infrahub-mcp
OfficialClick on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@infrahub-mcplist all devices in the 'production' location"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Infrahub MCP Server
Infrahub MCP Server connects AI assistants and IDE agents to Infrahub using the open Model Context Protocol standard — so agents can query, create, update, and propose changes to your infrastructure data through a consistent, audited interface. It works with any MCP-compatible client (Claude Desktop, VS Code, Cursor, CLI agents, and more) with no custom glue code required.
All writes are branch-isolated and require human approval before merging — agents never modify your default branch directly.
Installation
pip install infrahub-mcp
# or
uv pip install infrahub-mcpDocker:
docker pull registry.opsmill.io/opsmill/infrahub-mcp:latest
# or use Docker Compose:
docker compose up -dRelated MCP server: Fireblocks MCP Server
Quickstart
Point the server at your Infrahub instance via environment variables, then run it over the transport your client expects.
stdio (default — for Claude Desktop, VS Code, Cursor):
export INFRAHUB_ADDRESS=http://localhost:8000
export INFRAHUB_API_TOKEN=<your-token>
infrahub-mcpStreamable HTTP (for remote clients, sidecar deployments):
infrahub-mcp --transport streamable-http --host 0.0.0.0 --port 8001What you can do with it
Query your infrastructure data from natural language — find devices, interfaces, IP addresses, or any kind in your schema, with attribute filtering and partial-match search.
Explore your schema without leaving the conversation — the server exposes your catalog, per-kind attribute/filter maps, and the GraphQL SDL as MCP resources.
Make changes on isolated branches — writes land on an auto-created session branch (
mcp/session-YYYYMMDD-<hex>); the default branch is never touched directly.Submit changes for human review — call
propose_changesto open a Proposed Change for approval before merging.Run arbitrary GraphQL — execute any query or mutation against the Infrahub API when you need full control.
Documentation
Full documentation, including client configuration for Cursor, VS Code, Claude Desktop, and Claude Code, is available at the Infrahub MCP Server docs site.
About Infrahub
Infrahub is an open source infrastructure data management and automation platform (AGPLv3), developed by OpsMill. It gives infrastructure and network teams a unified, schema-driven source of truth — devices, topology, IP space, configuration — with built-in version control, a generator framework for automation, and native integrations with Git, Ansible, Terraform, and CI/CD pipelines.
License
Apache 2.0 — see LICENSE.
Available Tools
12 toolsfind_pathsARead-only
Find the shortest path(s) between two nodes in the Infrahub graph.
Use this to answer "how are these two objects connected?". A result with
count of 0 means no path exists within max_depth. Requires Infrahub 1.10+.
| Name | Required | Description | Default |
|---|---|---|---|
| branch | No | Branch to query. Defaults to the default branch. | |
| source | Yes | Start node: a UUID or kind-qualified HFID (e.g. 'InfraDevice__atl1-edge1'). | |
| max_depth | No | Maximum relationship hops to explore (1-30). | |
| destination | Yes | End node: a UUID or kind-qualified HFID. | |
| kind_filter | No | Only traverse through nodes of these kinds. | |
| relationship_filter | No | Only follow these schema relationship identifiers (e.g. 'device__interface'). |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnlyHint=true. The description adds that it requires Infrahub 1.10+ and that a count of 0 indicates no path. No mention of performance, return format, or other behavioral traits beyond the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise: two short sentences plus a line about version requirement. Every sentence adds value, and the key information is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 6 parameters, an output schema, and annotations, the description covers the essential behavior (shortest paths, count meaning, version dependency). It could mention that multiple paths may be returned or that path order is not guaranteed, but overall is quite complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so parameters are already well-documented. The description adds minimal extra meaning (e.g., clarifying source and destination as UUID or HFID), but this is already in the schema. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool finds shortest path(s) between two nodes in the Infrahub graph, and provides a usage question as context. It is specific about the resource and action, but does not explicitly differentiate from sibling tool 'find_reachable'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives a typical use case ('how are these two objects connected?') and explains that a count of 0 means no path within max_depth. However, it does not provide explicit when-to-use or when-not-to-use guidance relative to other tools like find_reachable.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
find_reachableARead-only
Find nodes of the given kinds reachable from a source node (impact analysis).
