Exoscale MCP Server

An MCP (Model Context Protocol) server that enables AI assistants to manage Exoscale cloud infrastructure. Supports both stdio and Streamable HTTP transports with read-only mode enabled by default for safety.

Features

• 10 composite tools covering Compute, SKS (Kubernetes), DNS, DBaaS, Block Storage, and Object Storage

• 4 read-only resources for reference data (zones, instance types, templates, database plans)

• Dual transport — stdio for local use (Claude Desktop, Kiro) and HTTP for remote/shared deployments

• Read-only by default — write operations require explicit opt-in via EXOSCALE_MCP_READ_ONLY=false

• Dry-run support — preview any mutation before executing

• EXO2-HMAC-SHA256 authentication with env var and config file credential resolution

Related MCP server: TianGong-AI-MCP

Quick Start

# Install dependencies
npm install

# Build
npm run build

# Run in stdio mode (default, read-only)
EXOSCALE_API_KEY=your-key EXOSCALE_API_SECRET=your-secret npm start

# Run in HTTP mode
npm run start:http

Configuration

CLI flags --http and --port <n> override the environment variables.

Credential Resolution

1. EXOSCALE_API_KEY + EXOSCALE_API_SECRET environment variables

2. ~/.exoscale/config file (INI format, [default] section)

Safety Model

The server implements three layers of safety:

1. Read-only mode (default ON) — All mutations return a clear error message directing the user to set EXOSCALE_MCP_READ_ONLY=false

2. Dry-run mode — Pass dryRun: true to any mutating action to preview what would happen

3. Destructive annotations — Tools are annotated with destructiveHint: true so MCP clients can prompt for confirmation

Tools

Resources

MCP Client Configuration

Kiro / Claude Desktop (stdio)

Add to your MCP configuration:

{
  "mcpServers": {
    "exoscale": {
      "command": "node",
      "args": ["/path/to/exoscale-mcp/dist/index.js"],
      "env": {
        "EXOSCALE_API_KEY": "your-key",
        "EXOSCALE_API_SECRET": "your-secret"
      }
    }
  }
}

HTTP mode

EXOSCALE_API_KEY=key EXOSCALE_API_SECRET=secret node dist/index.js --http --port 3000

Then connect your MCP client to http://127.0.0.1:3000/mcp.

Development

# Dev mode (tsx, auto-restarts not included)
npm run dev

# Type check
npm run lint

# Run tests
npm test

# Run with coverage
npm run test:coverage

# Regenerate types from OpenAPI spec
npm run generate:types

Architecture

See ARCHITECTURE.md for a detailed system overview.

Contributing

See CONTRIBUTING.md for guidelines on adding tools, resources, and tests.

License

Apache License 2.0 — see LICENSE for details.