Return OpenShift MCP server, persistence, and scope model details.

Return MCP admin authorization status without exposing key material.

Verify an MCP_ADMIN_AUTH_KEY-compatible authorization key.

Rotate MCP admin authorization into Vault. The current key is required and the new key is never returned.

Call OpenShift API server health endpoint.

List OpenShift endpoints exposed by this MCP server.

Discover every Kubernetes, OpenShift, aggregated, operator, and custom API group/version installed on the cluster.

Discover resources, scope, verbs, short names, categories, and subresources for an installed API version.

List OpenAPI v3 schemas or retrieve one schema using an api/... or apis/... path returned by the index.

Operate on any discovered core, OpenShift, aggregated, operator, or custom resource using structured coordinates.

List OpenShift projects using the user's Vault-managed token.

Get details for one OpenShift project.

List pods for an OpenShift namespace.

Get the OpenShift and Kubernetes API server version.

Get one pod and its container/status details.

Get pod logs with container, previous instance, time, and tail controls.

List cluster or namespace events with field and event-type filters.

List deployments in a namespace.

Set deployment replicas through the scale subresource.

Restart a deployment rollout by updating its pod-template restart annotation.

List Kubernetes services in a namespace.

List OpenShift routes in a namespace.

Get one OpenShift route.

List OpenShift ClusterOperators and their conditions.

Get ClusterVersion status, desired version, history, and available updates.

List cluster nodes and their conditions.

Check whether the current user's OpenShift token may perform a resource action.

List RoleBindings across the cluster or in one namespace.

List installed CustomResourceDefinitions.

List Operator Lifecycle Manager subscriptions across the cluster or in one namespace.

Get pod or node resource usage from the Kubernetes Metrics API.

Generic OpenShift API request with user-scoped token resolution and mutating auth guard.

Set or rotate a user-scoped OpenShift bearer token. Token is stored in Vault, metadata in Postgres, and index entry in Vault.

Get user token metadata from Postgres and current Vault token index state.

Deactivate a user token in Vault index and remove the direct user token secret.

Read user-scoped configuration from Postgres.

Write user-scoped configuration to Postgres.

List Redshift clusters configured for a user without exposing credentials.

Get Redshift cluster connection metadata without exposing credentials.

Create or replace a named Redshift cluster configuration and its Vault-backed credentials.

Remove a named Redshift cluster configuration and its credentials.

Test connectivity to a named Redshift cluster.

Run a parameterized SQL statement against a named Redshift cluster.