Guardrailed fleet ops for AI agents: multi-cluster Kubernetes via OCM with policy, approval, audit.
Connect Runs on your machine
claude mcp add ocm-mcp-server -e KUBECONFIG=<KUBECONFIG> -e OCM_MCP_HUB_CONTEXT=<OCM_MCP_HUB_CONTEXT> -e OCM_MCP_READ_ONLY=<OCM_MCP_READ_ONLY> -- uvx ocm-mcp-server==0.4.0
{
"mcpServers": {
"ocm-mcp-server": {
"command": "uvx",
"args": [
"ocm-mcp-server==0.4.0"
],
"env": {
"KUBECONFIG": "<KUBECONFIG>",
"OCM_MCP_HUB_CONTEXT": "<OCM_MCP_HUB_CONTEXT>",
"OCM_MCP_READ_ONLY": "<OCM_MCP_READ_ONLY>"
}
}
}
}
{
"mcpServers": {
"ocm-mcp-server": {
"command": "uvx",
"args": [
"ocm-mcp-server==0.4.0"
],
"env": {
"KUBECONFIG": "<KUBECONFIG>",
"OCM_MCP_HUB_CONTEXT": "<OCM_MCP_HUB_CONTEXT>",
"OCM_MCP_READ_ONLY": "<OCM_MCP_READ_ONLY>"
}
}
}
}
{
"servers": {
"ocm-mcp-server": {
"type": "stdio",
"command": "uvx",
"args": [
"ocm-mcp-server==0.4.0"
],
"env": {
"KUBECONFIG": "<KUBECONFIG>",
"OCM_MCP_HUB_CONTEXT": "<OCM_MCP_HUB_CONTEXT>",
"OCM_MCP_READ_ONLY": "<OCM_MCP_READ_ONLY>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
KUBECONFIGRequired | Path to the kubeconfig with the OCM hub context (and optional spoke contexts). |
OCM_MCP_HUB_CONTEXTOptional | Kubeconfig context name of the OCM hub cluster (defaults to the current context). |
OCM_MCP_READ_ONLYOptional | Set to 'true' to disable the gated write path entirely (read-only fleet access). |
Details
| Package | [email protected] (PYPI, stdio) |
| Package | ghcr.io/sandeepbazar/ocm-mcp-server:0.4.0 (OCI, stdio) |
| First published | 13 Aug 2026 |
| Last updated | 13 Aug 2026 |
| Registry name | io.github.sandeepbazar/ocm-mcp-server |
More cloud and devops servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
