Cloudsmith MCP server

What the model can do

Cloudsmith package registry: workspaces, repositories with package counts, downloads, size and quarantined or policy-violating packages, packages by name, format, version, tag or status with downloads, scan state and vulnerability counts, one package's details, vulnerability scan results per repository, download metrics for a period, and the workspace audit log; when you ask, can quarantine or release, tag, rescan, resync, copy, move or delete a package, create a repository, change a member's role and invite someone to the workspace.

Reads

• cloudsmith_workspacesWorkspaces (organisations) the key's user belongs to: name, slug, location and created date.
• cloudsmith_repositoriesRepositories in the workspace: name, slug, type (public, private, open source), package count, downloads, size…
• cloudsmith_packagesPackages in a repository: name, version, format, status, upload date and uploader, size, downloads, tags, licence, quarantine…
• cloudsmith_packageOne package by its identifier (slug_perm from cloudsmith_packages): everything cloudsmith_packages shows plus description…
• cloudsmith_vulnerabilitiesVulnerability scan results for a repository's packages: package, whether vulnerabilities were found, how many and the highest severity…
• cloudsmith_download_metricsDownload and bandwidth metrics for a repository's packages over a period: active (downloaded at least once), inactive and total packages…
• cloudsmith_audit_logThe workspace audit log, newest first: event, when, who (user or service account slug), the object and target it touched.

Acts, when you ask

These change something in Cloudsmith. The model is told to use them only when you ask for exactly that, and each one is granted by name: per team on a shared connection, by the owner on a personal one.

• cloudsmith_quarantine_packageQuarantines a Cloudsmith package (it can no longer be downloaded by anyone pulling from the repository) or, with release, releases it from quarantine.
• cloudsmith_tag_packageChanges a Cloudsmith package's tags: Add or Remove the tags given, Replace all tags with them, or Clear every tag.
• cloudsmith_scan_packageSchedules a fresh security (vulnerability) scan of a Cloudsmith package; results appear in cloudsmith_vulnerabilities when it finishes.
• cloudsmith_resync_packageSchedules a Cloudsmith package to be processed (synchronised) again, e.g. after a failed sync; it may be briefly unavailable.
• cloudsmith_copy_packageCopies a Cloudsmith package into another repository of the same workspace (e.g. promote from staging to production)…
• cloudsmith_move_packageMoves a Cloudsmith package to another repository of the same workspace; it disappears from the source, so anything installing it from there breaks.
• cloudsmith_delete_packageDeletes a Cloudsmith package from its repository; installs that depend on it fail.
• cloudsmith_create_repositoryCreates a repository in the workspace.
• cloudsmith_update_member_roleChanges a workspace member's role to Owner, Manager, Member or Collaborator, which changes what they can see and do across the workspace…
• cloudsmith_invite_memberInvites someone to the Cloudsmith workspace with a role: Cloudsmith emails the invitation to the address given (or notifies the user slug given)…

Connect it

First connect Cloudsmith on Dashboard → Connections, then add Memtro to your client once. The Cloudsmith tools appear alongside the tools of everything else you have connected; nothing is configured per connector.

claude plugin marketplace add memtro-org/claude-memtro
claude plugin install memtro@memtro --config api_key=sk-memtro-...

{
  "mcpServers": {
    "memtro": {
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

{
  "mcp": {
    "memtro": {
      "type": "remote",
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

Who may use it

The key identifies the person, and the server offers that person the tools they may use everywhere else in Memtro. A shared Cloudsmith connection is used by the teams an administrator granted it to, tool by tool, on the Permissions page; a personal connection is used by its owner alone, and its tools that act stay off until the owner allows them. See Teams and permissions and Connectors.

Ask it like this

• › Which Cloudsmith packages in prod have critical vulnerabilities?
• › Which packages are quarantined right now?
• › How many downloads did the api repository serve last month?
• › Which packages were deleted this week, according to the audit log?
• › Tag my-app 2.4.1 as latest in staging.

Questions

Is this an official Cloudsmith MCP server?

No. It is Memtro's MCP server with Memtro's Cloudsmith connector behind it: the connector reads Cloudsmith through its API with the credentials you connect on Dashboard → Connections, and Cloudsmith publishes nothing here. The same endpoint carries every other system you connect and Memtro's memory tools.

What does it cost?

Nothing on top of Memtro. One price per organisation by its number of users, from $50 a month for up to 10 users after a 7-day free trial, with every connector, the MCP server, jobs and memory included. You bring your own model keys.

Can it change anything in Cloudsmith?

Only when you ask, and only what it has been granted: quarantine a package, or release it from quarantine; add, replace, remove or clear a package's tags; schedule a security scan of a package; resync (reprocess) a package; copy a package to another repository; move a package to another repository; delete a package; create a repository; change a workspace member's role; invite someone to the workspace. Every other tool reads, searches or lists. An administrator grants each acting tool by name per team, and a personal connection acts only after its owner allows it.

Which clients work?

Any MCP client that speaks Streamable HTTP: Claude Code, Cursor, Claude Desktop, OpenCode, Codex, Zed, Windsurf, Cline and the Anthropic and OpenAI SDKs. There is no local process to run; the server is remote and authenticated with your key.

Other MCP servers · Engineering and operations

• GitHub MCP server
• AWS CloudWatch MCP server
• Sentry MCP server
• ServiceNow MCP server
• Okta MCP server
• Twilio MCP server