Use this to answer "what depends on / is connected to this object?" — for blast-radius and dependency discovery. Requires Infrahub 1.10+.
| Name | Required | Description | Default |
|---|---|---|---|
| branch | No | Branch to query. Defaults to the default branch. | |
| source | Yes | Source node: a UUID or kind-qualified HFID. | |
| max_depth | No | Maximum traversal depth (1-30). | |
| max_results | No | Maximum distinct reachable nodes to return (1-200). | |
| target_kinds | Yes | Node kinds to search for, reachable from the source. | |
| shortest_paths_only | No | Return only the shortest path to each target. |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so description does not need to restate safety. It adds version requirement (Infrahub 1.10+), but no further behavioral disclosure (e.g., performance, rate limits). Score 3 is appropriate given annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with purpose, then usage guidance. No wasted words or redundant information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Description covers core purpose and usage context. With output schema existing and annotations present, it provides sufficient guidance. Lacks mention of branch or depth parameters, but these are detailed in schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so baseline is 3. Description does not add additional parameter meaning beyond schema; it only summarizes purpose.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool finds reachable nodes of given kinds from a source node for impact analysis. It uses specific verbs and resource, and distinguishes from siblings like find_paths by focusing on reachability rather than paths.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit use case ('what depends on / is connected to this object?') and context (blast-radius, dependency discovery). Does not name alternative tools explicitly but implies when to use.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_nodesARead-only
List nodes of a specific kind — the default read path for typed queries with optional filtering and pagination.
Prefer this over query_graphql when you just need objects of one kind:
results come back as display labels (fast, token-cheap) or full attribute
dicts (include_attributes=True).
To discover available kinds, read the infrahub://schema resource.
If your client does not support MCP resources, call the get_schema tool instead.
To discover available filters for a kind, read infrahub://schema/{kind}
or call get_schema(kind='...').
Filter keys follow the schema's filter map. Attribute filters use
<attr>__value (e.g. {"name__value": "atl1"}) and relationship
filters chain via <rel>__<attr>__value (e.g.
{"site__name__value": "atl1"}). See infrahub://schema/{kind} for
the full list of valid keys.
Use offset and limit to page through large result sets. The response
always includes total_count and has_more so you know when to stop.
| Name | Required | Description | Default |
|---|---|---|---|
| kind | Yes | Kind of the objects to retrieve. Check infrahub://schema for valid kinds. | |
| limit | No | Maximum nodes to return. Default 50. Pass -1 for all results (caution: may be expensive). | |
| branch | No | Branch to query. Defaults to the default branch. | |
| offset | No | Number of results to skip for pagination. Use with limit to page through results. | |
| filters | No | Attribute/relationship filters. Keys follow the schema's filter map (e.g. {"name__value": "atl1"} or {"site__name__value": "atl1"}). See infrahub://schema/{kind} for the full filter map. | |
| partial_match | No | Use partial (substring) matching for string filters. | |
| include_attributes | No | When True, return full attribute values in TOON tabular format instead of just display labels. More expensive — omit when you only need names/counts. |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint annotation, the description details output formats (display labels vs. full attributes), pagination metadata (total_count, has_more), and warns about expensive queries with limit=-1.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured, starting with purpose, then usage, filters, and pagination. Every sentence is informative with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the output schema exists, the description adequately covers all parameters and adds context for discovering kinds and filters, making it fully complete for effective use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Despite 100% schema coverage, the description adds significant value by explaining filter key patterns (e.g., name__value, rel__attr__value), include_attributes behavior, and pagination mechanics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists nodes of a specific kind with filtering and pagination, and explicitly distinguishes it from query_graphql by noting when to prefer it.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly advises preferring this over query_graphql for single-kind queries, and references get_schema for discovering kinds and filters, providing clear when-to-use guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_schemaARead-only
Discover available schema kinds — call this first when you don't know what kinds or filters exist.
Without a kind, returns the catalog of all kinds (compact JSON).
With a kind, returns its attributes, relationships, and the full set
of filter keys accepted by get_nodes (TOON-encoded for token efficiency).
Each relationship inlines one level of its peer schema unless expand is
False (or the server default disables it).
