Awesome MCP Servers for DevOps 
A curated list of Model Context Protocol servers for DevOps workflows — infrastructure, CI/CD, monitoring, security, and cloud operations.
Curated by Wagner — The first AI DevOps teammate
Star History
Contents
🔀 Source Control
GitHub
The official GitHub MCP server — battle-tested and feature-complete.
|
|
| Repo |
github/github-mcp-server |
| Maintainer |
🏷️ GitHub (Official) |
| What it does |
Repository operations, issues, PRs, code search, GitHub Actions workflows. |
| Standout feature |
🛡️ Lockdown mode for public repos to prevent prompt injection. |
Community options
GitLab
Native GitLab integration via their Duo platform.
|
|
| Docs |
GitLab MCP Server Documentation |
| Maintainer |
🏷️ GitLab (Official) |
| What it does |
Issues, merge requests, pipelines, commits, cross-project search. |
| Note |
⚠️ Requires GitLab 18.6+ for HTTP transport. |
Community options
Azure DevOps
Community options
Gitea & Gitee
🏗️ Infrastructure as Code
Terraform
HashiCorp's official MCP server for Terraform workflows.
Community implementations
Vault
Secrets management via MCP.
Pulumi
|
|
| Repo |
pulumi/mcp-server |
| Docs |
Pulumi MCP Docs |
| Maintainer |
🏷️ Pulumi (Official) |
| What it does |
Stack queries, resource search, Pulumi Cloud integration. |
| Remote endpoint |
🌐 https://mcp.ai.pulumi.com/mcp |
OpenTofu
The open-source Terraform alternative has its own MCP server.
|
|
| Repo |
opentofu/opentofu-mcp-server |
| Maintainer |
🏷️ OpenTofu (Official) |
| What it does |
Registry search, provider/module documentation, resource docs. |
| Remote endpoint |
🌐 mcp.opentofu.org |
Multi-IaC
|
|
| Repo |
stakpak/mcp |
| What it does |
Terraform, Kubernetes, GitHub Actions, Dockerfile workflows. |
☸️ Kubernetes and Containers
Kubernetes
Several solid options exist — pick based on your needs.
containers/kubernetes-mcp-server
Native Go implementation, no kubectl dependency.
Azure/mcp-kubernetes
Microsoft's implementation.
|
|
| Repo |
Azure/mcp-kubernetes |
| Why choose it |
🎯 Unified kubectl tool interface, minimal context consumption. |
Flux159/mcp-server-kubernetes
Popular community option.
alexei-led/k8s-mcp-server
Multi-tool support.
Community Kubernetes servers
Tilt
Nomad
Docker Hub
|
|
| Repo |
docker/hub-mcp |
| Docs |
Docker Hub MCP |
| Maintainer |
🏷️ Docker (Official) |
| What it does |
🐳 Image discovery, repository management, tag inspection. |
Nora
Self-hosted control plane for deploying and operating OpenClaw and Hermes agent runtimes on Docker or Kubernetes.
|
|
| Repo |
solomon2773/nora |
| Docs |
Nora MCP server guide |
| Maintainer |
👥 Community |
| What it does |
Deploys agent runtimes, controls their lifecycle, and exposes fleet status, metrics, events, and per-agent cost through MCP. |
| Note |
🛡️ Destructive deletion is disabled unless explicitly enabled. |
SandBase Harness
Self-hosted MCP bridge for persistent agent sessions and backend-selectable execution sandboxes.
|
|
| Repo |
sandbaseai/sandbase-harness |
| Maintainer |
👥 Community |
| Docs |
Installation and MCP configuration |
| What it does |
Exposes session, artifact, and lifecycle tools for agent workflows; supports local, Docker, Kubernetes, and self-hosted Worker sandbox backends. |
| Note |
🛡️ Isolation properties depend on the selected backend and deployment configuration. |
Portainer
|
|
| Repo |
portainer/portainer-mcp |
| Maintainer |
🏷️ Portainer (Official) |
| What it does |
Container management, deployments, environment operations. |
| Note |
🛡️ Read-only mode available for safety. |
Qovery
|
|
| Documentation |
Qovery MCP configuration |
| Maintainer |
🏷️ Qovery (Official) |
| What it does |
Cluster management, app deployments, security, self-service. |
| Note |
Guardrails and permissions management included. |
Peon
|
|
| Repo |
Peon-sh/Peon |
| Docs |
Peon MCP |
| Maintainer |
Peon (community / MIT) |
| What it does |
Self-hosted Docker deployment platform MCP: projects, services, deploys, env, logs, backups under workspace RBAC. |
| Note |
Streamable HTTP at /mcp; shell exec tools intentionally not exposed. |
🖥️ Command Line & Local Ops
Tools for executing commands or interacting with local environments safely.
