@bitpeakdev/mantis-mcp-server

MCP server for MantisBT. Read, create and update Mantis issues from Claude Code.

Setup

1. In Mantis, go to My Account → API Tokens and make a token.
2. Add this to .mcp.json in your project (keep .mcp.json out of git: it holds your token):

{
  "mcpServers": {
    "mantis": {
      "command": "npx",
      "args": ["-y", "@bitpeakdev/mantis-mcp-server"],
      "env": {
        "MANTIS_URL": "https://mantis.example.com",
        "MANTIS_TOKEN": "your-personal-api-token"
      }
    }
  }
}

3. Restart Claude Code and ask it to run who-am-i.

| Variable | Required | Meaning | |---|---|---| | MANTIS_URL | yes | Base URL of your Mantis. A pasted login page or /api/rest URL also works. | | MANTIS_TOKEN | yes | Your personal API token. | | MANTIS_READ_ONLY | no | 1 hides all write tools. |

Tools

| Tool | Does | |---|---| | who-am-i | Your Mantis user. Also a connection test. | | list-projects | All projects, with a Parent › Child path. | | list-statuses | Valid statuses, priorities and severities. | | list-project-users | People you can assign in a project. | | list-categories | Categories of a project. | | list-issues | Issues by project and/or filter (assigned, reported, monitored, unassigned, saved filter id). | | get-issue | One issue with notes, attachments and relationships. | | search-issues | Searches issue summaries only (the REST API has no full-text search). | | create-issue | New issue. Fields by name. | | update-issue | Change status, handler, priority, severity, category, summary, description. | | add-note | Add a note. Private unless public: true. | | attach-file | Attach a local file from the current directory, max 10 MB. | | add-relationship | related-to, duplicate-of, parent-of, child-of. | | monitor-issue | Monitor an issue as yourself. |

Nothing can be deleted through this server.

When you get a 401 or 403

The token is usually fine. Check in this order:

1. The token is still valid (My Account → API Tokens).
2. The REST API is enabled in Mantis.
3. The web server passes the Authorization header to PHP. Apache with CGI/FastCGI needs CGIPassAuth On.

Servers that refuse PATCH

Some servers (for example IIS) refuse PATCH before Mantis sees it. The server then re-sends the update as POST with X-HTTP-Method-Override: PATCH, and uses that for the rest of the session.