Delega MCP server

Read from the package source without running it. The installed server may list more.

• add_comment

  Add a comment to a task

• assign_task

  Assign a task to an agent (or unassign by passing null)

• claim_task

  Claim a task for exclusive processing (work-queue semantics). Without task_id, atomically picks the highest-priority claimable task from the queue \u2014 open, unclaimed, and unassigned or assigned to you. With task_id, claims that specific task (e.g. one you found via list_tasks, or after a write was rejected with 'claim it first'); fails with a conflict if it is completed, assigned to another ag

• complete_task

  Mark a task as completed. Attach `evidence` \u2014 structured proof the work happened (commit, PR, CI check, deploy SHA, artifact/URL, command output). Evidence is always welcome and is REQUIRED on tasks whose evidence_policy is 'required' (there, at least one strong kind \u2014 commit/pr/ci_check/deploy_sha/artifact_url \u2014 must be present; command_output alone is rejected). Evidence is a dura

• create_automationwrite action

  Create an automation rule: when an event fires and all conditions match, run the actions in-process \u2014 no webhook receiver needed (admin only). Example: when a task labeled bug is created, assign it to an agent at priority 3. Safety: cascades are depth- and budget-capped, rules never react to tasks they created, and field mutations on tasks under a live claim are always skipped (comments are a

• create_ingress_sourcewrite action

  Create an inbound connector: a signed public endpoint that turns external events (CI failures, alerts, calendars) into Delega tasks (admin only). The sender signs each POST body with HMAC-SHA256 (header X-Delega-Ingress-Signature: t=<unix>,v1=<hex of HMAC(secret, 't.body')>, 5-minute tolerance). Ingress can ONLY create tasks; routing (project/assignee) is pinned here and never payload-controlled;

• create_recurring_taskwrite action

  Create a recurring task template. The hosted scheduler spawns normal task instances from this template and links them with source_recurrence_id.

• create_taskwrite action

  Create a new task in Delega

• create_webhookwrite action

  Create a webhook to receive event notifications (admin only). Events: task.created, task.updated, task.completed, task.deleted, task.assigned, task.delegated, task.commented, task.claimed, task.released, task.state_changed, task.linked

• delegate_task

  Delegate a task: create a child task linked to a parent. The parent's status flips to 'delegated'. Use this (not assign_task) for multi-agent handoffs so the delegation chain is recorded.

• delete_agentwrite action

  Delete an agent. The API may refuse if the agent has active tasks or is the last active agent.

• delete_automationwrite action

  Delete an automation rule and its run log by ID (admin only). Hosted API only.

• delete_ingress_sourcewrite action

  Delete an inbound connector source and its delivery log by ID (admin only). Its endpoint immediately returns 404. Hosted API only.

• delete_recurrencewrite action

  Delete a recurring task template. Existing spawned task instances remain as normal tasks.

• delete_taskwrite action

  Delete a task permanently

• delete_webhookwrite action

  Delete a webhook by ID (admin only)

• find_duplicate_tasks

  Check whether a proposed task is similar to existing open tasks (TF-IDF + cosine similarity). Call this before create_task to avoid redundant work.

• fleet_attention

  Triage board: one call returning everything across the account that needs a human or coordinator \u2014 abandoned claims (a crashed/silent agent's expired lease), silent holders, errored and input-blocked tasks, overdue, and looping (repeatedly reopened) tasks. Scoped like stats: coordinators/admins see the whole account, workers see their own involvement. Read-only. Hosted API only.

• get_context_history

  Read a bounded page of the append-only context provenance ledger. Prefer key to narrow history. Follow the JSON next_cursor using history_cursor for older entries; a Next text cursor instead continues a large current page with identical selectors. History remains complete and explicitly paginated.

• get_stats

  Get task statistics from Delega (totals, completed today, due today, overdue, by project)

• get_task

  Get a task's details, ownership, handoff, links and subtasks as bounded JSON. Context is retrieved separately through get_task_context. Follow text cursors with the same task ID for large details; do not treat a fragment as complete.

• get_task_chain

  Get the full delegation chain for a task (root + all descendants, sorted by depth). Use this to inspect parent/child accountability.

• get_task_context

  Read selected persistent task state. Default summary returns canonical current-state keys plus a paginated key index, not the whole history. Supply exact keys to retrieve particular values, view=keys to browse the index, or view=full for explicit complete access. Large responses use text cursors; never mistake a fragment for a complete document. Preserve version for guarded updates. Historical non

• get_usage

  Get quota and rate-limit information for the current plan. Hosted API only (api.delega.dev) \u2014 custom endpoints receive a clear error.