| Repo |
Notes |
| MladenSU/cli-mcp-server |
Secure CLI execution with policies. |
| g0t4/mcp-server-commands |
Run commands and scripts via MCP. |
| Harsh-2002/SSH-MCP |
Remote SSH/SFTP with 43 tools: Docker, monitoring, databases, file ops, VoIP diagnostics, jump host support. |
| AICommander-dev/aicommander |
Remote-machine harness for AI agents — outbound-only shell, detached jobs, file transfer over MCP/HTTP on servers you own (aicommander.dev). Works with Cursor, Cline, Continue, Claude Code, Codex, ChatGPT, Aider, and more — not a replacement. |
| onlsol/relay.remotify.run |
Local stdio MCP for running shell commands on remote machines through an HTTP relay, with supervised per-command approval or unattended mode. Remote machines need only curl and bash; no SSH port or installed agent. |
| tumf/mcp-shell-server |
Shell command execution server. |
| ferrislucas/iterm-mcp |
iTerm integration for macOS. |
| OthmaneBlial/term_mcp_deepseek |
Terminal server for DeepSeek. |
| maxim-saplin/mcp_safe_local_python_executor |
Safe local Python execution. |
| wonderwhy-er/DesktopCommanderMCP |
Local file/process control. |
| automateyournetwork/pyATS_MCP |
Cisco pyATS network automation. |
🌐 Browser Automation
⚙️ Code Execution
🤖 Coding Agents
| Repo |
Notes |
| bgauryy/octocode-mcp |
GitHub research + analysis agent. |
| oraios/serena |
LSP-based coding agent. |
| ezyang/codemcp |
Simple coding agent MCP. |
| Wolfe-Jam/claude-faf-mcp |
Persistent project context tools. |
| contextstream/mcp-server |
Shared project context for AI coding agents — hosted MCP with code search plus decisions, lessons, and plans. https://contextstream.io · https://mcp.contextstream.io/mcp |
| juehang/vscode-mcp-server |
VS Code workspace tooling. |
| doggybee/mcp-server-leetcode |
LeetCode problem access. |
| jinzcdev/leetcode-mcp-server |
LeetCode (global/China) access. |
| willibrandon/CursorMCPMonitor |
MCP monitoring for Cursor. |
| Necmttn/ax |
Local telemetry and cost analytics for AI coding-agent sessions, tools, and skills. |
| SKULLFIRE07/cortex-memory |
Persistent AI memory for coding assistants. Auto-captures decisions, patterns, and context. VSCode extension + CLI + MCP server. |
| claw-army/claude-node |
Python subprocess bridge for Claude Code CLI. |
| HendryAvila/Hoofy |
Spec-driven dev companion with persistent memory, adaptive change pipeline, and Clarity Gate. 32 tools, single Go binary. |
| maxbaluev/accreted-intelligence |
Local-first Work Model MCP server for coding agents: scored memory plus outcome-credited actions through acc_retrieve and acc_act, with acc.db kept on the user's machine. |
| Continuum-AI-Corp/OrcaReplay |
Records a coding-agent session’s provider traffic — prompts, tool calls, responses — to a local trace and replays the run offline; exposes the trace library over MCP (orca mcp). |
🔗 Aggregators
| Repo |
Notes |
| askbudi/roundtable |
Multi-assistant MCP hub. |
| composiohq/rube |
500+ app integrations. |
| julien040/anyquery |
SQL over 40+ apps. |
| metatool-ai/metatool-app |
MetaMCP with GUI. |
| mindsdb/mindsdb |
Data unification + MCP. |
| glenngillen/mcpmcp-server |
MCP server registry. |
| wegotdocs/open-mcp |
Turn web APIs into MCP. |
| PipedreamHQ/pipedream |
2,500+ API integrations. |
| Aident-AI/aident-skill |
Aident Loadout — 1,000+ apps for any MCP agent via one remote server (https://loadout.aident.ai/mcp). |
| VeriTeknik/pluggedin-mcp-proxy |
Proxy + discovery layer. |
| tigranbs/mcgravity |
MCP load balancing. |
| waystation-ai/mcp |
Connect MCP hosts to apps. |
| sxhxliang/mcp-access-point |
One-click MCP wrapper. |
| Arch Tools |
53 production-ready AI tools via MCP with x402 USDC payments. |
| Not Human Search |
Search engine indexing 1,900+ agent-first tools (MCP servers, OpenAPI, llms.txt). Tools for search_sites, verify_mcp (live JSON-RPC probe), list_categories, and more. |
| The Stall |
208 pay-per-call data capabilities via x402 USDC micropayments — market intel, crypto/DeFi analytics, infrastructure probes, financial data, and more. No API keys. |
| Find MCP |
Search 17,000+ MCP servers from the official MCP registry, remote (Streamable HTTP, catalog.agentage.io/mcp) or stdio (npx @agentage/find-mcp), no auth needed for search. |
| Omega-JS-Stack/omega |
Omega MCP Router: local stdio router for many MCP servers, with cached tool schemas and upstreams started only on first use. |
🚀 CI/CD
Argo CD
GitOps deployment management via AI.
