Model Context Protocol moderate risk

Opik

Opik MCP Server provides a unified interface to manage prompts, projects, traces, and metrics within the Opik platform, supporting IDE integration via MCP.

Connections & Capabilities

Connects To

GitHubSlack

Capabilities

readwrite

Quickstart

Install

npm install
npm

Config

{
  "mcpServers": {
    "opik": {
      "command": "npx",
      "args": [
        "-y",
        "opik-mcp",
        "--apiKey",
        "YOUR_API_KEY"
      ]
    }
  }
}

Exposed MCP Tools (7)

moderate

createPrompt

Creates a new prompt within the Opik platform.

Adds new prompts, potentially impacting LLM behavior.

safe

listPrompts

Lists existing prompts in the Opik platform.

Read-only operation, no side effects.

high

updatePrompt

Updates an existing prompt within the Opik platform.

Modifies prompt content, which can significantly alter LLM behavior.

high

deletePrompt

Deletes a prompt from the Opik platform.

Removes prompts, potentially disrupting workflows.

moderate

createProject

Creates a new project/workspace within the Opik platform.

Adds a new project, affecting organization.

safe

manageTraces

Tracks and analyzes trace data within the Opik platform.

Primarily a read operation for analyzing existing data.

safe

gatherMetrics

Gathers and queries metrics data within the Opik platform.

Read-only access to metrics data.

Safety Assessment

Opik MCP Server is relatively safe when used with strong API key management. The risk is moderate due to the write capabilities and potential for unauthorized access if the API key is compromised. Exercise caution with the experimental SSE transport.

Requires API key for authentication.
Manages access to Opik platform features, not system-level resources.
Provides a structured interface via MCP, limiting arbitrary actions.
Supports project and prompt management, enabling organization and control.

API key compromise could lead to unauthorized access.
Write operations (create, update, delete) are supported.
Lack of explicit RBAC beyond API key.
Server-Sent Events (SSE) transport is experimental and may introduce vulnerabilities.