---
title: "Bitrise MCP server for AI agents - actionlake"
description: "Give Claude 119 Bitrise actions through one MCP server: apps, organizations, users, addons. Your agent never holds the credential. 100,000 calls a month free."
canonical: https://actionlake.com/connectors/bitrise
updated: 2026-10-23
---

Connectors · Developer & infrastructure

# Bitrise MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Bitrise and the rest of your systems. It gives your agent 119 Bitrise actions (59 reads, 43 writes and 17 that wait for a confirmation) and holds the Bitrise credential itself, so the agent never does. It paces Bitrise's limits and records every call.

[Connect Bitrise free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

`claude mcp add --transport http actionlake https://connect.actionlake.com/mcp`

the first call

```
do {
  action: "bitrise.apps.list",
  intent: "check which Bitrise account is connected"
}
# Get list of the apps · read · 1 upstream call
```

- 119 actions in one signed file
- 59 read look, never change
- 43 write create and update
- 17 wait for a yes destructive, confirmed first

Set up

## Connect Bitrise in three steps.

1. 01
   ### Add actionlake to Claude.
   Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
   `https://connect.actionlake.com/mcp`
2. 02
   ### Connect Bitrise.
   API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
   - `api_token` Bitrise Personal Access Token (Profile > Security > Personal access tokens) or Workspace API token
   ```
   account { op: "connections.requirements", service: "bitrise" }
   # free: exactly what to paste, and what is found for you
   ```
3. 03
   ### Make the first call. Check before a write.
   Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free.
   ```
   do    { action: "bitrise.apps.list" }
   # get list of the apps · read · 1 upstream call
   check { action: "bitrise.apps.register", input: { … } }
   # free: inputs, permissions, cost and confirmations, nothing sent
   ```

Bitrise at a glance

**Sign-in**

API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.

**You provide**

`api_token`

**Limits we pace to**

5,000 calls an hour, per connection

**API covered**

Bitrise API v0.1 (Swagger 2.0 document at api-docs.bitrise.io/docs/swagger.json)`api.bitrise.io`

**Built from**

Bitrise's documentation, read 23 October 2026[api-docs.bitrise.io](https://api-docs.bitrise.io/docs/swagger.json) [api-docs.bitrise.io](https://api-docs.bitrise.io/)

**Service file**

Version 1.0.0, signed (Ed25519)

**Cached reads**

50 of 59 reads, for up to 5 minutes; a write clears what it affects

**Shared entities**

6, so ask can line Bitrise up with your other systems

**Data**

Processed and stored in Sydney, Australia. No US region yet

Capabilities

## What an AI agent can do in Bitrise.

119 actions in 13 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

- **59** read look, never change
- **43** write create and update
- **17** destructive wait for a confirmation

1. ### Apps
   81
   33 read · 34 write · 14 destructive
   Get list of the apps · Get a list of all build artifacts · Add a new app (registration step 1) · Get a specific app
2. ### Organizations
   21
   11 read · 7 write · 3 destructive
   List organizations groups · Get list of the apps for an organization · Adds a group to the organization · List the organizations that the user is part of
3. ### Users
   4
   4 read · 0 write · 0 destructive
   Get list of the apps for a user · Get list of the addons for user · List Apple API credentials for a specific user · Get a specific user
4. ### Addons
   2
   2 read · 0 write · 0 destructive
   Get list of available Bitrise addons · Get a specific Bitrise addon
5. ### Builds
   2
   2 read · 0 write · 0 destructive
   List all builds · Get AI-generated summary of a failed build
6. ### Me
   2
   2 read · 0 write · 0 destructive
   Get your profile info · Get list of Bitrise activity events
7. ### Available stacks
   1
   1 read · 0 write · 0 destructive
   List available stacks
8. ### Groups
   1
   0 read · 1 write · 0 destructive
   Add a member to a group

**5 more areas · 5 actions**

- Pipelines **1**
- Search steps **1**
- Step inputs **1**
- User **1**
- Validate bitrise yml **1**

Top actions

## The Bitrise API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 33 of Bitrise's 33 action names are shared with at least one other connector, so an agent learns them once.