|
|
| Repo |
akuity/argocd-mcp |
| Maintainer |
🏷️ Akuity (Official — Argo CD creators) |
| What it does |
Application listing, sync operations, resource trees, logs. |
| Transports |
📡 stdio, HTTP stream. |
Jenkins
GitHub Actions
Latchkey
Self-healing GitHub Actions runners with an official remote MCP server for coding agents.
|
|
| Docs |
Latchkey MCP docs |
| Maintainer |
🏷️ Latchkey (Official) |
| What it does |
Failure bundles (root cause, failing file, scrubbed logs) for runs self-heal could not fix, run status, log tails, workflow dispatch, one-off commands on fresh ephemeral runners. |
| Transports |
📡 HTTP stream, remote only: https://latchkey.dev/mcp with a bearer API key. |
Codemagic (Mobile CI/CD)
Ghost in the Droid (Android/iOS Device Control)
|
|
| Repo |
ghost-in-the-droid/android-agent |
| Maintainer |
👥 Community |
| Install |
pip install ghost-in-the-droid |
| What it does |
Give any LLM agent a real Android or iPhone as its body. 62 MCP tools: tap, swipe, screenshot, screen-tree reading, app launch, on-device inference (llama.cpp/MediaPipe/MLX). Docker+KVM emulator pools for Android device farms in CI/CD pipelines. |
| Transports |
📡 stdio |
Spinnaker
Exposes a Spinnaker instance as an MCP server through the Gate API.
|
|
| Repo |
GeiserX/spinnaker-mcp |
| Docs |
spinnaker-mcp docs |
| Maintainer |
👥 Community |
| What it does |
Applications, pipelines, executions, deployment strategies and infrastructure (37 tools), with a read-only toolset. |
| Transports |
📡 stdio, HTTP. |
DevOps Visibility
| Repo |
Notes |
| HarperZ9/telos |
Local-first MCP/CLI workbench for inspectable DevOps agent workflows: workspace maps, CI triage, action receipts, context packs, and operator verification doctors. |
| SBDI/mcp-devps-hub |
End-to-end DevOps visibility. |
| gofireflyio/firefly-mcp |
Cloud resource discovery and codification. |
CI/CD Helpers
| Repo |
Notes |
| Acid-base/FastMCP-Proper |
MCP server with CI/CD tooling. |
| lobehub/mcp-hello-world |
CI/CD test server. |
| joeyycli/constitution-lint-action |
GitHub Action + MCP server that lints CLAUDE.md-style agent constitution files for missing operational guardrails (spend limits, injection defense, escalation paths, secrets rules). |
| MohammadHijjawi97/since-cutoff |
GitHub Action + MCP server that lists the APIs of pinned Python dependencies that changed after a coding model's training cutoff; with check-notes: true it fails the job when the AGENTS.md notes no longer match the lockfile. |
Build Tools
☁️ Cloud Platforms
AWS
AWS provides a collection of MCP servers for their services.
|
|
| Repo |
awslabs/mcp |
| Docs |
AWS MCP Servers |
| Maintainer |
🏷️ AWS (Official) |
| Includes |
📦 AWS API server, Documentation server, Knowledge server, Prometheus server. |
Community options
Azure
Cloudflare
Comprehensive coverage of Cloudflare's platform.
