Talos Linux Mcp Server

Name: Talos Linux Mcp Server
Author: Nosmoht

@Nosmoht

代码仓库

关于 Talos Linux Mcp Server

MCP server for Talos Linux cluster management via the native gRPC API

#talos #mcp #kubernetes

基本信息

分类

开发工具

许可证

MIT

运行时

传输方式

stdio

发布者

Nosmoht

提交者

Thomas Krahn

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "talos-mcp-server": {
      "command": "npx",
      "args": [
        "talos-mcp"
      ]
    }
  }
}

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Talos Linux MCP Server?

An MCP server that exposes Talos Linux cluster management to AI agents (Claude Code, OpenAI Codex, and any MCP-compatible client). It provides structured tools that return machine-readable JSON directly from the Talos gRPC API using the same mTLS credentials as talosctl (~/.talos/config). Designed for operators managing Talos clusters.

How to use Talos Linux MCP Server?

Install via npx talos-mcp (no Go required, Linux/macOS, amd64/arm64), download a binary, or build from source with Go 1.21+. Configure via ~/.talos/config or environment variables like TALOSCONFIG and TALOS_CONTEXT. Start as stdio MCP server or enable Streamable HTTP with TALOS_MCP_HTTP_ADDR. Add to your MCP client config (e.g., .mcp.json for Claude Code, claude_desktop_config.json, or .codex/config.toml).

Key features of Talos Linux MCP Server

14 read‑only tools for cluster introspection (logs, health, services, etc.)
8 mutating tools with explicit safety guards (confirm, dry‑run)
Safety profiles and environment variables (read‑only mode, allowed nodes/paths)
Maintenance‑mode (insecure) operations with certificate fingerprint pinning
Upgrade path validation (at most one minor version at a time)
Supports Talos Linux v1.9.x through v1.13.x

Use cases of Talos Linux MCP Server

Diagnose cluster health and node issues via structured queries
Read logs, dmesg, process lists, and files from any node
Perform upgrades or rollbacks with validation and confirmation
Apply machine config patches or bootstrap new nodes in maintenance mode
Inspect etcd cluster status and take backups

FAQ from Talos Linux MCP Server

What Talos versions are supported?

Tested against Talos Linux v1.9.x through v1.13.x. A startup warning appears if the cluster version is outside this range.

How does upgrade path validation work?

The talos_upgrade tool ensures at most one minor version jump (e.g., v1.11.x → v1.12.x). Upgrades that skip more are rejected unless TALOS_MCP_SKIP_VERSION_CHECK=true is set.

How to enable maintenance‑mode (insecure) operations?

Set TALOS_MCP_ENABLE_INSECURE=true and TALOS_MCP_INSECURE_ALLOWED_NODES to a comma‑separated list of permitted maintenance‑mode IPs/CIDRs. Connection MITM can be mitigated with certificate fingerprint pinning.