• heartbeat_task

  Extend the lease on a task you have claimed. Call this periodically (before lease_expires_at) while working on a long task so the claim is not reclaimed by another agent. Optionally report a session state at the same time (working / waiting_input / errored) so humans and orchestrators can see why the claim is held. Fails with 409 if you no longer hold an active claim \u2014 in that case, claim a t

• link_task

  Attach a branch, commit, pull request, or URL link to a task. Use this when work in a repo, PR, or external artifact should travel with the task.

• list_agents

  List all registered agents in Delega. Admin keys get the full view; coordinators get a read-only directory (name, role, activity) for resolving agent IDs on tasks.

• list_automations

  List all automation rules configured for your account, with run/failure counts (admin only). Hosted API only.

• list_ingress_sources

  List inbound connector sources with delivery counters (admin only). Hosted API only.

• list_projects

  List all projects in Delega

• list_recurrences

  List recurring task templates. Recurrences spawn normal task instances on schedule; completing an instance does not delete the schedule.

• list_task_links

  List branch, commit, pull request, and URL links attached to a task.

• list_tasks

  List compact, paginated task summaries with total/has_more/next_offset. Default 25 tasks and 6000 characters; follow next_offset with identical filters for complete discovery. A page is not the whole queue. Workers see involved tasks; coordinators/admins see all account tasks. Act only on your assignments or unowned tasks you claim; coordinate on others through comments. Use get_task for details a

• list_webhooks

  List all webhooks configured for your account (admin only)

• recall

  Search your decision-memory across ALL tasks \u2014 recall a prior decision, fact, or constraint without knowing which task recorded it. Returns the best-matching context entries (key, value, source, and the task they live on) ranked by relevance, with human-stated facts weighted highest. Use at the START of new work to avoid re-deciding something already settled. Lexical match for now (exact-ish

• register_agent

  Register a new agent in Delega. Returns the API key (shown only at creation \u2014 save it!)

• release_task

  Release a task you have claimed back to the queue without completing it. Use when you cannot finish the work or another agent should take over \u2014 the task returns to open status and becomes immediately claimable. Leave a `handoff` note so the next agent resumes instead of restarting. Hosted API only.

• set_agent_role

  Set an agent's role (admin key required): worker (own-task scope), coordinator (sees + can comment on all account tasks), or admin (full account management). Sandbox agents graduate via the claim flow and cannot be assigned a role.

• set_task_state

  Report the session state of a task you have claimed \u2014 working, waiting_input, or errored \u2014 without extending the lease. Use this to flag that you are blocked on input or hit an error: the claim stays visible as held-but-stuck instead of faking liveness. Humans and orchestrators see the state via list_tasks/get_task. Fails with 409 if you no longer hold an active claim. Hosted API only.

• update_automationwrite action

  Update an automation rule (admin only). Only supplied fields change; setting active true re-enables a rule that was auto-disabled after repeated failures. Hosted API only.

• update_ingress_sourcewrite action

  Update an inbound connector source (admin only). Only supplied fields change; pass rotate_secret true to mint a new signing secret (shown once \u2014 the old secret stops working immediately). Hosted API only.

• update_recurrencewrite action

  Update a recurring task template, including pausing/resuming with active=false/true.

• update_taskwrite action

  Update an existing task's fields

• update_task_contextwrite action

  Merge keys into persistent task context, preserving other keys. Keep a compact current_state/next_step and retrieve history only when needed. Pass expected_version from get_task_context to guard concurrent writes. Returns a compact acknowledgment, not merged history. A conflict applies no write: read the relevant current keys, merge and retry explicitly.

• Code scan2 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitystatic API keys via environment variables6/15
• Maintenancelast push 0 days ago15/15
• Maintainer identityregistry namespace matches repository owner7/10

Delega: common questions

Is Delega MCP server safe?

Mostly: it is graded B (82/100). Read the Delega safety report

How do I install Delega?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does Delega need an API key?

Yes. The registry entry asks for DELEGA_API_KEY, DELEGA_CF_ACCESS_CLIENT_ID, DELEGA_CF_ACCESS_CLIENT_SECRET.

Is Delega maintained?

The last commit was in the last day (2026-09-19). The latest release is v1.19.0.