1. Conduid
  2. Developer Tools
  3. Linkerd2 MCP
MCP server · Developer Tools

Linkerd2 MCP

by · github.com/eli-nomasec/linkerd2-mcp

An MCP server over the Linkerd2 Proxy API

Unclaimed Apache-2.0 last commit a year ago devtools
InstallView source
49Fair

Scored 3 months ago · breakdown

About Linkerd2 MCP

Linkerd2 MCP is an MCP server published by eli-nomasec in the Developer Tools category: an MCP server over the Linkerd2 Proxy API. It has been installed 0 times through Conduid.

The repository has 2 stars and 1 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues (0) before depending on it in production.

Install

Install
npx linkerd2-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Linkerd2 MCP

Powered by Claude · Grounded in docs

I know everything about Linkerd2 MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

Linkerd2 MCP

⚠️ This project is a Work In Progress (WIP) and is still under active development. Features and APIs may change at any time.

ℹ️ The vast majority of this project has been built with the help of AI agents.

This project aims to expose a Model Context Protocol (MCP) server, enabling you to "talk" to your Linkerd2 service mesh. By building on top of Linkerd and Linkerd-viz, it provides an API for fetching high-level aggregated mesh data and for making changes—such as applying authorization policy updates—directly to your mesh.

A lightweight, fault-tolerant control plane for Linkerd-powered service meshes, exposing a gRPC MCP API for mesh introspection and safe policy mutation.

Project Structure

cmd/
  mcp-server/      → main.go (MCP API server)
  collector/       → main.go (Collector)
proto/             → *.proto + buf.yaml (gRPC contracts)
internal/
  graph/           → in-memory mesh model
  redis/           → Redis helpers (snapshot, delta, election)
docs/              → project docs
helm/              → chart/
Makefile           → convenience commands

Getting Started

Prerequisites

  • Go 1.22+
  • Docker or Podman
  • kubectl 1.30+
  • kind (for local k8s)
  • Linkerd CLI 2.15+
  • Prometheus (comes with Linkerd viz)
  • Buf CLI 1.29+
  • Helm 3.14+

Build

go build -o bin/collector ./cmd/collector
go build -o bin/mcp-server ./cmd/mcp-server

Running End-to-End (local kind cluster)

  1. Start a kind cluster and install Linkerd + Prometheus:

    kind create cluster --name mcp-dev
linkerd install | kubectl apply -f -
linkerd viz install | kubectl apply -f -
linkerd check

  2. Deploy Redis (Valkey) and the MCP stack (see helm/ for chart):

    helm install mcp ./helm --namespace mcp --create-namespace --set redis.enabled=true

  3. Port-forward MCP server and test the gRPC API:

    kubectl -n mcp port-forward svc/mcp 10900:10900
grpcurl -plaintext localhost:10900 mcp.v1.MeshContext/GetMeshGraph

  4. Apply a policy mutation via gRPC:

    grpcurl -plaintext -d '{"namespace":"default","name":"allow-foo","json_spec":"{\"foo\": \"bar\"}"}' localhost:10900 mcp.v1.MeshContext/ApplyAuthorizationPolicy

  5. Verify AuthorizationPolicy CRs in the cluster:

    kubectl get authorizationpolicies.policy.linkerd.io -A

Development Workflow

  • Edit proto contracts in proto/, run buf lint
  • Implement business logic in cmd/ and internal/
  • Use kind and helm for local testing
  • Run unit tests: go test ./...
  • See docs/progress.md for current status and next steps

Roadmap

  • Integration testing and error handling
  • Helm chart, CI/CD, documentation
  • E2E tests and further enhancements

License

Apache 2.0

README mirrored from the source repository 3 months ago. The original is authoritative.

Questions

About Linkerd2 MCP

How do I install Linkerd2 MCP?

Run npx linkerd2-mcp, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is Linkerd2 MCP safe to use with an AI agent?

Its trust score is 49 out of 100 (fair). It passes 0 of 1 static security checks; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Linkerd2 MCP still maintained?

The last commit was a year ago, with 0 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.