infra-ops-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| GITHUB_TOKEN | No | GitHub personal access token | |
| GITLAB_TOKEN | No | GitLab access token | |
| INFRA_PG_HOST | No | PostgreSQL host | |
| INFRA_PG_PORT | No | PostgreSQL port | |
| INFRA_PG_USER | No | PostgreSQL user | |
| INFRA_AWS_REGION | No | AWS region | |
| INFRA_REDIS_HOST | No | Redis host | |
| INFRA_REDIS_PORT | No | Redis port | |
| INFRA_AWS_PROFILE | No | AWS profile name | |
| INFRA_CONFIG_PATH | No | Path to custom config file | |
| INFRA_GCP_PROJECT | No | GCP project ID | |
| INFRA_PG_DATABASE | No | PostgreSQL database | |
| INFRA_PG_PASSWORD | No | PostgreSQL password | |
| INFRA_REDIS_PASSWORD | No | Redis password | |
| INFRA_AZURE_SUBSCRIPTION | No | Azure subscription ID |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| system_cpu_infoA | [SAFE] Get CPU information including manufacturer, brand, speed, cores, and current load |
| system_memory_infoA | [SAFE] Get memory information including total, used, free RAM and swap usage |
| system_disk_usageA | [SAFE] Get disk space usage for all mounted filesystems |
| system_process_listB | [SAFE] List running processes with optional filtering by name and sorting by cpu, memory, or pid |
| system_process_killC | [DANGEROUS] Kill a process by PID. Requires confirmation. Uses taskkill on Windows, kill on Unix. |
| system_service_listA | [SAFE] List system services and their current status |
| system_service_controlA | [DANGEROUS] Start, stop, or restart a system service. Requires confirmation. Uses sc on Windows, systemctl on Linux, launchctl on macOS. |
| system_uptimeA | [SAFE] Get system uptime and boot time information |
| system_usersB | [SAFE] Get currently logged in users |
| system_scheduled_tasksA | [SAFE] List scheduled tasks. Uses schtasks on Windows, crontab -l on Linux, launchctl list on macOS. |
| system_hardware_infoA | [SAFE] Get hardware information including system manufacturer, BIOS, and baseboard details |
| system_driversA | [SAFE] List system drivers. Uses driverquery on Windows, lsmod on Linux, kextstat on macOS. |
| network_interfacesA | [SAFE] List all network interfaces with their configuration (IP addresses, MAC, speed, status) |
| network_routesB | [SAFE] Display the system routing table |
| network_dns_resolveC | [SAFE] Resolve a hostname using DNS lookup with support for various record types |
| network_firewall_rulesA | [SAFE] Display current firewall rules and policies |
| network_listening_portsA | [SAFE] List all ports currently in LISTEN state with associated processes |
| network_active_connectionsA | [SAFE] List all active (ESTABLISHED) network connections with associated processes |
| network_wifi_infoA | [SAFE] Get information about available WiFi networks and current connection |
| network_bandwidth_testA | [SAFE] Measure current network throughput by sampling network stats over a 1 second interval |
| network_tracerouteC | [SAFE] Trace the route packets take to a destination host |
| storage_raid_statusA | [SAFE] Get RAID array status and configuration |
| storage_lvm_infoA | [SAFE] Get LVM (Logical Volume Manager) information including physical volumes, volume groups, and logical volumes |
| storage_mountsA | [SAFE] Get mounted filesystem information including disk layout and usage |
| storage_smart_healthC | [SAFE] Get SMART health data for storage devices |
| storage_partitionsB | [SAFE] Get disk partition and block device information |
| storage_nfs_sharesA | [SAFE] Get NFS share configuration and exported filesystems |
| storage_quotasA | [SAFE] Get filesystem quota information |
| docker_container_listC | [SAFE] List Docker containers with their status, names, and basic info |
| docker_container_inspectC | [SAFE] Inspect a Docker container to get detailed configuration and state information |
| docker_container_logsC | [SAFE] Retrieve logs from a Docker container |
| docker_container_statsB | [SAFE] Get real-time resource usage statistics for a Docker container |
| docker_container_startC | [DANGEROUS] Start a stopped Docker container |
| docker_container_stopC | [DANGEROUS] Stop a running Docker container |
| docker_container_restartC | [DANGEROUS] Restart a Docker container |
| docker_image_listA | [SAFE] List Docker images available on the host |
| docker_network_listA | [SAFE] List Docker networks |
| docker_volume_listB | [SAFE] List Docker volumes |
| docker_compose_statusC | [SAFE] Get Docker Compose project status showing all services and their states |
| k8s_pod_listA | [SAFE] List Kubernetes pods in a namespace with their status and metadata |
| k8s_pod_logsC | [SAFE] Retrieve logs from a Kubernetes pod |
| k8s_deployment_listB | [SAFE] List Kubernetes deployments in a namespace |
| k8s_service_listC | [SAFE] List Kubernetes services in a namespace |
| k8s_node_listA | [SAFE] List Kubernetes cluster nodes with their status and resource info |
