Talos Linux MCP Server

@Nosmoht

代码仓库

基本信息

分类

开发工具

许可证

MIT

传输方式

stdio

作者

Nosmoht

提交者

Thomas Krahn

关于 Talos Linux MCP Server

MCP server for Talos Linux cluster management via the native gRPC API

#talos#mcp #kubernetes

Talos Linux MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "talos-mcp-server": {
      "command": "npx",
      "args": [
        "talos-mcp"
      ]
    }
  }
}

Talos Linux MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is Talos Linux MCP Server?

An MCP server that exposes Talos Linux cluster management to AI agents (Claude Code, OpenAI Codex, and any MCP-compatible client). It provides structured tools that return machine-readable JSON directly from the Talos gRPC API using the same mTLS credentials as talosctl (~/.talos/config). Designed for operators managing Talos clusters.

How to use Talos Linux MCP Server?

Install via npx talos-mcp (no Go required, Linux/macOS, amd64/arm64), download a binary, or build from source with Go 1.21+. Configure via ~/.talos/config or environment variables like TALOSCONFIG and TALOS_CONTEXT. Start as stdio MCP server or enable Streamable HTTP with TALOS_MCP_HTTP_ADDR. Add to your MCP client config (e.g., .mcp.json for Claude Code, claude_desktop_config.json, or .codex/config.toml).

Key features of Talos Linux MCP Server

14 read‑only tools for cluster introspection (logs, health, services, etc.)
8 mutating tools with explicit safety guards (confirm, dry‑run)
Safety profiles and environment variables (read‑only mode, allowed nodes/paths)
Maintenance‑mode (insecure) operations with certificate fingerprint pinning
Upgrade path validation (at most one minor version at a time)
Supports Talos Linux v1.9.x through v1.13.x

Use cases of Talos Linux MCP Server

Diagnose cluster health and node issues via structured queries
Read logs, dmesg, process lists, and files from any node
Perform upgrades or rollbacks with validation and confirmation
Apply machine config patches or bootstrap new nodes in maintenance mode
Inspect etcd cluster status and take backups

常见问题

What Talos versions are supported?

Tested against Talos Linux v1.9.x through v1.13.x. A startup warning appears if the cluster version is outside this range.

How does upgrade path validation work?

The `talos_upgrade` tool ensures at most one minor version jump (e.g., v1.11.x → v1.12.x). Upgrades that skip more are rejected unless `TALOS_MCP_SKIP_VERSION_CHECK=true` is set.

How to enable maintenance‑mode (insecure) operations?

Set `TALOS_MCP_ENABLE_INSECURE=true` and `TALOS_MCP_INSECURE_ALLOWED_NODES` to a comma‑separated list of permitted maintenance‑mode IPs/CIDRs. Connection MITM can be mitigated with certificate fingerprint pinning.

Can I run the server in read‑only mode?

Yes. Set `TALOS_MCP_READ_ONLY=true` to disable all mutating tools at startup.

What transport and authentication is supported?

The server can run over stdio (default) or HTTP (when `TALOS_MCP_HTTP_ADDR` is set). HTTP mode requires a bearer token

开发工具分类下的更多 MCP 服务器

LocalCan

Gives AI agents public URLs (tunnels) for localhost, live HTTP traffic inspection, snapshot publishing, and access control. Part of LocalCan, the ngrok alternative for Mac, Windows and Linux. Free plan.

Official Porkbun MCP Server

Porkbun LLC

Official Porkbun MCP server, maintained by Porkbun. Check domain availability and pricing, register, renew and transfer domains, and manage DNS records, nameservers, URL forwarding, glue records, DNSSEC and domain contac

Modelglass

Modelglass turns "which model should I use?" into a lookup instead of a guess. Seven tools give your agent live pricing across image, language, video, and audio models. Sourced and versioned, not scraped once and forgott

OrangePro

Aamir Siddiqui

OrangePro local-first CLI + MCP server for behavior mapping, grounded test generation, and dynamic proof.

FARPY

mangomunchr

Verified distributed compute for humans, applications, and agents. Submit Blender, Octane, and video workloads, route them across qualified GPUs, track asynchronous execution, download finished artifacts, and verify FARP