mcp-nomad

mcp-nomad lets AI assistants such as Claude inspect and operate a HashiCorp Nomad cluster: jobs, allocations, logs, nodes, variables, ACLs and more.

https://github.com/user-attachments/assets/731621d7-0acf-4045-bacc-7b34a7d83648

Quick start

Add the server to claude_desktop_config.json (requires Node.js):

{
  "mcpServers": {
    "mcp_nomad": {
      "command": "npx",
      "args": ["-y", "@kocierik/mcp-nomad"],
      "env": {
        "NOMAD_ADDR": "http://127.0.0.1:4646",
        "NOMAD_TOKEN": "<your-nomad-acl-token>"
      }
    }
  }
}

Add "-read-only" to args to expose only tools that cannot change the cluster.

Other ways to install; then use "command": "mcp-nomad" with the same env:

• npm: npm install -g @kocierik/mcp-nomad

• Binary: download from GitHub Releases

• Source: go install github.com/kocierik/mcp-nomad@latest

Related MCP server: @profullstack/mcp-server

Available tools

With -read-only the write column is not available at all. Whatever the mode, the Nomad ACLs attached to NOMAD_TOKEN decide what is actually allowed: use a token with only the permissions you want the assistant to have.

The server also provides resources (job specs and history, node status, allocation status and logs) and prompts.

Configuration

HTTP mode (optional)

Claude Desktop uses stdio and needs nothing from this section.

The sse and streamable-http transports are protected by a bearer token, separate from the Nomad token:

export MCP_TOKEN="<choose-a-long-random-token>"
mcp-nomad -transport=streamable-http

• Every request must send Authorization: Bearer <MCP_TOKEN>; the server refuses to start without it.

• The server listens on 127.0.0.1 only. Use -listen-address=0.0.0.0 (for example in Docker) only behind a trusted network or HTTPS reverse proxy.

• Browser clients from other origins must be listed in MCP_ALLOWED_ORIGINS (comma-separated, e.g. http://localhost:6274).

Details: SECURITY.md.

Upgrading from 0.3.x: HTTP transports now require MCP_TOKEN and listen on 127.0.0.1 by default.

Testing with MCP Inspector

npx @modelcontextprotocol/inspector npx @kocierik/mcp-nomad

To test HTTP mode, start the server as shown above with MCP_ALLOWED_ORIGINS="http://localhost:6274", open http://localhost:8080/mcp in the Inspector and enter MCP_TOKEN as the bearer token.

License

MIT, see LICENSE.