| k8s_eventsC | [SAFE] List Kubernetes cluster events for debugging and monitoring |
| k8s_scale_deploymentC | [DANGEROUS] Scale a Kubernetes deployment to the specified number of replicas |
| aws_ec2_instancesC | [SAFE] List EC2 instances |
| aws_s3_bucketsB | [SAFE] List S3 buckets |
| aws_rds_instancesC | [SAFE] List RDS instances |
| aws_lambda_functionsC | [SAFE] List Lambda functions |
| aws_cloudwatch_metricsC | [SAFE] Get CloudWatch metrics |
| aws_route53_zonesB | [SAFE] List Route53 zones |
| azure_vm_listC | [SAFE] List VMs |
| azure_aks_clustersB | [SAFE] List AKS clusters |
| azure_storage_accountsB | [SAFE] List storage accounts |
| gcp_compute_instancesC | [SAFE] List GCE instances |
| gcp_gke_clustersB | [SAFE] List GKE clusters |
| cicd_github_workflowsC | [SAFE] List GitHub Actions workflows for a repository |
| cicd_github_workflow_runsC | [SAFE] List recent workflow runs for a GitHub Actions workflow |
| cicd_gitlab_pipelinesC | [SAFE] List GitLab CI/CD pipelines for a project |
| cicd_gitlab_jobsC | [SAFE] List jobs for a specific GitLab CI/CD pipeline |
| db_postgres_queryC | [SAFE] Execute a read-only PostgreSQL query |
| db_postgres_healthA | [SAFE] Check PostgreSQL database health including version, connections, and size |
| db_mysql_queryC | [SAFE] Execute a read-only MySQL query |
| db_mysql_healthA | [SAFE] Check MySQL database health including version, status, and connections |
| db_mongodb_queryC | [SAFE] Execute a MongoDB find query on a collection |
| db_mongodb_healthA | [SAFE] Check MongoDB health including stats, server status, and connections |
| db_redis_infoA | [SAFE] Get Redis server INFO for a specific section or all sections |
| db_redis_healthA | [SAFE] Check Redis health including PING, memory usage, and database size |
| iac_terraform_stateB | [SAFE] Show the current Terraform state in JSON format |
| iac_terraform_planC | [DANGEROUS] Run Terraform plan to preview infrastructure changes |
| iac_ansible_inventoryC | [SAFE] Show Ansible inventory in YAML format |
| iac_ansible_playbook_runC | [DANGEROUS] Run an Ansible playbook in check mode (dry-run with diff) |
| iac_pulumi_stacksC | [SAFE] List all Pulumi stacks in JSON format |
| security_cve_scanB | [SAFE] Run a CVE vulnerability scan on a filesystem path using Trivy |
| security_secrets_scanC | [SAFE] Scan for hardcoded secrets and credentials using Gitleaks |
| security_cert_checkB | [SAFE] Check TLS certificate details for a host including expiration |
| security_compliance_checkB | [SAFE] Run compliance benchmarks using Trivy configuration scanning |
| security_port_auditC | [SAFE] Audit listening ports and flag well-known dangerous ports |
| remote_ssh_execC | [SAFE] Execute a command on a remote host via SSH |
| remote_fleet_commandC | [DANGEROUS] Execute a command across multiple remote hosts via SSH |
| remote_host_inventoryA | [SAFE] List configured remote hosts and check their connectivity status |
| dns_recordsC | [SAFE] Query DNS records for a domain with optional type and server |
| dns_propagation_checkC | [SAFE] Check DNS propagation across multiple public DNS servers |
| dns_zone_queryC | [SAFE] Query zone information including SOA and NS records for a domain |
| backup_statusC | [SAFE] Check backup status by listing files in the backup directory with sizes and dates |
| backup_integrity_checkB | [SAFE] Verify backup file integrity by checking existence, readability, and checksums or archive validity |
| backup_restore_testC | [DANGEROUS] Test restoring a backup by extracting to a temporary location and verifying contents |
| monitoring_custom_metricsC | [SAFE] Query custom metrics from a Prometheus endpoint |
| monitoring_uptime_checkB | [SAFE] Perform an HTTP or TCP uptime check on a target |
| monitoring_alertsB | [SAFE] Get active alerts from a Prometheus Alertmanager endpoint |
| monitoring_sla_statusC | [SAFE] Calculate SLA status and allowed downtime based on uptime percentage |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 92 tools
Each tool targets a specific resource and action, with clear prefixes (e.g., aws_, azure_, db_) and descriptive names that prevent confusion. Even similar domains like DNS have distinct tools (dns_records vs dns_propagation_check).
All tool names follow a consistent pattern of prefix_domain_action using lowercase with underscores (e.g., aws_ec2_instances, k8s_pod_logs). Naming is highly predictable and uniform.
With 92 tools, the server is massively over-scoped. Despite covering many domains, the sheer number far exceeds typical agent capacity and suggests many overlapping or unnecessary tools (e.g., multiple DNS and network utilities that could be consolidated).
The tool set covers an extensive range of infrastructure operations: major cloud providers, databases, containers, Kubernetes, networking, storage, security, system administration, CI/CD, IaC, monitoring, and backups. There are no obvious gaps for the stated 'infra-ops' purpose.