Prefer reading the infrahub://schema resource if your client supports
MCP resources — this tool provides the same data for clients that don't.
| Name | Required | Description | Default |
|---|---|---|---|
| kind | No | Kind to get detail for. Omit to list all available kinds. | |
| branch | No | Branch to query. Defaults to the default branch. | |
| expand | No | Inline one level of each relationship's peer schema. Defaults to the server's INFRAHUB_MCP_SCHEMA_EXPAND_PEERS setting when omitted. |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Description provides detailed behavior: without kind returns catalog, with kind returns attributes/relationships/filter keys, expand controls inline peering. Aligns with readOnlyHint annotation and adds context beyond it, such as TOON-encoding and server defaults.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three paragraphs: purpose, behavior with/without kind, and alternative. Each sentence adds information; no fluff. Could be slightly more compact but well structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of an output schema, the description sufficiently covers return types and edge cases (default branch, server expand setting). No gaps remain for a discovery tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Although schema coverage is 100%, the description adds value by explaining the effect of each parameter (e.g., kind changes the output, expand inlines peer schema) and mentions TOON-encoding for efficiency.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Discover available schema kinds' and instructs to call it first when kinds or filters are unknown. It distinguishes itself from sibling tools like get_nodes by focusing on schema metadata.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says when to use ('call this first when you don't know what kinds or filters exist') and suggests an alternative resource (infrahub://schema) for clients that support MCP resources. Lacks explicit when-not-to-use but context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_session_infoARead-only
Return the current MCP session state — call before writes to know which branch they target.
Reports the active session branch (if any) and the Infrahub instance address.
A session branch is lazily auto-created on the first write tool call
(node_upsert / node_delete / mutate_graphql) and is named
mcp/session-YYYYMMDD-<hex>. Before that first write, session_branch
is None and all read tools target the default branch.
Typical uses:
Confirm which branch a proposed change would merge from.
Decide whether a write is about to open a new session branch.
Display the active branch to the user.
Returns:
Dict with session_branch (str or null), infrahub_address, and has_session_branch.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description fully discloses the read-only nature (matches readOnlyHint=true) and elaborates on the lazy creation of session branches, including the naming pattern and behavior before first write. This goes well beyond the annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured: a clear one-sentence purpose, followed by detailed behavior, typical uses, and a return specification. Every sentence adds value without extraneous text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple (0 params, read-only) and the description covers all relevant aspects: purpose, behavior with/without session, return fields. It has an output schema but the description already lists the key names, making it fully self-contained.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has no parameters (0 params), so schema coverage is 100% trivially. The description adds no parameter info because none are needed. Baseline for 0 params is 4.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The tool name 'get_session_info' is self-descriptive. The description states it returns the current MCP session state, explicitly mentioning the branch and instance address. It clearly distinguishes from sibling tools (which focus on nodes, schema, mutations) by being the only session-related tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description advises calling before writes to know which branch they target, and explains when session_branch is None vs. set. It gives typical use cases. Although it does not explicitly list when not to use it, the context is clear and no alternative tool serves the same purpose.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
mutate_graphqlADestructive
Execute a GraphQL mutation against Infrahub — use only for complex writes that typed tools can't express.
Prefer node_upsert (create/update scalar attributes) or node_delete
(remove a node) for straightforward changes; they validate against the
schema and produce clearer audit entries. Reach for mutate_graphql
when you need relationship edits, bulk operations, or any mutation shape
not covered by the typed tools. For reads, use query_graphql.
The mutation always runs on the active session branch (auto-created on the
first write of the session, mcp/session-YYYYMMDD-<hex>). There is no branch
override — writes are isolated to the session, and changes reach the default
branch only through propose_changes and human review. To target a different
branch deliberately, switch the session with reset_session_branch first.
Branch- and schema-management mutations are rejected.
To discover available kinds and their attributes, read the infrahub://schema
resource or call the get_schema tool.
For the full GraphQL SDL, read infrahub://graphql-schema.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | GraphQL mutation to execute on the active session branch. |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Description adds significant context beyond annotations: mutation runs on active session branch, no branch override, writes are isolated to session, changes need propose_changes for default branch, and branch/schema mutations are rejected. No contradiction with annotations (destructiveHint=true, readOnlyHint=false).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Well-structured with multiple paragraphs, each adding value: purpose, comparison with siblings, branch behavior, restrictions, and pointers to related resources. No unnecessary words; every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Fully explains the tool's behavior, constraints, and integration with other tools (e.g., reset_session_branch, propose_changes). Output schema exists, so return values are covered. No gaps for a complex write tool with a single string parameter.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Only one parameter ('query') with schema description already stating 'GraphQL mutation to execute on the active session branch.' With 100% schema coverage, the description adds little extra value beyond the param description, though it provides context on allowed mutations and suggests using get_schema for discovery.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool executes a GraphQL mutation against Infrahub and distinguishes it from sibling tools (node_upsert, node_delete, query_graphql) by specifying its use for complex writes, relationship edits, and bulk operations not covered by typed tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly provides when to use (complex writes) and when to avoid (prefer node_upsert/node_delete for straightforward changes, query_graphql for reads). Names alternatives and explains branch behavior and restrictions, giving clear guidance on tool selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
node_deleteADestructive
Delete a node in Infrahub on the active session branch.