| Action | What it does | Effect | Same name in |
| --- | --- | --- | --- |
| `bitrise.apps.list` Get list of the apps | Get list of the apps. | read | `devops.repository.list` 28 connectors |
| `bitrise.organizations.groups.list` List organizations groups | List organizations groups. | read | `identity.group.list` 262 connectors |
| `bitrise.me.get` Get your profile info | Get your profile info. | read | `identity.current_user.get` 307 connectors |
| `bitrise.apps.builds.artifacts.list` Get a list of all build artifacts | Get a list of all build artifacts. | read | `devops.artifact.list` 17 connectors |
| `bitrise.apps.register` Add a new app (registration step 1) | Add a new app (registration step 1). | write | `devops.repository.create` 18 connectors |
| `bitrise.apps.update` Updates an app | Updates an app. | write | `devops.repository.update` 19 connectors |
| `bitrise.organizations.groups.create` Adds a group to the organization | Adds a group to the organization. | write | `identity.group.create` 205 connectors |
| `bitrise.apps.delete` Deletes an app | Deletes an app. | destructive | `devops.repository.delete` 20 connectors |
| `bitrise.builds.list` List all builds | List all builds. | read | `devops.pipeline_run.list` 13 connectors |
| `bitrise.pipelines.list` List all pipelines/standalone builds | List all pipelines/standalone builds. | read | `devops.pipeline_run.list` 13 connectors |
| `bitrise.apps.builds.artifacts.get` Get a specific build artifact | Get a specific build artifact. | read | `devops.artifact.get` 13 connectors |
| `bitrise.apps.branches.list` List the branches with existing builds of an app's repository | List the branches with existing builds of an app's repository. | read | `devops.branch.list` 12 connectors |

Try it

## Prompts to paste into Claude.

Each one names the Bitrise actions it will call, so you know what it reads and what it changes before you send it.

1. Read read
   List our Bitrise repositories with their visibility and default branch.
   calls `bitrise.apps.list`
2. Write write
   Add a new app (registration step 1) in Bitrise. Show me exactly what you will send before you save it.
   calls `bitrise.apps.register`

Governance for Bitrise

## Destructive actions wait for a yes.

17 Bitrise actions are destructive. These are all of them:

- Deletes an app `bitrise.apps.delete`
- Delete a build artifact `bitrise.apps.builds.artifacts.delete`
- Delete an application secret `bitrise.apps.secrets.delete`
- Delete a secret by name `bitrise.organizations.secrets.delete`
- Abort a specific build `bitrise.apps.builds.abort`
- Aborts a pipeline `bitrise.apps.pipelines.abort`
- Delete an outgoing webhook of an app `bitrise.apps.outgoing_webhooks.delete`
- Deletes a key-value cache item `bitrise.apps.cache_items.delete`
- Deletes all key-value cache items belonging to an app `bitrise.apps.cache_items.delete_all`
- Delete a build certificate `bitrise.apps.build_certificates.delete`
- Delete a generic project file `bitrise.apps.generic_project_files.delete`
- Delete a provisioning profile `bitrise.apps.provisioning_profiles.delete`
- Delete an android keystore file `bitrise.apps.android_keystore_files.delete`
- Remove service credential user of an app `bitrise.apps.service_credential_user.delete`
- Remove repository authorization of an app `bitrise.apps.repository_authorization.delete`
- Delete Apple API Credential `bitrise.organizations.apple_api_credentials.delete`
- Delete Google Service Credential `bitrise.organizations.google_service_credentials.delete`

A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

do bitrise.apps.delete confirm_policy: **human**

Deletes an app?

**intent:** the user asked me to deletes an app

run suspended · waiting for a named person · key _bitrise-agent_ cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

```
account {
  op: "keys.create", name: "bitrise-agent",
  allowed_actions: ["bitrise.*"], cap_calls: 2000,
  confirm_policy: "human_for_writes",
  approval_rules: [
    { match: "bitrise.apps.delete", approver: "lead@example.com" },
    { match: "bitrise.apps.builds.artifacts.delete", approver: "lead@example.com" },
    { match: "bitrise.apps.secrets.delete", approver: "lead@example.com" }
  ]
}
```

Illustrative. Scoped to Bitrise only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

## What Bitrise costs on actionlake.

Every Bitrise action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Bitrise refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

- 1 upstream call per action all 119 Bitrise actions
- 119 actions page each page of a long list is one call
- 50 reads can be cached a cache hit costs nothing
- 100,000 calls a month, free paid plans from US$49 a month for 250,000

[See pricing](https://actionlake.com/pricing)

Action index

## Every Bitrise action.

119 actions by area: the id your agent calls, what it does, and its effect.

