Redmine MCP Server

Standalone stdio Model Context Protocol server for Redmine.

It provides MCP tools for Redmine issues, projects, metadata, wiki pages, time entries, attachments, versions, relations, watchers, and Redmine Checklists.

Requirements

• Node.js 18.17 or newer
• Redmine REST API enabled
• Redmine API key with the required project permissions
• Redmine Checklists plugin, only when checklist tools are used

Installation

Homebrew:

brew install weirdo-adam/tap/redmine-mcp-server

Local checkout:

scripts/install-local.sh

Usage

export REDMINE_BASE_URL="https://redmine.example.com"
export REDMINE_API_KEY="your-api-key"
export REDMINE_MCP_READ_ONLY=true
redmine-mcp-server

Development checkout:

export REDMINE_BASE_URL="https://redmine.example.com"
export REDMINE_API_KEY="your-api-key"
npm start

The server communicates over newline-delimited JSON-RPC on stdin/stdout. Logs and diagnostics are written to stderr.

MCP Client Examples

Claude Code:

claude mcp add redmine \
  --transport stdio \
  --env REDMINE_BASE_URL=https://redmine.example.com \
  --env REDMINE_API_KEY=your-api-key \
  --env REDMINE_MCP_READ_ONLY=true \
  -- redmine-mcp-server

Codex CLI:

codex mcp add \
  --env REDMINE_BASE_URL=https://redmine.example.com \
  --env REDMINE_API_KEY=your-api-key \
  --env REDMINE_MCP_READ_ONLY=true \
  redmine -- redmine-mcp-server

Codex config.toml:

[mcp_servers.redmine]
command = "redmine-mcp-server"
args = []

[mcp_servers.redmine.env]
REDMINE_BASE_URL = "https://redmine.example.com"
REDMINE_API_KEY = "your-api-key"
REDMINE_MCP_READ_ONLY = "true"

Configuration

Variable	Required	Default	Description
REDMINE_BASE_URL	Yes	none	Redmine base URL.
REDMINE_API_KEY	Yes	none	Redmine REST API key.
REDMINE_MCP_READ_ONLY	No	false	Hide and reject write tools.
REDMINE_MCP_ENABLE_DELETES	No	false	Expose destructive delete/remove tools.
REDMINE_TIMEOUT_MS	No	30000	HTTP request timeout in milliseconds.

Additional feature flags and complete client examples are documented in docs/client-configuration.md.

Development

scripts/check.sh
scripts/package-release.sh

Release archives are written to dist/:

redmine-mcp-server-<version>.tar.gz
redmine-mcp-server-<version>.tar.gz.sha256

Security

Permissions are determined by the configured Redmine API key. Use the least privileged key practical for the target project, and enable REDMINE_MCP_READ_ONLY=true when write operations are not required.

See SECURITY.md for vulnerability reporting.