infra-ops-mcp
Allows running Ansible playbooks (with --check) and querying inventory.
Provides tools for managing Docker containers, images, networks, volumes, and Compose projects.
Provides tools for querying GitHub repositories and workflows using a GitHub token.
Provides tools to list GitHub Actions workflows and view their run history.
Provides tools to list GitLab pipelines and jobs.
Provides tools for managing Kubernetes pods, deployments, services, nodes, and cluster events.
Allows querying MongoDB and performing health checks.
Allows querying MySQL and performing health checks.
Allows read-only querying of PostgreSQL and performing health checks.
Allows querying Prometheus metrics.
Provides tools to list Pulumi stacks.
Provides Redis INFO and health check capabilities.
Provides tools to inspect Terraform state and run plans.
Provides CVE vulnerability scanning using Trivy.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@infra-ops-mcplist all running Docker containers"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
infra-ops-mcp
The most comprehensive MCP (Model Context Protocol) server for infrastructure operations. 92 tools across 13 categories covering everything from local system monitoring to multi-cloud management.
Features
92 Infrastructure Tools organized in 13 categories
Cross-platform: Windows (PowerShell), Linux, macOS
Multi-cloud: AWS, Azure, GCP
Containers: Docker + Kubernetes
Databases: PostgreSQL, MySQL, MongoDB, Redis
CI/CD: GitHub Actions, GitLab CI
IaC: Terraform, Ansible, Pulumi
Security: CVE scanning, secrets detection, TLS checks
Remote: SSH fleet management with connection pooling
3-tier permission model: SAFE, DANGEROUS, BLOCKED
Quick Start
Install
npm install -g infra-ops-mcpConfigure with Claude Desktop
Add to your Claude Desktop config (claude_desktop_config.json):
{
"mcpServers": {
"infra-ops": {
"command": "infra-ops-mcp",
"env": {
"GITHUB_TOKEN": "ghp_xxx",
"INFRA_AWS_REGION": "us-east-1"
}
}
}
}Run Standalone
# With default config
infra-ops-mcp
# With custom config
INFRA_CONFIG_PATH=./my-config.yaml infra-ops-mcpDevelopment
git clone https://github.com/your-org/infra-ops-mcp.git
cd infra-ops-mcp
npm install
npm run build
npm run devTool Categories
System (12 tools)
Tool | Tier | Description |
| SAFE | CPU cores, model, speed, load average |
| SAFE | RAM usage, swap, top memory consumers |
| SAFE | Disk space by mount point, inodes |
| SAFE | Process list with filter and sort |
| DANGEROUS | Kill process by PID |
| SAFE | System services status |
| DANGEROUS | Start/stop/restart services |
| SAFE | System uptime, last boot time |
| SAFE | User accounts, groups, logged in |
| SAFE | Cron jobs / Task Scheduler |
| SAFE | BIOS, motherboard, PCI devices |
| SAFE | Loaded drivers / kernel modules |
Network (9 tools)
Tool | Tier | Description |
| SAFE | Adapters, IPs, MAC, speed |
| SAFE | Routing table, default gateway |
| SAFE | DNS lookup (A, AAAA, MX, CNAME, etc.) |
| SAFE | Firewall rules list |
| SAFE | Open ports with associated process |
| SAFE | Active TCP/UDP connections |
| SAFE | WiFi SSID, signal, channel |
| SAFE | Network throughput measurement |
| SAFE | Hop-by-hop route trace |
Storage (7 tools)
Tool | Tier | Description |
| SAFE | RAID array status |
| SAFE | LVM volumes and groups |
| SAFE | Mounted filesystems |
| SAFE | Disk SMART health data |
| SAFE | Partition table info |
| SAFE | NFS exports and mounts |
| SAFE | Disk quotas by user/group |
Containers (18 tools)
Tool | Tier | Description |
| SAFE | List containers |
| SAFE | Container details |
| SAFE | Container logs |
| SAFE | Live container stats |
| DANGEROUS | Start container |
| DANGEROUS | Stop container |
| DANGEROUS | Restart container |
| SAFE | Local images |
| SAFE | Docker networks |
| SAFE | Docker volumes |
| SAFE | Compose project status |
| SAFE | Kubernetes pods |
| SAFE | Pod logs |
| SAFE | Deployments |
| SAFE | Services |
| SAFE | Cluster nodes |
| SAFE | Cluster events |
| DANGEROUS | Scale replicas |
Cloud (11 tools)
Tool | Tier | Description |
