Skip to main content
Glama
Sign In
MCP DevOps Toolbox

MCP DevOps Toolbox

by prashantyr
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

MCP DevOps Toolbox

A small MCP-style JSON-lines server for safe, local DevOps inspection. It has no cloud or external API dependency. Maintained by Prashant Rajguru (email).

flowchart LR
  C[MCP-style client] -->|strict JSON line| S[Tool router]
  S --> P[Path allowlist]
  P --> G[Read-only Git]
  P --> K[Kubernetes YAML validator]
  P --> T[Terraform plan summary]
  P --> L[Sanitized log analysis]

Quickstart

Requires Node 22.12+ and Git.

npm ci
npm run check
TOOLBOX_ROOT="$PWD" npm start

Request and sample response:

{"id":1,"tool":"validate_kubernetes","arguments":{"manifest":"examples/pod.yaml"}}
{"id":1,"result":[{"document":1,"valid":true,"errors":[]}]}

Tools accept strict schemas and only canonical paths beneath TOOLBOX_ROOT. Git commands are fixed, argument-separated and read-only. Terraform input is an already-generated terraform show -json file. Log output is bounded and common credentials are redacted.

Related MCP server: Codebase MCP Bridge

Security

Run as an unprivileged user against a narrow dedicated root. Symlink resolution prevents directory escape. This process does not invoke shells or Kubernetes/Terraform CLIs. Redaction is defensive, not a data-loss-prevention boundary; do not feed it secrets or expose stdin/stdout to untrusted networks.

Status and limitations

Portfolio/reference status, not a complete MCP protocol SDK implementation. Kubernetes validation checks document shape, not OpenAPI schemas or admission policy. Log classification is heuristic. Terraform summaries trust valid JSON and do not evaluate policy or provider behavior.

License

MIT © 2026 Prashant Rajguru.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    This server cannot be deployed

    Claude Code, inside the Godot 4 editorFlockbay puts an AI agent in the real Godot 4 editor: it writes GDScript, runs your game and fixes what breaks. Free, or bring your own Claude Code or Codex.flockbay.comAd

    Resources

    Related MCP Connectors

    Related MCP Servers

    • local-mcp-toolbox

      chriswayneh
      A
      license
      A
      quality
      B
      maintenance
      A secure, local-first MCP server for read-only inspection and troubleshooting of development environments, exposing narrow, typed, auditable capabilities for repository inspection, log summarization, Docker review, and security scanning without granting unrestricted machine access.
      8
      MIT

    • Codebase MCP Bridge

      BTawaifi
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables LLM clients to search, read, and patch a trusted source repository with rollback-safe edits, Git operations, and allowlisted validation over stdio or OAuth-protected HTTP. Keeps secrets and arbitrary shell access out of reach while enforcing bounded batched I/O and operator-controlled workspace trust.
      MIT

    • verdex

      Yilanchia
      A
      license
      Not graded
      quality
      B
      maintenance
      Exposes read-only local analysis tools for source auditing, web traffic review, binary reverse engineering, exploit scaffolding, OSINT, and reporting via JSON-RPC over stdio, enabling LLMs to orchestrate evidence-based security workflows without executing targets or sending network requests.
      1
      MIT

    • diff-sentinel

      TonyStarkgenetic
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI assistants to audit git diffs, scan for leaked secrets and unsafe APIs, detect breaking changes, triage issues, generate changelogs, and assess repository hygiene through native stdio JSON-RPC tools.
      7
      Apache 2.0