**Apps 81**

- `bitrise.apps.addons.list` Get list of the addons for apps read
- `bitrise.apps.android_keystore_files.confirm_upload` Confirm an android keystore file upload write
- `bitrise.apps.android_keystore_files.create` Create an Android keystore file write
- `bitrise.apps.android_keystore_files.delete` Delete an android keystore file destructive
- `bitrise.apps.android_keystore_files.get` Get a specific Android Keystore file read
- `bitrise.apps.android_keystore_files.list` Get a list of the android keystore files read
- `bitrise.apps.archived_builds.list` List 1000 archived builds of an app read
- `bitrise.apps.bitrise_yml.config.get` Getting the location of the application's bitrise.yaml read
- `bitrise.apps.bitrise_yml.config.update` Changing the location of the application's bitrise.yaml write
- `bitrise.apps.bitrise_yml.create` Upload a new bitrise.yml for your application write
- `bitrise.apps.branches.list` List the branches with existing builds of an app's repository read
- `bitrise.apps.build_certificates.confirm_upload` Confirm a build certificate upload write
- `bitrise.apps.build_certificates.create` Create a build certificate write
- `bitrise.apps.build_certificates.delete` Delete a build certificate destructive
- `bitrise.apps.build_certificates.get` Get a specific build certificate read
- `bitrise.apps.build_certificates.list` Get a list of the build certificates read
- `bitrise.apps.build_certificates.update` Update a build certificate write
- `bitrise.apps.build_requests.list` List the open build requests for an app read
- `bitrise.apps.build_requests.update` Update a build request write
- `bitrise.apps.build_workflows.list` List the workflows of an app read
- `bitrise.apps.builds.abort` Abort a specific build destructive
- `bitrise.apps.builds.artifacts.delete` Delete a build artifact destructive
- `bitrise.apps.builds.artifacts.get` Get a specific build artifact read
- `bitrise.apps.builds.artifacts.list` Get a list of all build artifacts read
- `bitrise.apps.builds.artifacts.update` Update a build artifact write
- `bitrise.apps.builds.create` Trigger a new build/pipeline write
- `bitrise.apps.builds.get` Get a build of a given app read
- `bitrise.apps.builds.list` List all builds of an app read
- `bitrise.apps.builds.log.get` Get the build log of a build read
- `bitrise.apps.builds.rebuild` Rebuild a build write
- `bitrise.apps.cache_items.delete` Deletes a key-value cache item destructive
- `bitrise.apps.cache_items.delete_all` Deletes all key-value cache items belonging to an app destructive
- `bitrise.apps.cache_items.download_url.get` Gets the download URL of a key-value cache item read
- `bitrise.apps.cache_items.list` List the key-value cache items belonging to an app read
- `bitrise.apps.change_connection_type` Change the connection type of an app write
- `bitrise.apps.delete` Deletes an app destructive
- `bitrise.apps.finish` Save the application at the end of the app registration process write
- `bitrise.apps.generic_project_files.confirm_upload` Confirm a generic project file upload write
- `bitrise.apps.generic_project_files.create` Create a generic project file write
- `bitrise.apps.generic_project_files.delete` Delete a generic project file destructive
- `bitrise.apps.generic_project_files.get` Get a specific generic project file read
- `bitrise.apps.generic_project_files.list` Get a list of the generic project files read
- `bitrise.apps.generic_project_files.update` Update a generic project file write
- `bitrise.apps.get` Get a specific app read
- `bitrise.apps.github_app_connection_configuration.update` Change Github app connection configuration of an app write
- `bitrise.apps.github_app_connection_configuration.update_linked_repositories` Change the linked repositories of a Github app connection write
- `bitrise.apps.list` Get list of the apps read
- `bitrise.apps.outgoing_webhooks.create` Create an outgoing webhook for an app write
- `bitrise.apps.outgoing_webhooks.delete` Delete an outgoing webhook of an app destructive
- `bitrise.apps.outgoing_webhooks.delivery_items.get` Get a specific delivery item of a webhook read
- `bitrise.apps.outgoing_webhooks.delivery_items.list` List the webhook delivery items of an app read
- `bitrise.apps.outgoing_webhooks.delivery_items.redeliver` Re-deliver the webhook delivery items of an app write
- `bitrise.apps.outgoing_webhooks.list` List the outgoing webhooks of an app read
- `bitrise.apps.outgoing_webhooks.update` Update an outgoing webhook of an app write
- `bitrise.apps.pipelines.abort` Aborts a pipeline destructive
- `bitrise.apps.pipelines.get` Get a pipeline of a given app read
- `bitrise.apps.pipelines.list` List all pipelines and standalone builds of an app read
- `bitrise.apps.pipelines.rebuild` Rebuilds a pipeline write
- `bitrise.apps.provisioning_profiles.confirm_upload` Confirm a provisioning profile upload write
- `bitrise.apps.provisioning_profiles.create` Create a provisioning profile write
- `bitrise.apps.provisioning_profiles.delete` Delete a provisioning profile destructive
- `bitrise.apps.provisioning_profiles.get` Get a specific provisioning profile read
- `bitrise.apps.provisioning_profiles.list` Get a list of the provisioning profiles read
- `bitrise.apps.provisioning_profiles.update` Update a provisioning profile write
- `bitrise.apps.register` Add a new app (registration step 1) write
- `bitrise.apps.register_ssh_key` Add an SSH-key to a specific app write
- `bitrise.apps.register_webhook` Register an incoming webhook for a specific application write
- `bitrise.apps.repository_authorization.delete` Remove repository authorization of an app destructive
- `bitrise.apps.roles.get` List the groups holding a role on an app read
- `bitrise.apps.roles.update` Replaces group roles for an app write
- `bitrise.apps.secrets.create` Create a new app secret write
- `bitrise.apps.secrets.delete` Delete an application secret destructive
- `bitrise.apps.secrets.get` Get a single app secret by name read
- `bitrise.apps.secrets.list` List the application secrets (with no values) read
- `bitrise.apps.secrets.update` Update an existing app secret write
- `bitrise.apps.secrets.upsert` Upsert an application secret write
- `bitrise.apps.secrets.value.get` Get the value of an unprotected app secret read
- `bitrise.apps.service_credential_user.delete` Remove service credential user of an app destructive
- `bitrise.apps.test_devices.list` List the test devices for an app read
- `bitrise.apps.update` Updates an app write
- `bitrise.apps.update_email_notifications` Updates the app's notification settings write

