Back to Browse

Ocm MCP Server

Developer ToolsUse Caution4.8MCP RegistryLocal
Free

Server data from the Official MCP Registry

Guardrailed fleet ops for AI agents: multi-cluster Kubernetes via OCM with policy, approval, audit.

About

Guardrailed fleet ops for AI agents: multi-cluster Kubernetes via OCM with policy, approval, audit.

Security Report

4.8
Use Caution4.8High Risk

ocm-mcp-server is a well-architected Kubernetes fleet management MCP server with strong security controls. The codebase demonstrates mature security practices: proper authentication via kubeconfig contexts, permission scoping through allow-lists and policy admission, and comprehensive audit/tracing. Minor quality concerns around broad exception handling and potential environment variable logging do not materially affect the security posture. Permissions (network_http, env_vars, file_read/write) are appropriate for the stated purpose of managing multi-cluster Kubernetes fleets. Supply chain analysis found 10 known vulnerabilities in dependencies (0 critical, 8 high severity). Package verification found 1 issue.

3 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

kubeconfig_access

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Path to the kubeconfig with the OCM hub context (and optional spoke contexts).Optional

Environment variable: KUBECONFIG

Kubeconfig context name of the OCM hub cluster (defaults to the current context).Optional

Environment variable: OCM_MCP_HUB_CONTEXT

Set to 'true' to disable the gated write path entirely (read-only fleet access).Optional

Environment variable: OCM_MCP_READ_ONLY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-sandeepbazar-ocm-mcp-server": {
      "env": {
        "KUBECONFIG": "your-kubeconfig-here",
        "OCM_MCP_READ_ONLY": "your-ocm-mcp-read-only-here",
        "OCM_MCP_HUB_CONTEXT": "your-ocm-mcp-hub-context-here"
      },
      "args": [
        "ocm-mcp-server"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

ocm-mcp-server has moved

This project now lives at github.com/ocm-mcp-server/ocm-mcp-server.

Codehttps://github.com/ocm-mcp-server/ocm-mcp-server
Docshttps://ocm-mcp-server.github.io/
PyPIpip install ocm-mcp-server
Containerghcr.io/ocm-mcp-server/ocm-mcp-server
MCP Registryio.github.ocm-mcp-server/ocm-mcp-server

Reviews

No reviews yet

Be the first to review this server!