Sentry

Pull production errors into a coding agent.

Add to Agentman Studio

Opens Agent Studio, where connecting is one click. The connector URL below works in any MCP client.

Paste it into any MCP client. Setup docs

Resources

What the Sentry connector does

The Sentry MCP server hands production error data to Claude, ChatGPT or any MCP-compatible coding agent. It searches issues, reads stack traces and breadcrumbs, downloads crash attachments, and triggers Seer root-cause runs. Anthropic labels it Read and write — but the sharpest tool here is a read tool, because Sentry events carry real users' data.

Verified connector

Listed by Anthropic as a partner connector in its Connectors Directory.

Connection checked by Agentman on .

Anthropic states this reflects the level of review a connector received, not a security audit.

Sentry tools (20)

  • whoami
  • find_organizations
  • find_teams
  • find_projects
  • find_issues
  • find_releases
  • find_tags
  • get_issue_details
  • get_event_attachment
  • update_issue
  • find_errors
  • find_transactions
  • create_team
  • create_project
  • update_project
  • create_dsn
  • find_dsns
  • analyze_issue_with_seer
  • search_docs
  • get_doc

Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.

Limits

  • The read side is the sharp side. get_event_attachment and get_issue_details are annotated read-only and can still pull real end users' data into a context window. Review this connector on what its reads expose, not only on its write label.
  • Attachment scrubbing is opt-in and easy to get wrong. Sentry documents limited support for non-minidump attachments: only rules naming a specific filename scrub, and a wildcard rule does not. Audit your org's rules before granting attachment reads.
  • Event scrubbing is a keyword denylist. It is on by default and covers a published field list, but it matches fixed strings. Sensitive values under unconventional key names need Additional Sensitive Fields or an Advanced Data Scrubbing rule.
  • Geo data outlives IP suppression. Sentry states geographic information is extracted from the user's IP even when IP storage is disabled, and needs its own advanced rule to remove.
  • update_issue can mute a live alert. Resolving or ignoring an issue stops alerting on it. Reversible, and logged to the activity feed when a reason is supplied — but a suppressed page is not undone by a later fix.
  • Four directory tool names are stale. find_issues, find_tags, find_errors and find_transactions have no counterpart in the current open-source catalogue.
  • The directory tool count is under half the real surface. 20 listed against 52 defined.
  • Annotations are from source, not the wire. We could not run an authenticated tools/list, so the deployed server could differ from main.
  • Prompts are unconfirmed. Anthropic's snapshot lists none, and the gated endpoint blocked our own prompts/list.
  • The directory's documentation URL is dead. docs.sentry.io/product/sentry-mcp/ returns a Page Not Found. The live documentation is at mcp.sentry.dev and the GitHub README.
  • The hosted endpoint does not serve self-hosted Sentry. Run the stdio server with a host flag instead, and expect Seer to be unavailable.
  • Natural-language search needs an LLM provider when self-hosted. Sentry states those tools are unavailable without one; other tools still work.
  • plain PKCE is advertised. The MCP authorization-server document offers plain alongside S256. Prefer S256.

Frequently asked questions

What sensitive data can a Sentry MCP read tool pull into my agent?

Whatever your events captured — request headers, cookies, local variables in stack frames, user email and IP, breadcrumbs, and any file attached to a crash. Sentry's server-side scrubber is on by default and redacts those event fields, but attachments are different: Sentry documents that only attachments named by an explicit non-wildcard rule get scrubbed at all.

Does the Sentry MCP server let an agent delete an issue?

No. `update_issue` changes status and assignment only — resolve, reopen, assign, or ignore. Sentry's open-source server defines an `event:admin` scope for deleting issues, but the MCP server never requests it and no catalogue tool issues an issue deletion. Sentry's docs note single events cannot be deleted from the UI either, only whole issues.

Can an agent silence a production alert through Sentry MCP?

Yes, and this is the real write risk. `update_issue` can set status to resolved or ignored, which stops Sentry alerting on a live error. Ignore modes include `forDuration` and `untilOccurrenceCount`. Sentry annotates the tool `destructiveHint: true` and non-idempotent, and puts it behind a Triage grant that is off by default.

Are the Sentry MCP tools annotated read-only or destructive?

Yes, and unusually we can report real values. Sentry's server is open source, and its tool type makes `readOnlyHint`, `destructiveHint` and `openWorldHint` mandatory, with a test asserting every tool declares them. Across 52 catalogue tools, 38 are annotated read-only and 6 destructive. These come from source, not a live handshake.

Does the Sentry MCP server work with self-hosted Sentry?

Not the hosted endpoint — run your own copy instead. Sentry's README documents a stdio transport taking a `--host` flag pointing at your instance, plus `--insecure-http` for internal deployments without TLS. Sentry notes some features such as Seer may be unavailable self-hosted, and provides a flag to disable those skills so unsupported tools are not exposed.

What OAuth scopes does the Sentry MCP server request?

Four: `org:read`, `project:write`, `team:write` and `event:write`. We read these live from the protected-resource descriptor on 2026-08-19. Sentry's own API advertises 26 scopes at its issuer, so the MCP server takes a narrow slice — notably omitting the admin scopes that delete projects, teams and issues.