**Organizations 21**

- `bitrise.organizations.addons.list` Get list of the addons for organization read
- `bitrise.organizations.apple_api_credentials.create` Create Apple API Credential write
- `bitrise.organizations.apple_api_credentials.delete` Delete Apple API Credential destructive
- `bitrise.organizations.apple_api_credentials.list` List Apple API credentials for a specific organization read
- `bitrise.organizations.apps.list` Get list of the apps for an organization read
- `bitrise.organizations.apps.machine_types.update` Migrate machine types of all apps in an organization write
- `bitrise.organizations.available_stacks.get` List available stacks for an organization read
- `bitrise.organizations.get` Get a specified organization read
- `bitrise.organizations.google_service_credentials.create` Create Google Service Credential write
- `bitrise.organizations.google_service_credentials.delete` Delete Google Service Credential destructive
- `bitrise.organizations.google_service_credentials.list` List Google Service credentials for a specific organization read
- `bitrise.organizations.groups.create` Adds a group to the organization write
- `bitrise.organizations.groups.list` List organizations groups read
- `bitrise.organizations.list` List the organizations that the user is part of read
- `bitrise.organizations.members.create` Adds a member to the organization write
- `bitrise.organizations.members.list` List the members of the organization read
- `bitrise.organizations.secrets.create` Create a new organization secret write
- `bitrise.organizations.secrets.delete` Delete a secret by name destructive
- `bitrise.organizations.secrets.get` Get a single secret by name read
- `bitrise.organizations.secrets.list` Get the secrets of an organization read
- `bitrise.organizations.secrets.update` Update an existing secret write

