MCP.so
Sign In

Talos Linux Mcp Server

@Nosmoht

About Talos Linux Mcp Server

MCP server for Talos Linux cluster management via the native gRPC API

Basic information

Category

Developer Tools

License

MIT

Runtime

go

Transports

stdio

Publisher

Nosmoht

Submitted by

Thomas Krahn

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "talos-mcp-server": {
      "command": "npx",
      "args": [
        "talos-mcp"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Talos Linux MCP Server?

An MCP server that exposes Talos Linux cluster management to AI agents (Claude Code, OpenAI Codex, and any MCP-compatible client). It provides structured tools that return machine-readable JSON directly from the Talos gRPC API using the same mTLS credentials as talosctl (~/.talos/config). Designed for operators managing Talos clusters.

How to use Talos Linux MCP Server?

Install via npx talos-mcp (no Go required, Linux/macOS, amd64/arm64), download a binary, or build from source with Go 1.21+. Configure via ~/.talos/config or environment variables like TALOSCONFIG and TALOS_CONTEXT. Start as stdio MCP server or enable Streamable HTTP with TALOS_MCP_HTTP_ADDR. Add to your MCP client config (e.g., .mcp.json for Claude Code, claude_desktop_config.json, or .codex/config.toml).

Key features of Talos Linux MCP Server

  • 14 read‑only tools for cluster introspection (logs, health, services, etc.)
  • 8 mutating tools with explicit safety guards (confirm, dry‑run)
  • Safety profiles and environment variables (read‑only mode, allowed nodes/paths)
  • Maintenance‑mode (insecure) operations with certificate fingerprint pinning
  • Upgrade path validation (at most one minor version at a time)
  • Supports Talos Linux v1.9.x through v1.13.x

Use cases of Talos Linux MCP Server

  • Diagnose cluster health and node issues via structured queries
  • Read logs, dmesg, process lists, and files from any node
  • Perform upgrades or rollbacks with validation and confirmation
  • Apply machine config patches or bootstrap new nodes in maintenance mode
  • Inspect etcd cluster status and take backups

FAQ from Talos Linux MCP Server

What Talos versions are supported?

Tested against Talos Linux v1.9.x through v1.13.x. A startup warning appears if the cluster version is outside this range.

How does upgrade path validation work?

The talos_upgrade tool ensures at most one minor version jump (e.g., v1.11.x → v1.12.x). Upgrades that skip more are rejected unless TALOS_MCP_SKIP_VERSION_CHECK=true is set.

How to enable maintenance‑mode (insecure) operations?

Set TALOS_MCP_ENABLE_INSECURE=true and TALOS_MCP_INSECURE_ALLOWED_NODES to a comma‑separated list of permitted maintenance‑mode IPs/CIDRs. Connection MITM can be mitigated with certificate fingerprint pinning.

Can I run the server in read‑only mode?

Yes. Set TALOS_MCP_READ_ONLY=true to disable all mutating tools at startup.

What transport and authentication is supported?

The server can run over stdio (default) or HTTP (when TALOS_MCP_HTTP_ADDR is set). HTTP mode requires a bearer token

Comments

More Developer Tools MCP servers