How to integrate Doppler MCP with Pi

Connect Pi to Doppler MCP. Get secrets for staging environment in doppler, add a new secret to marketing project, and more using natural language, with authentication handled for you.

Doppler logoDoppler
Api Key

Doppler is a secrets management platform for organizing and syncing environment variables. It lets teams securely centralize, share, and update secrets across infrastructure.

62 Tools

Introduction

Pi is a minimal, self-extensible coding agent that lives in your terminal — one agent loop over Claude, GPT-5, Gemini, Grok, DeepSeek, and 20+ other providers, with maximum extension surface and minimum product opinion. Its core ships four tools (read, write, edit, bash) and self-extends at runtime through skills, extensions, and packages.

This guide explains the easiest and most robust way to connect your Doppler account to Pi. You can do this through either Composio Connect CLI or Composio Connect MCP. Because Pi already runs shell commands as first-class tools and ships no built-in MCP, the CLI is the recommended path — it's faster to set up, needs no server config, and chains multi-step tasks more reliably. The MCP path is also fully supported through Pi's official pi-mcp-adapter extension.

Also integrate Doppler with

What is Composio Connect?

Composio Connect is a consumer offering that lets anyone plug 1,500+ applications directly into their agent harness — including Pi. It can:

  • Search and load tools from relevant toolkits on-demand, reducing context usage.
  • Chain multiple tools to accomplish complex workflows via a remote workbench, without excessive back-and-forth with the LLM.
  • Manage app authentication end-to-end with zero manual overhead.

Connect Doppler to Pi with Composio

Prerequisites: Install Pi

Pi needs Node.js 18+ (Node 22 recommended). Install the agent globally with npm:

bash
npm install -g --ignore-scripts @earendil-works/pi-coding-agent

On Linux or macOS you can use the installer script instead:

bash
curl -fsSL https://pi.dev/install.sh | sh

Then run pi in any project directory and authenticate your model provider — use /login inside Pi for subscription providers (Claude Pro/Max, ChatGPT, GitHub Copilot), or set an API key such as ANTHROPIC_API_KEY before starting. Confirm it's working:

bash
pi --version

Full first-run details are in the Pi Quickstart.

Option 1: Composio CLI (recommended)

Pi runs shell commands as first-class tools, so the Composio Universal CLI is the most natural fit — no MCP server to configure and reliable multi-step tool chaining. Install and authenticate:

bash
# Install the Composio CLI
curl -fsSL https://composio.dev/install | bash

# Log in to Composio
composio login

Connect to Doppler

Ask Pi to connect to Doppler, or simply request any Doppler-related task. Under the hood Pi calls Composio commands like any other shell tool:

bash
composio search "what can I do with Doppler?"
composio link doppler

On the first Doppler call, composio link doppler opens an OAuth prompt so you can authorize access. After that, every Doppler command works with your stored credentials automatically — just talk to Pi and it will search, execute, and chain Doppler tools as needed.

Option 2: Composio MCP

Pi's core intentionally ships no built-in MCP, but the official pi-mcp-adapter extension adds full MCP support — exposing every server through a single lightweight proxy tool (~200 tokens) instead of loading hundreds of tool definitions into context.

1. Install the MCP adapter extension

bash
pi install npm:pi-mcp-adapter

Restart Pi after installation.

2. Add the Composio MCP server

Create (or edit) a .mcp.json file in your project root, or ~/.config/mcp/mcp.json for a user-global setup:

bash
{
  "mcpServers": {
    "composio": {
      "url": "https://connect.composio.dev/mcp"
    }
  }
}

The adapter connects lazily by default — the server won't start until Pi actually calls one of its tools, and cached metadata keeps search and describe working without a live connection.

3. Authenticate

Run /mcp-auth inside Pi to open the authentication modal and select composio from the list. Complete the sign-in in your browser, then on the consent screen click Allow access to authorize Composio. Once approved, the server shows as connected inside Pi:

Pi /mcp-auth modal listing the composio MCP server
Composio OAuth consent screen with the Allow access button
Composio MCP server connected inside Pi

4. Done!

Confirm the server is live with /mcp to open the interactive panel, then ask Pi to connect to Doppler or request any Doppler-related task — it will prompt you to authorize Doppler on first use.

What is the Doppler MCP server, and what's possible with it?

The Doppler MCP server is an implementation of the Model Context Protocol that connects your AI agent and assistants like Claude, Cursor, etc directly to your Doppler account. It provides structured and secure access to your projects, environments, configs, secrets, service tokens, users, and webhooks, so your agent can inspect projects, review configurations, retrieve and update secrets, create service tokens, and audit workspace resources on your behalf.

  • Project and environment discovery: Have your agent list Doppler projects, inspect project details, and review the environments available within each project.
  • Configuration review: Let the agent list configurations for a project and retrieve a specific config when you need to check how an environment is organized.
  • Secret retrieval and updates: Direct your agent to list secret names, retrieve a specific secret, download configured secrets, or update secrets within a chosen config.
  • Service token management: Instruct your agent to create a service token for a config or list its existing service tokens for review.
  • Workspace and webhook auditing: Have your agent identify the authenticated user, list workplace users, and review webhooks configured for a project.

Way Forward

With Doppler connected, Pi can now act on your behalf whenever you ask it to.

From here, you can extend Pi further:

  • Connect more apps: Calendar, Slack, Notion, Linear, and hundreds of others are available through the same Composio Connect setup. Each new integration compounds what Pi can do for you.
  • Build workflows across tools: Once multiple apps are connected, Pi can chain actions together — turn an email into a calendar invite, a Slack message into a Linear ticket, or a meeting note into a follow-up draft.
  • Lean into Pi's extension surface: Wrap common Doppler flows as Pi skills or prompt templates so recurring tasks become one-line commands, and use directTools in the MCP adapter to promote your most-used Doppler tools into Pi's tool list directly.