The deletion is applied to the session branch only and is not visible on the
default branch until a proposed change is merged.
To discover available kinds, read the infrahub://schema resource.
If your client does not support MCP resources, call the get_schema
tool instead.
| Name | Required | Description | Default |
|---|---|---|---|
| id | No | UUID of the node to delete. | |
| hfid | No | Human-friendly ID of the node to delete, as a list of string segments. | |
| kind | Yes | Kind of the node to delete. Check infrahub://schema. |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already provide destructiveHint: true, so the description does not need to emphasize destructiveness. It adds value by explaining the session-branch behavior and the need for schema discovery, going beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with an initial clear statement, followed by branch context, and then prerequisites. Every sentence adds value without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of an output schema and annotations, the description covers the essential context: core action, branch behavior, and prerequisite schema discovery. It could be more complete by noting the return value (though output schema may cover that) but is generally sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% description coverage, so the baseline is 3. The description does not add significant meaning beyond the schema, except for referencing the schema resource for the kind parameter. It does not explain the difference between id and hfid.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Delete a node in Infrahub on the active session branch', providing a specific verb and resource. This distinguishes it from sibling tools like get_nodes, node_upsert, and others.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains that deletion applies only to the session branch and not the default branch until a proposed change is merged. It also provides guidance on discovering kinds via the schema resource or get_schema tool. However, it does not explicitly state when not to use the tool or provide direct alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
node_upsertA
Create or update a node in Infrahub on the active session branch.
The session branch is auto-created on the first write of the session
(mcp/session-YYYYMMDD-<hex>). Use propose_changes to open a
review once your changes are ready.
To discover available kinds and attributes, read the infrahub://schema
resource. If your client does not support MCP resources, call the
get_schema tool instead.
Create: omit both
idandhfid.Update: supply either
idorhfidto identify the target node.
Only scalar attribute fields are accepted in data. To set relationship
fields, use mutate_graphql with an appropriate GraphQL mutation.
| Name | Required | Description | Default |
|---|---|---|---|
| id | No | UUID of an existing node to update. Omit to create a new node. | |
| data | Yes | Flat {attribute: value} map. See infrahub://schema/{kind} for valid names. Scalar attributes only; use mutate_graphql for relationships. | |
| hfid | No | Human-friendly ID of an existing node to update, as a list of string segments. Omit to create a new node. | |
| kind | Yes | Kind of the node to create or update. Check infrahub://schema. |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Disclosures beyond annotations: writes on active session branch, session branch auto-created, only scalar attributes in data, and recommends propose_changes for reviews. No contradiction with annotations (readOnlyHint=false, destructiveHint=false).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
First sentence states purpose, followed by clear bullet points for create/update distinction and constraint on data. No filler, every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 4 parameters, output schema present, and tool complexity, description covers create/update logic, data constraints, schema discovery, session workflow, and sibling delegation. Very complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, baseline 3. Description adds value by clarifying that kind should be checked via schema resource, data should be scalar-only, and id/hfid are mutually exclusive for updates. Slightly above baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states 'Create or update a node in Infrahub on the active session branch', specifying verbs and resource. Differentiates from siblings by directing relationship fields to mutate_graphql and session management to propose_changes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit guidelines: omit id/hfid for creation, supply one for update; use discover schema via infrahub://schema or get_schema; use mutate_graphql for relationships; session branch and propose_changes are explained.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
propose_changesA
Open a proposed change (pull request) from the active session branch to the default branch.
Creates a CoreProposedChange in Infrahub so a human can review, approve,
and merge the changes made during this session. The session branch remains
active after calling this — you can continue making changes.
