# Denkopsai MCP server

Agent View of the PolicyLayer registry record for Denkopsai: identity, probed posture, risk grade, and all 28 tools classified. HTML page: https://policylayer.com/tools/denkopsai-mcp

## Facts

- Server id: `@denkopsai/mcp`
- Install: `npx -y @denkopsai/mcp`
- Homepage: https://www.npmjs.com/package/@denkopsai/mcp
- Registry record: grade F, identity unverified
- Lifecycle: active
- Rate-limited: no
- Tools: 28 (24 with introspected schema)
- Tool categories present: Destructive, Execute, Read, Write
- Context-window cost: 2466 tokens per request — https://policylayer.com/token-cost/denkopsai-mcp
- Tags: denkopsai mcp, admin, automation
- Record last modified: 2026-07-18T17:21:51.445Z

## Tools (28)

| Tool | Category | Risk | Record |
| --- | --- | --- | --- |
| `delete_project` | Destructive | Critical | https://policylayer.com/tools/denkopsai-mcp/delete-project.md |
| `remove_domain` | Destructive | Critical | https://policylayer.com/tools/denkopsai-mcp/remove-domain.md |
| `revoke_connection` | Destructive | Critical | https://policylayer.com/tools/denkopsai-mcp/revoke-connection.md |
| `unset_env` | Destructive | Critical | https://policylayer.com/tools/denkopsai-mcp/unset-env.md |
| `deploy` | Execute | High | https://policylayer.com/tools/denkopsai-mcp/deploy.md |
| `login` | Execute | High | https://policylayer.com/tools/denkopsai-mcp/login.md |
| `redeploy` | Execute | High | https://policylayer.com/tools/denkopsai-mcp/redeploy.md |
| `start_project` | Execute | High | https://policylayer.com/tools/denkopsai-mcp/start-project.md |
| `stop_project` | Execute | High | https://policylayer.com/tools/denkopsai-mcp/stop-project.md |
| `get_container_logs` | Read | Low | https://policylayer.com/tools/denkopsai-mcp/get-container-logs.md |
| `get_denkops_guide` | Read | Low | https://policylayer.com/tools/denkopsai-mcp/get-denkops-guide.md |
| `get_egress_policy` | Read | Low | https://policylayer.com/tools/denkopsai-mcp/get-egress-policy.md |
| `get_metrics` | Read | Low | https://policylayer.com/tools/denkopsai-mcp/get-metrics.md |
| `get_public_paths` | Read | Low | https://policylayer.com/tools/denkopsai-mcp/get-public-paths.md |
| `get_status` | Read | Low | https://policylayer.com/tools/denkopsai-mcp/get-status.md |
| `get_trace` | Read | Low | https://policylayer.com/tools/denkopsai-mcp/get-trace.md |
| `list_connections` | Read | Low | https://policylayer.com/tools/denkopsai-mcp/list-connections.md |
| `list_domains` | Read | Low | https://policylayer.com/tools/denkopsai-mcp/list-domains.md |
| `list_env` | Read | Low | https://policylayer.com/tools/denkopsai-mcp/list-env.md |
| `list_projects` | Read | Low | https://policylayer.com/tools/denkopsai-mcp/list-projects.md |
| `list_traces` | Read | Low | https://policylayer.com/tools/denkopsai-mcp/list-traces.md |
| `rollback` | Read | Low | https://policylayer.com/tools/denkopsai-mcp/rollback.md |
| `verify_domain` | Read | Low | https://policylayer.com/tools/denkopsai-mcp/verify-domain.md |
| `add_domain` | Write | Medium | https://policylayer.com/tools/denkopsai-mcp/add-domain.md |
| `create_connection` | Write | Medium | https://policylayer.com/tools/denkopsai-mcp/create-connection.md |
| `set_egress_policy` | Write | Medium | https://policylayer.com/tools/denkopsai-mcp/set-egress-policy.md |
| `set_env` | Write | Medium | https://policylayer.com/tools/denkopsai-mcp/set-env.md |
| `set_public_paths` | Write | Medium | https://policylayer.com/tools/denkopsai-mcp/set-public-paths.md |

