
Kody
Your agents' cloud for individuals and teams.
Connector by kody-hq · GitHub account verified by the MCP Registry
Install
Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install connector/kody-hq-kody
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Remote endpoint
https://kody.codes/mcpRemote (HTTP)
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: agent-memory, identity-access, workflow-automation
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 5 read · 9 write · 4 delete · 4 not yet classified
- Secrets
- None asked for
- Install scripts
- Nothing to install (hosted)
- Runs as
- Hosted (remote endpoint)
Tools by what they do 22
Read from the source code; the running server may list different tools.
Read 5 · Look things up without changing anything.
communitypackagessearchsecretswebhooks
Write 9 · Create, change, send or run things.
accessaccountappsemailfollowmcpServersmetareporuns
Delete 4 · Delete, drop, revoke or wipe things.
adminapiexecuteintegrations
Not yet classified 4 · We could not tell from the name and description.
codingjobsorgsstorage
Network hosts it talks to 1
kody.codes· found in remote endpoint, install command
Tools (22)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
accessGrant a user or team Use, Contribute, or Manage on a resource in the organization this request is bound to, or pass an explicit permission list instead of a preset. Secrets, integrations, MCP servers, and vault bindings use resource_type credential with the credential_id from secretList, integrationList, mcpServerList, or secretProviderList; the grant follows the credential, not its name. resource_type secret or integration with a name still works: the name resolves to its credential once, when the grant is made. Organization grants use resource_type org and this organization id. You need mana…
accountBuild a signed-in user data export manifest with schema version, section counts, redactions, warnings, and chunking instructions. Secret values are never exported.
adminClear a leftover account-deletion fence (D1 users.deleting_at and the UserMeter tombstone) when cleanup never started or an operator needs to restore the account. Admin-only and destructive.
apiKody APIcan change or delete dataCall one Kody API operation directly: no sandbox, no execute quota. Same operations as the HTTP API at https://api.kody.codes/openapi.json. - `operationId`: an Open API operation id from https://api.kody.codes/openapi.json (for example `packageList`, `secretSet`, `jobRunNow`, or token ops `tokenCreate` / `tokenList` / `tokenGet` / `tokenRotate` / `tokenRevoke`). Many match `search` capability names, but not every search capability is on the Open API — capability detail says when a capability is execute-only (for example `webhookSyntheticDispatch` and admin capabilities). - `params`: the opera…
appsBroadcast a realtime websocket event to connected package app sessions, optionally scoped by facet or topic.
codingDescription is built at runtime.
communityReturn a website adoption URL for a community-forked package. Adoption keeps fork provenance but grants self-authored-like read/use access to your user secrets (mutations still need an allowed_packages grant). This capability never adopts: only the account owner can adopt, signed in on the package settings page, after reviewing the source. Send the approval_url to the user and wait; never treat this call as adoption.
emailGet one stored email attachment by id, returning metadata plus the attachment bytes as base64.
executeExecute codecan change or delete dataDescription is built at runtime.
followFollow a package or plain repo by @handle/name so this org receives follow.published when its live version moves and, when you can read it, follow.pushed when the default branch moves. Public targets are followable by any signed-in caller. Private targets require package:read (a use grant qualifies; execute-only does not) and a missing or unreadable target is reported as not found. Creating a follow that already exists returns it and, if it was paused, resumes it when you can still read the target. Pass events to choose published and/or pushed; omit them to keep the current choice (both for a …
integrationsDelete a saved OAuth integration connection by name. When it is the last connection on its OAuth app, the unused app is removed too.
jobsLoad one existing scheduled job for the signed-in user, including debugging fields such as run counters, last error, recent run history from run records (with run ids for runGet log drill-down), current alarm state, and optionally the published source code. Recurring schedules belong on a package (`kody.jobs`); deferred one-shots use `workflows.create`.
mcpServersAdd a remote MCP server for the signed-in user and connect to it. Servers that require OAuth return an authUrl: a signed-in Kody consent page the user opens and confirms before Kody sends them to the provider; other servers connect immediately. Pass bearerToken for servers that authenticate with a static Authorization header instead of (or in addition to) OAuth. Connected server tools become kody.mcp["server-name"].tool_name(...) capabilities. When OAuth fails with origin or redirect URI errors, the remote authorization server must allow Kody's oauthClientOrigin, oauthCallbackUrl, and oauthCli…
metaRun `execute({ code, params })`: one ephemeral ESM module whose default export receives `params`. Example: `export default async function main(params) { return await kody.emailSend(params) }`. Same user and module graph reuse one isolate for the UTC day when varying args stay in `params`. Use this inside package and execute runtimes when reusable code needs the same module execution surface as the public MCP execute tool.
orgsSoft-delete an organization. Resources are tombstoned immediately and can be restored within 30 days.
Show 7 more tools
packagesList approvals waiting on the signed-in person in this org that they can decide: paused publishes whose credential needs changed or that make a package public, internet-visible packages whose credentials or storage changed, and credential picks proposed with credentialMappingPropose. Each item says in plain language what approving grants (credential, kind, provider, hosts) and what was approved before. Read-only; pass keys to approvalBundleCreate for one page the person approves in the browser.
repoApply a unified-diff patch to the active repo session workspace. This is the file-level repo session API: use `repoRebaseSession` to merge from the published default branch. There is no git-command channel; branch, checkout, and remote operations are not available in sessions (use the git lane via `packageGetGitRemote` for full git). Patch application is all-or-nothing across files in the patch set and subject to the 10 MiB per-file limit on patched results.
runsLoad one retained run with its captured log lines, error details, soft triage fields (error_triage / note / who / when), and (when available) a bounded metadata.result snapshot of the handler return value — useful for webhook deliveries, package exports, execute runs, and workflow runs. Works for ignored/resolved runs too. Records are retained about 30 days, capped per user, and pruned failure-last.
searchSearch catalogread-onlyFind built-in capabilities, official guides, saved packages, integrations, connected MCP servers, and secret references (metadata only) before `execute`. Prefer short task phrases over keyword lists. **query** — compact ranked markdown + structured matches (same actionable substance on both channels; major MCP clients usually load one). Empty or broad queries return a domain index; search again with a more specific query. Domain ids appear on capability hits. Connected MCP servers appear as server hits (name, instructions); do not expect every remote tool in unscoped results. Prefer a matchin…
secretsList every credential you can use in this org as one shape: Keys (secrets) and the opt-in url, login, and signing kinds, OAuth integrations, and MCP servers (kind "mcp"). Includes your own personal credentials granted to this org (scope "personal"). Filter by text, kind, scope, package-scoped Keys, or package locks. Metadata only: never values. To add one, send the person to /connect/credential (kind, kindMode=hint|required, name, provider, allowedHosts).
storageExport one durable storage bucket as JSON for inspection, debugging, or comparisons.
webhooksList recent inbound webhook deliveries for one minted package webhook from run records (metadata only; payload bodies are never stored).
Compare and alternatives
Featured in
Signals
- Stars
- 850
- Forks
- 82
- Open issues
- 91
- Contributors
- 11
- Last commit
- Oct 24, 2026 (3 days ago)
- Last release
- Oct 22, 2026 (5 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- Registry name
io.github.kody-hq/kody- Version
- 1.0.7
- Auth
- Auth not stated
- License
- License unknown
- Repository
- github.com/kody-hq/kody
- Website
- kody.codes
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
Cite this page
Kody MCP server. Agent Mart. https://agentmart.dev/connectors/kody-hq-kody (last updated 2026-10-24)