| SAFE | EC2 instances |
| SAFE | S3 buckets |
| SAFE | RDS instances |
| SAFE | Lambda functions |
| SAFE | CloudWatch metrics |
| SAFE | Route53 DNS zones |
| SAFE | Azure VMs |
| SAFE | AKS clusters |
| SAFE | Storage accounts |
| SAFE | GCE instances |
| SAFE | GKE clusters |
CI/CD (4 tools)
Tool | Tier | Description |
| SAFE | GitHub Actions workflows |
| SAFE | Workflow run history |
| SAFE | GitLab pipelines |
| SAFE | Pipeline jobs |
Database (8 tools)
Tool | Tier | Description |
| SAFE | PostgreSQL read-only query |
| SAFE | PostgreSQL health check |
| SAFE | MySQL read-only query |
| SAFE | MySQL health check |
| SAFE | MongoDB query |
| SAFE | MongoDB health check |
| SAFE | Redis INFO stats |
| SAFE | Redis health check |
IaC (5 tools)
Tool | Tier | Description |
| SAFE | Terraform state |
| DANGEROUS | Run terraform plan |
| SAFE | Ansible inventory |
| DANGEROUS | Run playbook (--check) |
| SAFE | Pulumi stacks |
Security (5 tools)
Tool | Tier | Description |
| SAFE | CVE vulnerability scan (Trivy) |
| SAFE | Secrets detection (Gitleaks) |
| SAFE | TLS certificate inspection |
| SAFE | CIS/STIG benchmarks |
| SAFE | Open port security audit |
Remote (3 tools)
Tool | Tier | Description |
| SAFE | Execute command via SSH |
| DANGEROUS | Command across multiple hosts |
| SAFE | Host inventory with status |
DNS (3 tools)
Tool | Tier | Description |
| SAFE | Query DNS records |
| SAFE | Global DNS propagation |
| SAFE | Zone transfer query |
Backup (3 tools)
Tool | Tier | Description |
| SAFE | Backup status check |
| SAFE | Verify backup integrity |
| DANGEROUS | Test restore to temp |
Monitoring (4 tools)
Tool | Tier | Description |
| SAFE | Query Prometheus metrics |
| SAFE | HTTP/TCP uptime check |
| SAFE | Active alerts |
| SAFE | SLA percentage calculator |
Security Model
The 3-tier permission system protects against unintended operations:
Tier | Behavior | Examples |
SAFE | No confirmation needed | All list, info, health, read-only queries |
DANGEROUS | Requires | process_kill, service_control, docker start/stop, fleet_command, terraform_plan |
BLOCKED | Disabled by default | DB writes, delete operations (enable in config) |
Example: Dangerous Operation
{
"name": "system_process_kill",
"arguments": {
"pid": 1234,
"confirm": true
}
}Without confirm: true, dangerous tools return an error message explaining the requirement.
Configuration
Config File (config/default.yaml)
The server loads configuration from:
./config/default.yaml(project directory)~/.infra-ops-mcp/config.yaml(user home)Environment variables (highest priority)
Environment Variables
Variable | Description |
| GitHub personal access token |
| GitLab access token |
| AWS region |
| AWS profile name |
| GCP project ID |
| Azure subscription ID |
| PostgreSQL host |
| PostgreSQL port |
| PostgreSQL user |
| PostgreSQL password |
| PostgreSQL database |
| Redis host |
| Redis port |
| Redis password |
Host Inventory (config/hosts.yaml)
Ansible-style host definitions for remote operations:
hosts:
- host: web-01.example.com
user: deploy
port: 22
privateKey: ~/.ssh/web_servers
groups:
- webservers
- production
labels:
environment: production
role: webArchitecture
src/
├── index.ts # Entry point
├── server.ts # MCP Server + StdioTransport
├── registry.ts # ToolRegistry with permission guards
├── core/ # Platform detection, executor, permissions, errors
├── infra/ # SSH pool, circuit breaker, cache, rate limiter
├── config/ # YAML config loader, env overrides
├── tools/ # 13 tool modules (76 tools total)
└── utils/ # Parsers, formattersRequirements
Node.js >= 18.0.0
Optional: Docker, kubectl, AWS CLI, Azure CLI, gcloud, Terraform, Ansible, Trivy, Gitleaks
Tools gracefully handle missing dependencies - if Docker isn't installed, Docker tools will return appropriate error messages rather than crashing.
License
MIT
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Latest Blog Posts
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/skyvanguard/infra-ops-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server