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | Title for the proposed change (equivalent to a PR title). | |
| description | No | Optional description explaining the motivation for the changes. | |
| destination_branch | No | Branch to merge into. Defaults to the instance's default branch (resolved automatically). Override only when merging into a non-default branch. |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate not read-only, not destructive, not idempotent. The description confirms it creates a new proposed change (write operation), notes session remains active, and adds behavioral context beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences in first paragraph, second paragraph adds key behavioral detail. Front-loaded purpose statement. Every sentence earns its place with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given output schema exists, description doesn't need return details. It covers purpose, effect, and branch behavior. Could mention error handling or permissions but not required for basic usage.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptive parameter names and descriptions. The tool description adds no extra meaning beyond what the schema already provides, so baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it opens a proposed change (pull request) from the active session branch to the default branch, creating a CoreProposedChange for human review. It uses specific verb and resource, and distinguishes from siblings which are query/mutation tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage after making changes, and states the session remains active for further modifications. It doesn't explicitly list alternatives but context clarifies it's for proposing a batch of changes for review.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
query_graphqlARead-only
Execute a read-only GraphQL query against Infrahub — use for reads only, never mutations.
Mutations are rejected at the AST level: use mutate_graphql instead
(available when write mode is enabled). For simple attribute reads, prefer
get_nodes / search_nodes — use GraphQL only when you need relationship
traversal, aggregation, or fields not exposed by the typed tools.
To discover available kinds and their attributes, read the infrahub://schema
resource. If your client does not support MCP resources, call the get_schema
tool instead. For the full GraphQL SDL, read infrahub://graphql-schema.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | GraphQL query string. Only queries are allowed — use mutate_graphql for mutations. | |
| branch | No | Branch to execute the query against. Defaults to None (uses default branch). |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true. The description adds that mutations are rejected at the AST level, which provides concrete behavioral context. However, it does not detail other potential behaviors like rate limits or caching, but for a read-only tool this is sufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and well-structured: it states the purpose first, then provides usage guidelines, and ends with schema discovery references. Every sentence adds value with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers purpose, when to use, alternatives, schema discovery, and the behavioral constraint (AST-level rejection of mutations). Given that an output schema exists, the tool definition is complete for an agent to select and invoke correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% (both parameters have descriptions). The description repeats that the `query` parameter is for GraphQL queries only and that `branch` defaults to None (uses default branch). It adds no new information beyond the schema, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Execute a read-only GraphQL query against Infrahub — use for reads only, never mutations.' It specifies the verb and resource ('execute a GraphQL query') and distinguishes from mutations, including naming the sibling tool `mutate_graphql` for mutation use.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on when to use this tool vs alternatives: 'For simple attribute reads, prefer get_nodes / search_nodes — use GraphQL only when you need relationship traversal, aggregation, or fields not exposed by the typed tools.' It also explains that mutations are rejected and directs to `mutate_graphql` for mutations.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
reset_session_branchA
Reset or switch the active session branch for the current MCP session.
Use this to recover or take control of which branch your writes target:
No
branch— clears the cached session branch; the next write auto-creates a fresh one. Useful after you have merged your work and want to start a new change set.With
branch— points this session at the named branch. If it does not exist and the name matches the configured branch pattern, it is created and reported. The instance default branch and merged/read-only branches are rejected.
Note: a merged or deleted session branch is recovered automatically on the next write — this tool is the explicit override on top of that.
Affects only the calling session; other sessions are unaffected.
| Name | Required | Description | Default |
|---|---|---|---|
| branch | No | Target branch. Omit to drop the cached session branch so the next write creates a fresh one. Provide a name to switch this session to that branch (created if it does not exist and the name matches the configured pattern). |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses behavioral traits beyond annotations: creates branches if pattern matches, rejects certain branches, affects only calling session. Annotations indicate non-read-only and non-destructive, which aligns. No contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Well-structured with bullet points and clear sections. Every sentence adds value; no fluff. Appropriate length (~150 words) for the complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (branch management with two modes), the description covers behavior, constraints, and automatic recovery. Output schema exists so return values are not needed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema already describes the parameter well (100% coverage), but description adds behavioral context like two modes and rejection rules, enhancing understanding beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool resets or switches the active session branch with explicit modes (with/without branch). It distinguishes from sibling tools like get_session_info or mutate_graphql by focusing on branch management.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides clear guidance on when to use each mode (after merging work or to switch to a named branch) and mentions constraints (rejected branch types, automatic recovery). Does not explicitly compare to siblings but gives sufficient context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_nodesARead-only
Find nodes of a specific kind by partial substring — use when you only know part of a value.
Matches the query as a substring against all attributes of the kind
via Infrahub's any__value filter with partial_match=True. Works
uniformly on concrete kinds (e.g. LocationSite) and abstract/generic
kinds (e.g. CoreNode) — agents can ping any kind without first
checking whether it has a name attribute.
