not invent one.

ps_scaleNo description published

This tool published no description. Forge does not invent one.

ps_restartNo description published

This tool published no description. Forge does not invent one.

list_private_spacesNo description published

This tool published no description. Forge does not invent one.

list_teamsNo description published

This tool published no description. Forge does not invent one.

0 of 39 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

![Install MCP Server](https://cursor.com/install-mcp?name=heroku&config=eyJjb21tYW5kIjoibnB4IC15IEBoZXJva3UvbWNwLXNlcnZlciIsImVudiI6eyJIRVJPS1VfQVBJX0tFWSI6IjxZT1VSX0hFUk9LVV9BVVRIX1RPS0VOPiJ9fQ%3D%3D) > The Heroku Platform MCP Server works on Common Runtime, Cedar Private and Shield Spaces, and Fir Private Spaces. - Heroku CLI must be installed globally on your system, version 10.8.1 or higher. - Install or upgrade the Heroku CLI ![Deploy](https://www.heroku.com/deploy?template=https://git

Keywords

herokumcp

Alternatives

Comparing tool surfaces…

Tools exposed

39 tools · 3 privileged · observed 2026-08-15 by static extraction. A tool surface is what one scan read on one day, not a live capability list.

Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.

No dependency coverage

This package was last scanned before Forge began storing the resolved tree. The next scan will record it.