Doppler MCP server

Connect Doppler to Claude, ChatGPT, Cursor, Claude Code, Codex, Gemini, GitHub Copilot and any other MCP client, for your whole team. Metorial adds security, governance, and tracing, and gives everyone one Magic MCP URL to connect.

What you can do with the Doppler MCP server

Ask your agent in plain language. Each of these maps to a real tool on the server.

  • Use the manage configs tool in Doppler
  • Use the download secrets tool in Doppler
  • Use the activity logs tool in Doppler
  • Use the get workplace tool in Doppler
  • Use the manage environments tool in Doppler
  • Use the share secret tool in Doppler

Supported Tools

manage_configs

Manage Configs

List, create, update, delete, clone, lock, or unlock configs within a Doppler project. Configs hold the actual secret values for an environment. Locking prevents renaming or deletion; it does not prevent secret changes. Discover projects with manage_projects.

download_secrets

Download Secrets

DEPRECATED — use `export_secrets` instead. Download all computed secret values from a Doppler project config as a flat key-value map. Optionally include dynamic secrets with configurable TTL. Useful for exporting secrets for local development, CI/CD pipelines, or deployment scripts.

activity_logs

Activity Logs

View workplace-wide activity logs to audit what happened in your Doppler workplace. Shows who performed what actions, when, and on which resources.

get_workplace

Get Workplace

Retrieve details about the current Doppler workplace, including its name and contact emails. Useful for verifying which workplace your token is connected to.

manage_environments

Manage Environments

List, create, rename, or delete environments within a Doppler project. Environments represent stages like development, staging, and production. Each environment contains one or more configs that hold secret values.

share_secret

Share Secret

Generate a temporary, shareable Doppler Share link for a secret value. The secret is sent in plain text to Doppler but is never stored — a one-time-use or limited-view URL is returned for secure sharing.

manage_projects

Manage Projects

List, create, retrieve, update, or delete Doppler projects. Projects are the top-level organizational unit that contain environments and configs for managing secrets.

manage_secrets

Manage Secrets

Retrieve, set, update, or delete secrets within a Doppler project config. Use this to read one or more secret values, bulk-set secrets as key-value pairs, or remove individual secrets. Secrets are environment variables stored in a specific config within a project.

manage_webhooks

Manage Webhooks

List, create, update, enable, disable, or delete webhooks for a Doppler project. Webhooks send POST requests to a URL when secrets change in specified configs, enabling automated deployments and CI/CD triggers.

manage_trusted_ips

Manage Trusted IPs

List, add, or remove trusted IP ranges for a Doppler config. Trusted IPs restrict which source IPs can access secrets for a given config. IP ranges use CIDR notation (e.g., "192.168.1.0/24"). The default "0.0.0.0/0" allows all traffic.

config_logs

Config Logs & Rollback

View the change history of a config's secrets and optionally roll back to a previous state. Each log entry shows what was modified, when, and by whom. Rollback reverts the config to the state before a specific change.

list_secret_names

List Secret Names

List secret names in a Doppler config without retrieving their values. Discover projects with manage_projects and configs with manage_configs before choosing a target.

update_secret_note

Update Secret Note

Set the note for a secret across all environments in a Doppler project. This changes the shared documentation for that secret, without changing its value.

export_secrets

Export Secrets

Prepare a downloadable file of computed secrets in JSON, ENV, YAML, Docker, or .NET JSON format. Optionally filter secret names or include dynamic secret leases.

get_current_token

Get Current Token

Retrieve information about the authenticated Doppler token, including its workplace and token type when provided. Useful for checking the identity associated with this connection.

Connect Doppler to your AI client

Every client uses the same Magic MCP URL, and so does any other MCP client. Add it once and sign in with SSO.

  1. Enable Doppler in Metorial. In your Metorial portal, enable the Doppler MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
  2. Add a custom connector. Open Customize, then Connectors. Select Add, then Custom, then Web.
  3. Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>) and continue.
  4. Sign in. Select Add and sign in to load Doppler tools.

Run Doppler through the Metorial gateway

One governed layer for every app your agents reach, not a separate connector per tool.

