trigger.dev
by triggerdotdev
Overview
Local development and AI agent interface for Trigger.dev workflows, enabling Python script execution and managing tasks, runs, and deployments.
Installation
pnpm exec trigger mcpEnvironment Variables
- TRIGGER_SECRET_KEY
- TRIGGER_API_URL
- OPENAI_API_KEY
- SLACK_BOT_TOKEN
- SLACK_CHANNEL_ID
- DATABASE_URL
- TRIGGER_PROJECT_REF
- NEXT_PUBLIC_TRIGGER_API_URL
- NEXT_PUBLIC_TRIGGER_PUBLIC_KEY
- REPLICATE_API_KEY
- FAL_KEY
- LIGHTPANDA_CDP_HOST
- LIGHTPANDA_CDP_PORT
- LIGHTPANDA_TOKEN
- AXIOM_TOKEN
- S2_ACCESS_TOKEN
- S2_DEPLOYMENT_LOGS_BASIN_NAME
- TRIGGER_WORKER_TOKEN
- MANAGED_WORKER_SECRET
- GIT_COMMIT_SHA
- GITHUB_SHA
- GITHUB_REF
- GITHUB_EVENT_PATH
- DEPLOY_REGISTRY_USERNAME
- DEPLOY_REGISTRY_PASSWORD
- DEPLOY_REGISTRY_HOST
- DEPLOY_REGISTRY_NAMESPACE
- DEPLOY_REGISTRY_ECR_TAGS
- DEPLOY_REGISTRY_ECR_ASSUME_ROLE_ARN
- DEPLOY_REGISTRY_ECR_ASSUME_ROLE_EXTERNAL_ID
- V4_DEPLOY_REGISTRY_USERNAME
- V4_DEPLOY_REGISTRY_PASSWORD
- V4_DEPLOY_REGISTRY_HOST
- V4_DEPLOY_REGISTRY_NAMESPACE
Security Notes
Direct SQL query execution (e.g., `sql.query`) in AI agent tools (e.g., `executeSql`) poses a severe SQL injection risk if the `queryApproval` mechanism is insufficient or bypassed. Execution of AI-generated Python code relies on external sandbox isolation (E2B Code Interpreter). The `deploy` command and related `docker` executions involve running external commands, which can be a security concern. The `install-mcp` command modifies local client configuration files, requiring user trust. `verifySlackRequest` middleware is marked as `TODO`, indicating a potential vulnerability to forged Slack requests. Python scripts executed via `python.runScript` with user-controlled URLs could lead to SSRF or arbitrary file access. OOM test tasks demonstrate potential resource exhaustion if not properly handled.
Similar Servers
MaxKB
An enterprise-grade intelligent agent platform for building knowledge bases, RAG, complex workflows, and AI agents, targeting intelligent customer service and office assistants.
activepieces
An open-source, extensible AI automation platform designed as a Zapier alternative, supporting low-code/no-code workflows and integration with Large Language Models (LLMs) through a type-safe TypeScript framework.
agents
The Inkeep Agents project is a comprehensive framework and SDK for building, managing, and running AI agents. This specific 'MCP Server' component (integrated within the Management API) provides a machine-readable API for managing agent configurations, tools, data components, and other project resources.
volcano-sdk
A TypeScript SDK for building multi-provider AI agents that chain LLM reasoning with external tools and orchestrate multi-agent workflows.