Talos Linux Mcp Server

Name: Talos Linux Mcp Server
Author: Nosmoht

@Nosmoht

Repository

About Talos Linux Mcp Server

MCP server for Talos Linux cluster management via the native gRPC API

#talos #mcp #kubernetes

Basic information

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "talos-mcp-server": {
      "command": "npx",
      "args": [
        "talos-mcp"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Talos Linux MCP Server?

An MCP server that exposes Talos Linux cluster management to AI agents (Claude Code, OpenAI Codex, and any MCP-compatible client). It provides structured tools that return machine-readable JSON directly from the Talos gRPC API using the same mTLS credentials as talosctl (~/.talos/config). Designed for operators managing Talos clusters.

How to use Talos Linux MCP Server?

Install via npx talos-mcp (no Go required, Linux/macOS, amd64/arm64), download a binary, or build from source with Go 1.21+. Configure via ~/.talos/config or environment variables like TALOSCONFIG and TALOS_CONTEXT. Start as stdio MCP server or enable Streamable HTTP with TALOS_MCP_HTTP_ADDR. Add to your MCP client config (e.g., .mcp.json for Claude Code, claude_desktop_config.json, or .codex/config.toml).

Key features of Talos Linux MCP Server

14 read‑only tools for cluster introspection (logs, health, services, etc.)
8 mutating tools with explicit safety guards (confirm, dry‑run)
Safety profiles and environment variables (read‑only mode, allowed nodes/paths)
Maintenance‑mode (insecure) operations with certificate fingerprint pinning
Upgrade path validation (at most one minor version at a time)
Supports Talos Linux v1.9.x through v1.13.x

Use cases of Talos Linux MCP Server

Diagnose cluster health and node issues via structured queries
Read logs, dmesg, process lists, and files from any node
Perform upgrades or rollbacks with validation and confirmation
Apply machine config patches or bootstrap new nodes in maintenance mode
Inspect etcd cluster status and take backups

FAQ from Talos Linux MCP Server

What Talos versions are supported?

Tested against Talos Linux v1.9.x through v1.13.x. A startup warning appears if the cluster version is outside this range.

How does upgrade path validation work?

The talos_upgrade tool ensures at most one minor version jump (e.g., v1.11.x → v1.12.x). Upgrades that skip more are rejected unless TALOS_MCP_SKIP_VERSION_CHECK=true is set.

How to enable maintenance‑mode (insecure) operations?

Set TALOS_MCP_ENABLE_INSECURE=true and TALOS_MCP_INSECURE_ALLOWED_NODES to a comma‑separated list of permitted maintenance‑mode IPs/CIDRs. Connection MITM can be mitigated with certificate fingerprint pinning.