  • Give Doppler and every other app to your whole team through one MCP gateway, behind your SSO.
  • Scope which teams and agents can use Doppler tools with role-based access control, and trace every call.
  • Prefer to run it yourself? Metorial is open source and self-hostable.

More integrations teams use with Doppler

GitHub

Manage repositories, issues, and pull requests. Create and configure branches, star repositories, review code, and merge changes. Automate CI/CD workflows with GitHub Actions, manage workflow runs, secrets, and artifacts. Track issues with labels, milestones, and assignees. Search across code, repositories, issues, and users. Manage organizations, teams, and memberships. Create and manage projects, gists, packages, deployments, and environments. Access security alerts including code scanning, secret scanning, and Dependabot alerts. Read and write file contents in repositories. Manage webhooks, notifications, and codespaces.

Salesforce

Manage CRM data including Accounts, Contacts, Leads, Opportunities, Cases, and custom objects. Create, read, update, and delete records. Query data using SOQL and search across objects using SOSL. Perform bulk data operations for large-scale imports, exports, and migrations. Execute composite requests to batch multiple operations in a single API call. Access analytics, reports, and dashboards. Manage files and attachments associated with records. Interact with Chatter feeds, posts, and groups for social collaboration. Manage org metadata including custom objects, fields, layouts, and workflows. Query data using GraphQL for precise data retrieval across related objects.

Sharepoint

Manage SharePoint sites, document libraries, lists, and files. Create, read, update, and delete lists and list items with custom columns. Resolve site users to numeric Person/Group LookupId values. Upload, download, move, copy, and version files in document libraries. Search across sites, files, folders, lists, and list items using Microsoft Search. Manage permissions at site, list, and item levels with granular access control. Define and manage content types and site columns. Retrieve site properties and search for sites across Microsoft 365.

Airtable

Create, read, update, and delete records in Airtable bases and tables. Manage base schemas including creating tables and fields. Filter records using formulas, sort by fields, and scope queries to specific views. Upsert records to find, create, or update in a single call. Upload attachments to records, read and write record comments, list accessible bases, and receive real-time base change events through webhooks.

Sentry

Track, manage, and resolve application errors and performance issues. List, query, and bulk-update issues and error events with filters like status, assignment, and tags. Create and manage releases, associate commits, and upload source maps. Configure issue alert rules and metric alert rules with notification actions. Set up cron monitors to detect missed or failed scheduled jobs. Build custom dashboards with configurable widgets. Run ad-hoc Discover queries across errors and transactions for performance analysis. Manage organizations, teams, projects, and members. Provision users via SCIM. Access session replay data.

Bitbucket

Manage Git repositories, pull requests, and CI/CD pipelines on Bitbucket Cloud. Create, fork, and configure repositories within workspaces and projects. Create, review, approve, merge, and decline pull requests with inline code comments. Browse source code, list commits, and manage branches and tags. Trigger, monitor, and manage Bitbucket Pipelines. List workspace members, configure repository default reviewers and branch restrictions, create and manage repository webhooks, and search code across repositories.

Technical notes for Doppler

Manage Doppler projects, environments, configs, and secrets. Read or update secrets, list names without values, maintain secret notes, export downloadable files, inspect config history and activity logs, roll back changes, manage project webhooks and trusted IPs, and share values through expiring Doppler Share links.

Frequently asked questions

Common questions about connecting Doppler to AI agents with Metorial.

  1. How many tools does the Doppler MCP server have?
    The Doppler MCP server exposes 15 tools, including Manage Configs, Download Secrets, Activity Logs. Each one is governed and traced through Metorial.
  2. Doppler exposes tools your agents call on demand; it does not publish event triggers yet. Everything still runs through one governed MCP URL.
  3. Any MCP client, including VS Code, Windsurf, Zed, OpenCode and Grok. Each one reaches the Doppler MCP server through the same Metorial URL.
  4. Use role-based access control to decide which teams, users, and agents can use Doppler and which of its tools they can call.
  5. Yes. Metorial is open source, so you can run the Doppler MCP server yourself or use the hosted gateway.

Connect Doppler to production AI agents

See how Metorial gives your team governed access to Doppler, with tracing and security controls built in.