How do I limit what the Sentry MCP server can reach?

Scope the URL and decline the write skills. Sentry documents path-scoped endpoints that pin the connection to one organization or one project, and recommends project scoping where possible. Separately, its skill grants for Triage and Manage Projects & Teams are both off by default in source, so a default connection is read plus Seer.

Sources

  • Sentry MCP server documentation — https://mcp.sentry.dev/llms.txt and https://mcp.sentry.dev/ (both fetched 2026-08-19). The directory's documentation URL docs.sentry.io/product/sentry-mcp/ returns a Page Not Found · retrieved 2026-08-19
  • sentry-mcp source repository — https://github.com/getsentry/sentry-mcp (fetched 2026-08-19; main branch, last pushed 2026-08-19). Tool catalogue, annotations, skill defaults and permission model all read from source · retrieved 2026-08-19
  • Tool catalogue directory — https://github.com/getsentry/sentry-mcp/tree/main/packages/mcp-core/src/tools/catalog (fetched 2026-08-19; 52 tool definitions) · retrieved 2026-08-19
  • Tool type and annotation contract — https://github.com/getsentry/sentry-mcp/blob/main/packages/mcp-core/src/tools/types.ts (fetched 2026-08-19) · retrieved 2026-08-19
  • Annotation enforcement test — https://github.com/getsentry/sentry-mcp/blob/main/packages/mcp-core/src/tools/tools.test.ts (fetched 2026-08-19) · retrieved 2026-08-19
  • Skill definitions and defaults — https://github.com/getsentry/sentry-mcp/blob/main/packages/mcp-core/src/skills.ts (fetched 2026-08-19) · retrieved 2026-08-19
  • Scope hierarchy — https://github.com/getsentry/sentry-mcp/blob/main/packages/mcp-core/src/permissions.ts (fetched 2026-08-19) · retrieved 2026-08-19
  • update_issue definition — https://github.com/getsentry/sentry-mcp/blob/main/packages/mcp-core/src/tools/catalog/update-issue.ts (fetched 2026-08-19) · retrieved 2026-08-19
  • Sentry Server-Side Data Scrubbing — https://docs.sentry.io/security-legal-pii/scrubbing/server-side-scrubbing/ (fetched 2026-08-19 as Markdown via the .md suffix) · retrieved 2026-08-19
  • Sentry Event PII Fields — https://docs.sentry.io/security-legal-pii/scrubbing/server-side-scrubbing/event-pii-fields/ (fetched 2026-08-19) · retrieved 2026-08-19
  • Sentry Attachment Scrubbing — https://docs.sentry.io/security-legal-pii/scrubbing/attachment-scrubbing/ (fetched 2026-08-19) · retrieved 2026-08-19
  • Sentry JavaScript configuration options — https://docs.sentry.io/platforms/javascript/configuration/options/ (fetched 2026-08-19; sendDefaultPii defaults to false and is deprecated in favour of dataCollection) · retrieved 2026-08-19
  • Sentry docs machine index — https://docs.sentry.io/llms.txt (fetched 2026-08-19) · retrieved 2026-08-19
  • docs.sentry.io/robots.txt allows all paths and carries Content-Signal: ai-train=yes, search=yes, ai-input=yes — synthesis is expressly permitted on all three axes (fetched 2026-08-19) · retrieved 2026-08-19
  • Live RFC 9728 protected-resource descriptor — https://mcp.sentry.dev/.well-known/oauth-protected-resource/mcp (fetched 2026-08-19; the root form 404s and the path-append form 401s) · retrieved 2026-08-19
  • Live RFC 8414 authorization-server metadata — https://mcp.sentry.dev/.well-known/oauth-authorization-server and https://sentry.io/.well-known/oauth-authorization-server (both fetched 2026-08-19; the issuer advertises 26 scopes against the MCP server's 4) · retrieved 2026-08-19
  • Live anonymous probe — 2026-08-19: initialize POST to the endpoint returns HTTP 401 with www-authenticate: Bearer realm="OAuth", resource_metadata="https://mcp.sentry.dev/.well-known/oauth-protected-resource/mcp" · retrieved 2026-08-19
  • Anthropic connector directory — https://claude.ai/directory/46d6322a-5f75-4822-b739-f49261805e9c (snapshot 2026-08-16) · retrieved 2026-08-16

More Developer Tools connectors

  • Base44

    Build and edit Base44 apps from an AI assistant, and query data your app's users submit.

  • CircleCI

    Diagnose failed builds, read job logs, inspect test results and rerun or roll back deployments from your AI assistant.

  • Claude Managed Agents

    Create, run, monitor and debug Anthropic's Claude Managed Agents from inside Claude itself.

Browse all MCP connectorsClaude and ChatGPT setup guideBrowse AI skills

Product names and logos belong to their owners. Agentman is not affiliated with a connector's maker unless the page says the connector is built and run by Agentman.

Use it in an agent

Put Sentry to work.

Connect Sentry once and your agents call these tools on their own: on a schedule, in a workflow, with nobody at the keyboard.

Open in Agentman Studio
Call (650) 285-1019Our AI receptionist answers.