For a filter on one specific attribute (or combining multiple filters),
use get_nodes with an explicit filters dict instead.
Each result is labelled with the node's display_label when present,
falling back to its HFID (kind-prefixed) and finally its UUID — so
generic-kind results that lack a display_label still return a
human-readable identifier rather than a bare UUID.
To discover available kinds, read the infrahub://schema resource.
If your client does not support MCP resources, call the get_schema tool instead.
| Name | Required | Description | Default |
|---|---|---|---|
| kind | Yes | Kind to search within. Check infrahub://schema for valid kinds. | |
| limit | No | Maximum number of results to return. | |
| query | Yes | Partial substring matched across all attributes of the kind via Infrahub's ``any__value`` filter with ``partial_match=True``. Works for both concrete kinds (e.g. ``LocationSite``) and abstract/generic kinds (e.g. ``CoreNode``). | |
| branch | No | Branch to query. Defaults to the default branch. |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnlyHint=true. Description adds that it uses Infrahub's any__value filter with partial_match=True, and explains result labeling fallback (display_label, HFID, UUID). No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is organized into clear paragraphs, each sentence serving a purpose. Could be slightly more concise, but front-loads the core purpose and efficiently covers usage, behavior, and alternatives.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given output schema exists, description covers all necessary context: purpose, usage guidance, behavior, parameter semantics, and alternatives. Falls back labeling explanation is helpful. No gaps identified.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, but description adds meaning: explains query is partial substring, kind can be concrete or abstract, branch defaults to default branch, and limit has min/max constraints. These add value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states it finds nodes of a specific kind by partial substring, distinguishing it from get_nodes which filters on specific attributes. It specifies the verb 'Find' and resource 'nodes', making the purpose explicit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly guides when to use (when only part of a value is known) and when to use get_nodes instead (for specific attribute filters). Also mentions how to discover kinds via schema resource or get_schema tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
TDQS
Each tool has a clearly distinct purpose. For instance, get_nodes and search_nodes both return nodes but are differentiated by filtering vs substring search. Graph traversal tools find_paths and find_reachable serve different analyses. Session management tools are distinct. No ambiguity.
All tool names follow a verb_noun pattern with underscores, using verbs like find, get, mutate, node_, propose, query, reset, search. No mixing of conventions (e.g., camelCase). The pattern is consistent and predictable.
With 12 tools covering schema discovery, node CRUD, graph traversal, GraphQL operations, and session management, the count is well-scoped for the server's purpose. It is neither too few nor too many, each tool earns its place.
The tool set provides comprehensive coverage: schema introspection, node create/read/update/delete, search, graph path analysis, GraphQL read/write, and session lifecycle management. No obvious missing operations for the domain.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Query your team's drift, vulnerability, and upgrade data from any AI assistant. OAuth 2.1, 51 tools.
Intelligent context infrastructure for AI teams: knowledge graph, sessions, tasks, documents.
A comprehensive Model Context Protocol (MCP) server that enables AI assistants to interact with yo…
The Cortex MCP server provides read-only access to real-time engineering context from the Cortex developer portal, allowing AI coding assistants to answer natural language questions about your organization's catalog (microservices, libraries, domains, teams, infrastructure), scorecards (engineering standards and best practices), initiatives (goals and deadlines), and Engineering Intelligence metrics. It includes tools for querying documentation, tracking personal entities, and accessing AI-assisted insights across the entire Cortex ecosystem.
Related MCP Servers
- AlicenseDqualityDmaintenanceEnables AI assistants to manage cloud infrastructure using Pulumi by running commands like preview, deploy, and stack output retrieval through the Model Context Protocol.59,758Apache 2.0

Fireblocks MCP Serverofficial
AlicenseNot gradedqualityCmaintenanceEnables AI assistants to securely interact with Fireblocks services through the Model Context Protocol, supporting transaction management, vault and exchange account queries, network connections, and workspace user management.2310MIT- AlicenseNot gradedqualityDmaintenanceEnables AI assistants to interact with GitHub repositories, issues, pull requests, and content via the Model Context Protocol.1MIT
- AlicenseNot gradedqualityCmaintenanceEnables AI assistants to manage OpenStack cloud resources including compute, images, identity, network, and block storage via the Model Context Protocol.20Apache 2.0
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/opsmill/infrahub-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server