Alibaba Cloud
Cohesivity
cohesivity.ai offers free agent native backend services. Anonymous account (no-signup) to get started through MCP or API. Hosting, postgres, email, storage, containers, LLMs, voice and third-party APIs. Includes free tiers and 5 USD/mo in AI and Search credits. Top-ups through x402.
Other Platforms
| Repo |
Notes |
| bright8192/esxi-mcp-server |
VMware ESXi/vCenter management. |
| thunderboltsid/mcp-nutanix |
Nutanix Prism Central integration. |
| Shipvela |
Hosted OAuth MCP for creating website projects, deploying supported GitHub repositories, and inspecting deployment status and build logs. Remote endpoint: https://shipvela.com/mcp. |
| azmartone67/dchub-mcp-server |
DC Hub — live data-center, power, grid, fiber and deal data for agents and site selection (DCPI across 300+ markets). Remote MCP: https://dchub.cloud/mcp (94 tools). |
📊 Observability
Grafana
|
|
| Repo |
grafana/mcp-grafana |
| Maintainer |
🏷️ Grafana Labs (Official) |
| What it does |
📈 Dashboard queries, alerts, datasource info, incident management. |
| Requires |
⚠️ Grafana 9.0+. |
| Related |
📦 Loki MCP, Tempo MCP. |
Datadog
|
|
| Repo |
TANTIOPE/datadog-mcp-server |
| Maintainer |
👥 Community |
| What it does |
📊 Logs search, APM trace filtering, metrics queries, dashboards, monitors, incidents, SLOs, synthetics, and more. |
| Note |
📦 Available via npx datadog-mcp or Docker. Supports stdio + HTTP transports, read-only mode. |
Prometheus
Several community implementations available.
AWS also provides a Prometheus MCP Server for Amazon Managed Prometheus with SigV4 auth.
VictoriaMetrics
Alertmanager
APM & Monitoring
Noveum
Inspect production AI traces and compare evaluation results during agent releases.
|
|
| Docs |
Noveum MCP |
| Maintainer |
Noveum (Official) |
| What it does |
Query AI traces, manage evaluation datasets, and compare model results |
| Endpoint |
https://noveum.ai/api/mcp (Streamable HTTP) |
| Requires |
Noveum account with OAuth or a Bearer API key; free and paid plans |
🔒 Security
Snyk
Vulnerability scanning directly from your AI assistant.
|
|
| Docs |
Snyk MCP Documentation |
| Maintainer |
🏷️ Snyk (Official) |
| What it does |
🔍 Code scanning, dependency checks, container scanning, IaC analysis, SBOM generation. |
| Access |
💻 Via snyk mcp CLI command (v1.1296.2+). |
Semgrep
|
|
| Repo |
semgrep/mcp |
| Docs |
Semgrep MCP Docs |
| Maintainer |
🏷️ Semgrep (Official) |
| What it does |
🔍 Static analysis, OWASP scanning, custom rule execution. |
| Remote |
🌐 https://mcp.semgrep.ai (no auth required). |
Palisade
Email-authentication security and remediation for domains.