If you run into trouble or want to share what you've built, join the community or check out the Docs for deeper configuration options.

TOOLS

Supported Tools

Every Doppler action and event your agent gets out of the box.

List Activity Logs

List workplace activity logs with pagination support.

Get Activity Log

Retrieve detailed information about a specific activity log entry.

Add Webhook

Tool to create a new webhook for a Doppler project.

Get Authenticated User Info

Tool to retrieve information about the authenticated user or token.

Get Config Log

Tool to retrieve a specific config log from Doppler.

List Config Logs

Tool to retrieve configuration change logs for a specific config in a project.

Rollback Config Log

Tool to rollback a config to a selected log version.

Clone Config

Tool to clone a branch config including all its secrets.

Create Config

Tool to create a branch config.

Delete Config

Tool to delete a config permanently.

Get Config

Tool to retrieve a specific Doppler config by project and config name.

List Doppler Configs

Tool to list configurations from a Doppler project.

Lock Config

Lock a Doppler config to prevent it from being renamed or deleted.

Unlock Config

Tool to unlock a config.

Update Config

Rename an existing Doppler config within a project.

Create Encrypted Share Link

Create a Doppler Share link for an end-to-end encrypted secret.

Create Plain Text Share Link

Tool to generate a Doppler Share link by sending a plain text secret.

Create Service Token

Tool to create a new service token for a Doppler config.

Delete Service Token

Tool to delete an existing service token from a Doppler config.

Delete Webhook

Tool to delete an existing webhook.

Disable Webhook

Tool to disable an existing Doppler webhook.

Revoke Dynamic Secret Lease

Revoke a dynamic secret lease immediately before its TTL expires.

Enable Webhook

Tool to enable a previously disabled webhook.

Create Environment

Create a new environment in a Doppler project.

Delete Environment

Tool to delete an environment.

Get Environment

Retrieves detailed metadata for a specific Doppler environment within a project.

List Environments

Tool to list all environments in a Doppler project.

Rename Environment

Rename an environment's display name within a Doppler project.

Get Webhook

Tool to retrieve an existing webhook by its slug.

Get Workplace User

Tool to retrieve a specific workplace user by their workplace_user id.

Remove Group Member

Remove a member from a Doppler group.

List Integrations

Tool to retrieve all existing integrations in Doppler.

List Invites

Tool to list open workplace invites.

List Change Requests

List existing change requests in the Doppler workplace.

List Project Members

Tool to list all members of a Doppler project including users, groups, service accounts, and invites.

List Service Tokens

Tool to list all service tokens for a specific Doppler config.

List Workplace Users

Tool to list all users in the Doppler workplace.

List Webhooks

Tool to list all webhooks configured for a Doppler project.

Remove Project Member

Tool to remove a member from a project.

Get Project Member

Retrieve a specific project member's details including their role and environment access permissions.

List Project Permissions

List all available project-level permissions in Doppler.

Get Project Role

Retrieve detailed information about a specific project role in Doppler, including its permissions, display name, identifier, creation timestamp, and whether it's a custom or built-in role.

List Project Roles

Tool to list all available project roles in Doppler.

Create Project

Tool to create a project.

Delete Project

Tool to delete a project permanently.

Get Project Details

Tool to retrieve details of a specific Doppler project by its identifier.

List Doppler Projects

Tool to list all Doppler projects in your workspace.

Delete Secret

Tool to delete a secret from a Doppler config.

Download Secrets

Tool to download secrets from a Doppler config in various formats.

Get Secret

Tool to retrieve a specific secret from a Doppler project config.

List Doppler Secrets

Tool to list all secrets for a specific Doppler config within a project.

List Secret Names

Tool to retrieve the list of secret names from a specific Doppler config.

Update Doppler Secrets

Tool to update secrets in a Doppler config.

Update Secret Note

Tool to update a note for a secret in Doppler.

Update Project

Tool to update an existing Doppler project's name or description.

Update Secret Note

DEPRECATED: Use DopplerSecretsUpdateNote instead.

Update Webhook

Tool to update an existing webhook configuration in Doppler.

Update Workplace Settings

Tool to update workplace settings in Doppler.

Get Workplace Information

Tool to retrieve workplace information from Doppler.

Get Workplace Role

Tool to retrieve workplace role information from Doppler.

List Workplace Roles

Tool to list all workplace roles in your Doppler workspace.

List Workplace Permissions

Retrieves all available workplace permissions in Doppler.

FAQ

Frequently asked questions

With a standalone Doppler MCP server, the agents and LLMs can only access a fixed set of Doppler tools tied to that server. However, with the Composio Tool Router, agents can dynamically load tools from Doppler and many other apps based on the task at hand, all through a single MCP endpoint.

Yes, you can. Pi fully supports MCP integration. You get structured tool calling, message history handling, and model orchestration while Tool Router takes care of discovering and serving the right Doppler tools.

Yes, absolutely. You can configure which Doppler scopes and actions are allowed when connecting your account to Composio. You can also bring your own OAuth credentials or API configuration so you keep full control over what the agent can do.

All sensitive data such as tokens, keys, and configuration is fully encrypted at rest and in transit. Composio is SOC 2 Type 2 compliant and follows strict security practices so your Doppler data and credentials are handled as safely as possible.

Start with Doppler.It takes 30 seconds.

Managed auth, hosted MCP servers, and every Doppler tool your agent needs.Free to start.

Start building