**Users 4**

- `bitrise.users.addons.list` Get list of the addons for user read
- `bitrise.users.apple_api_credentials.list` List Apple API credentials for a specific user read
- `bitrise.users.apps.list` Get list of the apps for a user read
- `bitrise.users.get` Get a specific user read

**Addons 2**

- `bitrise.addons.get` Get a specific Bitrise addon read
- `bitrise.addons.list` Get list of available Bitrise addons read

**Builds 2**

- `bitrise.builds.ai_summary.get` Get AI-generated summary of a failed build read
- `bitrise.builds.list` List all builds read

**Me 2**

- `bitrise.me.activities.list` Get list of Bitrise activity events read
- `bitrise.me.get` Get your profile info read

**Available stacks 1**

- `bitrise.available_stacks.get` List available stacks read

**Groups 1**

- `bitrise.groups.add_member` Add a member to a group write

**Pipelines 1**

- `bitrise.pipelines.list` List all pipelines/standalone builds read

**Search steps 1**

- `bitrise.search_steps.list` Find steps read

**Step inputs 1**

- `bitrise.step_inputs.list` List step inputs read

**User 1**

- `bitrise.users.apps.machine_types.update` Migrate machine types of all apps of a user write

**Validate bitrise yml 1**

- `bitrise.bitrise_yml.validate` Validate a Bitrise YAML file read

Questions

## The Bitrise MCP server, answered.

**Is there a Bitrise MCP server for Claude?**

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 119 Bitrise actions across apps, organizations, users and addons, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Bitrise.

**What do I need to connect Bitrise?**

Bitrise Personal Access Token (Profile > Security > Personal access tokens) or Workspace API token. The free call account { op: "connections.requirements", service: "bitrise" } lists exactly what to paste.

**Can an AI agent delete or change things in Bitrise?**

Only if its key allows it, and only with an explicit confirmation. 17 Bitrise actions are destructive, including deletes an app, delete a build artifact and delete an application secret. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

**Will an AI agent use up my Bitrise API limit?**

actionlake paces every call to the limits in the Bitrise service file: 5,000 calls an hour per connection. Repeated reads are answered from cache (50 Bitrise actions can be), which never reaches Bitrise.

**What does a Bitrise action cost?**

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (119 Bitrise actions page). Cache hits, searches, dry runs and calls Bitrise refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

**Which Bitrise API does it cover?**

The Bitrise API v0.1 (Swagger 2.0 document at api-docs.bitrise.io/docs/swagger.json) at api.bitrise.io. It is built from Bitrise's documentation as read on 23 October 2026. 119 actions in 13 areas, each one in the signed service file (version 1.0.0).

**Does actionlake keep my Bitrise data, and where?**

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Bitrise credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

**Which AI clients can use it?**

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

## More connectors like Bitrise

Shares the most action names with

- [CircleCI 17](https://actionlake.com/connectors/circleci)
- [Buildkite 16](https://actionlake.com/connectors/buildkite)
- [Harness Platform 13](https://actionlake.com/connectors/harness-platform)
- [Cloudsmith 12](https://actionlake.com/connectors/cloudsmith)
- [Google Artifact Registry 9](https://actionlake.com/connectors/google-artifact-registry)
- [Browserbase 9](https://actionlake.com/connectors/browserbase)

Joins with, on shared entities

- [Cloudflare 4](https://actionlake.com/connectors/cloudflare)
- [Gitea 4](https://actionlake.com/connectors/gitea)
- [Forgejo 4](https://actionlake.com/connectors/forgejo)
- [Hugging Face 4](https://actionlake.com/connectors/hugging-face)
- [Make 4](https://actionlake.com/connectors/make)
- [Axiom 4](https://actionlake.com/connectors/axiom)

Browse

- [All Developer & infrastructure connectors](https://actionlake.com/connectors/category/developer-and-infrastructure)
- [All connectors](https://actionlake.com/connectors)
- [How actionlake compares](https://actionlake.com/compare)

actionlake is independent. It is not made or endorsed by Bitrise; the name is the vendor's own. Counts are from the Bitrise service file, version 1.0.0.

## Give your agent Bitrise today.

[Connect Bitrise free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

---

Source: https://actionlake.com/connectors/bitrise
More: https://actionlake.com/llms.txt