|
|
| Repo |
palisadeemail/palisade-mcp |
| Docs |
Palisade MCP |
| Maintainer |
🏷️ Palisade (Official) |
| What it does |
🛡️ Manage DMARC, SPF, DKIM, BIMI, MTA-STS, DNS records, domain verification, and remediation tasks. |
| Access |
💻 npx -y @palisadeemail/mcp with PALISADE_API_KEY; remote Streamable HTTP endpoint at https://api.palisade.email/mcp with Bearer authentication. |
Community Security Servers
| Repo |
Notes |
| zyx77550/sparda |
Proof-Carrying Code and deterministic security gate for AI agents. |
| LaurieWired/GhidraMCP |
Ghidra reverse engineering. |
| 13bm/GhidraMCP |
Ghidra analysis tools. |
| BurtTheCoder/mcp-shodan |
Shodan search + CVE data. |
| BurtTheCoder/mcp-virustotal |
VirusTotal scanning. |
| fr0gger/MCP_Security |
ORKL threat intelligence. |
| girste/mcp-cybersec-watchdog |
Linux security audit. |
| qianniuspace/mcp-security-audit |
npm dependency audits. |
| rad-security/mcp-server |
Kubernetes security insights. |
| roadwy/cve-search_mcp |
CVE-Search API. |
| operantlabs/operant-mcp |
51 security testing tools for pentesting, vulnerability scanning, and security auditing. |
| securityfortech/secops-mcp |
Security testing toolbox. |
| HostDeFi Token Risk API |
Hosted token-safety MCP — grades tokens A+–F from on-chain checks (mint/freeze authority, liquidity, holder concentration) across Solana + 7 EVM chains; remote endpoint https://hostdefi.com/api/v1/mcp, no auth. |
| slouchd/cyberchef-api-mcp-server |
CyberChef API access. |
| nickpending/mcp-recon |
Recon + domain analysis. |
| Agnuxo1/EnigmAgent |
AES-256-GCM + Argon2id encrypted vault. Resolves {{PLACEHOLDER}} secrets so API keys never appear in prompts. |
| ezequiellich44-cmd/MandateGuard |
Deterministic payment policy enforcement for AI agents: pre-action gate enforcing budgets, allowlists, denylists, rate limits, and signed Ed25519 payment mandates with zero LLM in the decision path. Tamper-evident SHA-256 chained audit ledger; official MCP server on the Model Context Protocol Registry. |
| sunglasses-dev/sunglasses |
Local scanner whose scan_text and scan_file tools check text and files for prompt injection, credential leaks and data exfiltration. |
| AffixIO/affixio-mcp |
Local stdio ACTION attestation MCP (npx -y @affixio/mcp@0.1.0). Tools: attest_action, verify_action, gate_tool_call. PII stays on the host; not KYC. |
| sky-cloak/skycloak-mcp |
Managed IDaaS / Keycloak MCP for AI agents (OIDC/OAuth realms, users, clients, SSO). Remote endpoint https://mcp.skycloak.io with OAuth; docs; registry io.skycloak/skycloak-mcp. |
📝 Collaboration
Atlassian (Jira + Confluence)
Community alternative with Server/Data Center support: sooperset/mcp-atlassian.
Jira (Community)
Project Management
|
|
| Repo |
theluckystrike/mcp-time-tracker |
| What it does |
Timers and timesheets with an hourly rate per project, exported as a report, CSV or invoice line items. Data stays in plain JSON on your machine. |
|
|
| Repo |
theluckystrike/mcp-work-order |
| What it does |
Work orders and job cards for trades and field service: labour hours, parts and materials, and a completion report. |
Orbit by Noveum
Manage team issues, projects, sprints and operational documentation through workspace-scoped OAuth.
Adam Network
Open messaging stream for agents and humans, with threaded discussions and proof-of-work anti-spam.
|
|
| Repo |
snow884/adam-network |
| Maintainer |
👥 Community |
| What it does |
Reads, searches, publishes, and replies to messages through MCP, with optional user authentication and image attachments. |
| Access |
Local stdio MCP from the public repository. |
Service Desks
Notion
|
|
| Repo |
makenotion/notion-mcp-server |
| Docs |
Notion MCP |
| Maintainer |
🏷️ Notion (Official) |
| What it does |
📄 Page/database queries, content creation, workspace navigation. |
| Options |
🌐 Hosted server or 🏠 self-host via npm/Docker. |
⚡ Getting Started
Basic Setup Pattern
Most MCP servers follow this configuration pattern for Claude Desktop or similar clients:
{
"mcpServers": {
"server-name": {
"command": "npx",
"args": ["-y", "@org/mcp-server-package"]
}
}
}
For remote/hosted servers:
{
"mcpServers": {
"server-name": {
"type": "http",
"url": "https://server-endpoint.example.com/mcp"
}
}
}
🛡️ Safety First
|
Recommendation |
| 1️⃣ |
Start read-only — Most servers support read-only modes. Use them until you trust the integration. |
| 2️⃣ |
Scope permissions — Use dedicated API tokens with minimal required access. |
| 3️⃣ |
Audit actions — Log what your AI assistant does, especially for write operations. |
| 4️⃣ |
Test in staging — Don't let AI touch production until you've validated behavior. |
Contributing
Have a DevOps MCP server that should be here? See contributing.md.
Requirements:
- ✅ Must have a working public repository or documentation.
- ✅ Must be relevant to DevOps workflows.
- ✅ Must include verified links.
Resources
License
To the extent possible under law, Wagner has waived all copyright and related rights to this work.