# Laravel Kick

> MCP server and REST API for Laravel application introspection

- **Type:** MCP server
- **Install:** `agentstack add mcp-stumason-laravel-kick`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [StuMason](https://agentstack.voostack.com/s/stumason)
- **Installs:** 0
- **Category:** [Cloud & Infrastructure](https://agentstack.voostack.com/c/cloud-infrastructure)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [StuMason](https://github.com/StuMason)
- **Source:** https://github.com/StuMason/laravel-kick
- **Website:** https://stumason.github.io/laravel-kick

## Install

```sh
agentstack add mcp-stumason-laravel-kick
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Laravel Kick

[](https://github.com/StuMason/laravel-kick/actions/workflows/tests.yml)
[](https://github.com/StuMason/laravel-kick/actions/workflows/lint.yml)
[](https://packagist.org/packages/stumason/laravel-kick)
[](LICENSE)

MCP server and REST API for Laravel application introspection.

Connect your MCP client directly to your Laravel app. Check health, read logs, inspect queues, run commands - all through natural conversation.

**[Documentation](https://stumason.github.io/laravel-kick/)**

## Installation

```bash
composer require stumason/laravel-kick
```

Add to `.env`:

```bash
KICK_ENABLED=true
KICK_TOKEN=your-secure-random-token
```

## MCP Setup

Add to `~/Library/Application Support/Claude/claude_desktop_config.json`:

```json
{
  "mcpServers": {
    "my-app": {
      "command": "npx",
      "args": [
        "mcp-remote@latest",
        "https://your-app.com/mcp/kick",
        "--transport",
        "http-only",
        "--header",
        "Authorization:${AUTH_HEADER}"
      ],
      "env": {
        "AUTH_HEADER": "Bearer your-kick-token"
      }
    }
  }
}
```

Then ask the LLM:
- "Check the health of my app"
- "Show me the last 20 ERROR entries in the logs"
- "What's failing in the queue?"
- "Clear the config cache"

## Available Tools

| Tool | Description |
|------|-------------|
| `kick_health` | Database, cache, storage, redis connectivity |
| `kick_stats` | CPU, memory, disk, uptime |
| `kick_logs_list` | List log files |
| `kick_logs_read` | Read logs with filtering |
| `kick_queue_status` | Queue overview, failed jobs |
| `kick_queue_retry` | Retry failed jobs |
| `kick_artisan_list` | List available commands |
| `kick_artisan_run` | Execute whitelisted commands |

## REST API

The same functionality is available via HTTP:

```bash
curl -H "Authorization: Bearer $TOKEN" https://app.com/kick/health
curl -H "Authorization: Bearer $TOKEN" https://app.com/kick/stats
curl -H "Authorization: Bearer $TOKEN" "https://app.com/kick/logs/laravel.log?level=ERROR"
curl -X POST -H "Authorization: Bearer $TOKEN" -d '{"command":"cache:clear"}' https://app.com/kick/artisan
```

See the [API documentation](https://stumason.github.io/laravel-kick/api/endpoints/) for all endpoints.

## Security

- Disabled by default (`KICK_ENABLED=false`)
- Token-based authentication with scopes
- Artisan command whitelist
- Path traversal protection
- Automatic PII scrubbing from logs

## Requirements

- PHP 8.4+
- Laravel 12

## License

MIT

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [StuMason](https://github.com/StuMason)
- **Source:** [StuMason/laravel-kick](https://github.com/StuMason/laravel-kick)
- **License:** MIT
- **Homepage:** https://stumason.github.io/laravel-kick

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** yes
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** yes
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-stumason-laravel-kick
- Seller: https://agentstack.voostack.com/s/stumason
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.