Plug-in (Function & Smart Service)Free

Appian Dev MCP (read-only)

by John Rogers (john.rogers)

Description

Appian Dev MCP (read-only) gives AI coding assistants structured, read-only access to an Appian environment — with no ability to create, modify, or delete anything. It's designed for production sites where you need to inspect applications, trace how objects are configured, or investigate incidents alongside an AI assistant, but must guarantee that nothing changes. Mutating tools aren't just disabled — they don't exist: the MCP server structurally cannot issue a create, update, or delete operation. Because it runs in your environment and acts as the signed-in user, all queries stay within your site and your existing permission boundaries.

Features

  1. Structurally read-only — 56 inspection tools (list, get, read). No create, update, delete, or test-execution tools are registered. This isn't a configuration toggle — the tools are absent from the server, giving production teams confidence that the assistant cannot make changes even if asked to.
  2. Embedded, ready-to-run MCP server — install the plug-in, download the bundled server from it, and point any MCP-compatible AI client (e.g., Claude) at it. No separate infrastructure to stand up.
  3. Production use cases — investigate how an application is built, trace record type relationships and security rules, review process model flows, audit group memberships, inspect integration configurations, or explore an unfamiliar environment during an incident — all through natural language.
  4. Flexible authentication — HTTP Basic for standard accounts, or browser-based single sign-on (SSO) for environments that require it, capturing your session through a normal browser login.
  5. Security-first by design — access is limited to Designer and administrator roles, and every operation executes under the authenticated user's own permissions, scoped to the objects they're allowed to see.

After installing the plugin, please use https://docs.appian.com/suite/help/26.5/devmcp.html (https://docs.appian.com/suite/help/26.5/devmcp.html) for instructions on installation and use.

Note: until late June 2026, using this on your site may require a support case to turn on the correct feature toggle.

Release notes

New tools: view object version history and past versions New diagnostics tool for troubleshooting and getting version info for bug reports

Tool Fixes

  • Document and folder descriptions are viewable
  • Adding a new site page no longer causes existing site pages to be recreated and lose configurations
  • Date, datetime, and time types now function reliably for constant values

Auth and Ops

  • MCP server now auto-trusts corporate certs (users no longer get SSL errors on corporate networks)
  • Users no longer need to set LCP_API_PATH in their config
  • Multi-user auth improvements (users prompted less frequently)
Version history (4)

26.6.80

  1. listIntegrations accuracy: listIntegrations now returns only actual integrations. Previously it returned a superset including folders, constants, interfaces, and other objects mislabeled as integrations.
  2. listApplicationObjects completeness: listApplicationObjects no longer silently truncates results at 200 per object type. Applications with more than 200 objects of a given type now return the full count.
  3. Folder operations: Folder tools now work with all container types — Knowledge Centers, Knowledge Folders, and Process Model Folders are all supported by listFolderContents and searchFolders. searchFolders now also searches the Knowledge Center tree, not just Rules folders.

26.6.75

Improved security so that manipulating the MCP server cannot allow tool update or delete access.

26.6.70

Improved security so that manipulating the MCP server cannot allow tool update or delete access.

26.6.65

  1. SSO site auth fixed — Browser-based auth flow was broken on SSO-only Appian sites. Fix incorporated into the plugin.
  2. Impact analysis tool — New tool that uses impact analysis to find all dependents of a given object UUID, returning UUID, object type, name, and IA breadcrumb.