ocm-mcp-server
A community MCP server that provides guardrailed fleet operations for AI agents managing multi-cluster Kubernetes environments via Open Cluster Management. It exposes typed tools for agent interaction while enforcing static checks, Kyverno policy admission, human approval tokens, and least-privilege RBAC to ensure safe, audited operations.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
Checks and signals
Each line is separate evidence, not a trust score.
- Popularity 16 GitHub stars
What you can do with it
- Enable AI agents to investigate multi-cluster Kubernetes states safely
- Allow agents to propose changes subject to policy and human approval
- Trace and log every agent action for audit purposes
Source and maintenance
- Last repository push
- Latest release
- v0.6.0
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
ocm-mcp-server 0.6.0
{
"version": "0.6.0",
"transport": "stdio",
"identifier": "ocm-mcp-server",
"runtimeHint": "uvx",
"registryType": "pypi",
"environmentVariables": [
{
"name": "KUBECONFIG",
"format": "string",
"isRequired": true,
"description": "Path to the kubeconfig with the OCM hub context (and optional spoke contexts)."
},
{
"name": "OCM_MCP_HUB_CONTEXT",
"format": "string",
"description": "Kubeconfig context name of the OCM hub cluster (defaults to the current context)."
},
{
"name": "OCM_MCP_READ_ONLY",
"format": "string",
"description": "Set to 'true' to disable the gated write path entirely (read-only fleet access)."
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Maintenance history
Public check and source-refresh events. Editorial and ownership records remain private.
- · repository · passed · metadata changed · updated
- · backfill · recorded · Pre-expansion baseline; unobserved rich metadata remains unknown
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"ocm-mcp-server-mcp": {
"command": "uvx",
"args": [
"ocm-mcp-server==0.6.0"
],
"env": {
"KUBECONFIG": "<YOUR_KUBECONFIG>",
"OCM_MCP_HUB_CONTEXT": "<YOUR_OCM_MCP_HUB_CONTEXT>",
"OCM_MCP_READ_ONLY": "<YOUR_OCM_MCP_READ_ONLY>"
}
}
}
}Cline
{
"mcpServers": {
"ocm-mcp-server-mcp": {
"command": "uvx",
"args": [
"ocm-mcp-server==0.6.0"
],
"env": {
"KUBECONFIG": "<YOUR_KUBECONFIG>",
"OCM_MCP_HUB_CONTEXT": "<YOUR_OCM_MCP_HUB_CONTEXT>",
"OCM_MCP_READ_ONLY": "<YOUR_OCM_MCP_READ_ONLY>"
}
}
}
}VS Code
{
"servers": {
"ocm-mcp-server-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"ocm-mcp-server==0.6.0"
],
"env": {
"KUBECONFIG": "<YOUR_KUBECONFIG>",
"OCM_MCP_HUB_CONTEXT": "<YOUR_OCM_MCP_HUB_CONTEXT>",
"OCM_MCP_READ_ONLY": "<YOUR_OCM_MCP_READ_ONLY>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"ocm-mcp-server-mcp": {
"command": "uvx",
"args": [
"ocm-mcp-server==0.6.0"
],
"env": {
"KUBECONFIG": "<YOUR_KUBECONFIG>",
"OCM_MCP_HUB_CONTEXT": "<YOUR_OCM_MCP_HUB_CONTEXT>",
"OCM_MCP_READ_ONLY": "<YOUR_OCM_MCP_READ_ONLY>"
}
}
}
}Let your agent find its tools
Find servers like ocm-mcp-server from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.