## Tool descriptions

- `delete_project` — PERMANENTLY delete a DenkOps deployment and ALL its data (containers, images, volume, and records). Cannot be undone. Requires confirm set to the project's exact slug; call with an empty confirm first to see the confirmation instruction.
- `remove_domain` — Detach a custom domain from a DenkOps project.
- `revoke_connection` — Immediately revoke a DenkOps connection token by its connection_id.
- `unset_env` — Delete a DenkOps project's environment variable. Run redeploy to apply.
- `deploy` — Pack the current project directory and deploy it to DenkOps, returning the live URL. No setup needed: if there is no denkops.json, one is inferred from the directory (name, slug, runtime) and written, creating a new project; if it exists…
- `login` — Log in to DenkOps by approving a pairing in your browser (opens app.denkops.com). Run this if a deploy says you're not logged in.
- `redeploy` — Re-run the current version of a DenkOps project (applies staged env changes / restarts the app). No code re-upload; reuses the last build.
- `start_project` — Start a stopped DenkOps deployment again (reactivates its active version).
- `stop_project` — Stop a DenkOps deployment (containers stop and it goes offline). Reversible with start_project.
- `get_container_logs` — Read recent container logs for a DenkOps project (for debugging a failing deploy). Optional since (e.g. 15m, 2h, 3d, or an ISO timestamp) and level (a token matched in the log line, e.g. error) filter the persisted log store.
- `get_denkops_guide` — Return the DenkOps paved-road conventions for structuring and deploying a bun-Hono or python-FastAPI API. Call this before scaffolding or deploying a DenkOps project.
- `get_egress_policy` — Read a project's egress allow-list policy (enabled, allowlist, recently-blocked hosts).
- `get_metrics` — Get a DenkOps project's request metrics (latency percentiles, error rate), latest resource sample, and rejected-request count over the last 24h.
- `get_public_paths` — List a DenkOps project's public (unauthenticated) paths, plus the routes DenkOps has observed the app serve.
- `get_status` — Get a DenkOps project's status by project_id.
- `get_trace` — Get the spans of a single DenkOps request trace by project_id + trace_id.
- `list_connections` — List DenkOps connection tokens (scoped, revocable agent/CLI credentials) for this workspace: label, agent type, scopes, and status.
- `list_domains` — List a DenkOps project's custom domains and whether each is verified.
- `list_env` — List a DenkOps project's environment variable KEYS (values are write-only and never shown). Includes whether changes are pending a redeploy.
- `list_projects` — List your DenkOps projects and their status.
- `list_traces` — List recent request traces for a DenkOps project (name, status, duration, span count).
- `rollback` — Roll a DenkOps project back to a previous healthy version (omit version for the previous one).
- `verify_domain` — Verify a DenkOps custom domain's DNS TXT record. Fails if the TXT record isn't visible yet.
- `add_domain` — Attach a custom domain to a DenkOps project. Returns the _denkops-verify TXT record token to set at your DNS provider, then run verify_domain.
- `create_connection` — Mint a new scoped, revocable DenkOps connection token for an agent/CLI to authenticate with. The token is returned exactly once in the response — store it immediately, it cannot be retrieved again.
- `set_egress_policy` — Set a project's egress allow-list. enabled=true is zero-trust default-deny; only listed hosts (exact or *.domain) may egress. Allow-list edits apply live; enabling/disabling applies on the next deploy.
- `set_env` — Set/overwrite a DenkOps project's environment variable. Values are write-only (cannot be read back). The change is staged — run the redeploy tool to apply it. Reserved keys (DENKOPS_*, etc.) are rejected.
- `set_public_paths` — Replace a DenkOps project's list of public (unauthenticated) paths. The change is staged — run the redeploy tool to apply it.

## Related servers

- UnClick (1662 tools) — https://policylayer.com/tools/io-github-malamutemayhem-unclick-mcp-server.md
- Delx Mcp A2a (1076 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-mcp-a2a.md
- Delx Protocol — Agent Recovery & Continuity (1076 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-protocol.md
- Nodebench (824 tools) — https://policylayer.com/tools/io-github-homenshum-nodebench.md
- MCP Framework Personal (790 tools) — https://policylayer.com/tools/inggerman-mcps.md
- Delx MCP Server (740 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-mcp-server.md
- Binance MCP Server (734 tools) — https://policylayer.com/tools/nirholas-binance-mcp.md
- Eda Agent (726 tools) — https://policylayer.com/tools/eda-agent.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=denkopsai-mcp · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/denkopsai-mcp