cert-manager-mcp-server

cert-manager-mcp-server

Manage and troubleshoot cert-manager resources with an MCP server interface.

15
Stars
1
Forks
15
Watchers
0
Issues
cert-manager-mcp-server provides an MCP-compliant server for managing and troubleshooting certificates, issuers, and Kubernetes contexts related to cert-manager. It exposes tools to list, inspect, and renew certificates, manage issuers, and switch Kubernetes contexts. The server is designed for integration with Model Context Protocol environments such as Claude Desktop, enabling robust automation and monitoring workflows around cert-manager-managed resources.

Key Features

MCP server compatibility
Certificate listing with filtering and pagination
Detailed certificate inspection
On-demand certificate renewal
Issuer and cluster issuer management
Namespace listing
Kubeconfig context listing and switching
Supports GKE authentication and context
Integration with Claude Desktop
Docker-based deployment

Use Cases

Automated monitoring of TLS certificate status across Kubernetes namespaces
Forcing certificate renewal before scheduled expiration
Auditing certificate and issuer configurations for compliance
Switching Kubernetes contexts programmatically for multi-cluster management
Listing all namespaces and their certificate resources
Troubleshooting certificate issuance or renewal failures
Integrating cert-manager resource management into AI-powered workflows
Managing issuer lifecycle and reviewing cluster configuration
Running in CI/CD pipelines for certificate and issuer checks
Supporting operations and SRE teams with automated cert-manager tool access

README

cert-manager-mcp-server

MCP server for management and troubleshooting of certificates and other resources managed by cert-manager.

Claude Desktop config:

json
{
  "mcpServers": {
    "cert-manager-mcp-server": {
      "command": "sh",
      "args": [
        "-c",
        "docker run -i --rm -v ~/.kube:/home/app/.kube:ro -v ~/.config/gcloud:/home/app/.config/gcloud piblokto/cert-manager-mcp-server:v0.0.5"
      ]
    }
  }
}

Claude Desktop config for GKE clusters:

json
{
  "mcpServers": {
    "cert-manager-mcp-server": {
      "command": "sh",
      "args": [
        "-c",
        "docker run -i --rm -v ~/.kube:/home/app/.kube:ro -v ~/.config/gcloud:/home/app/.config/gcloud -e CLOUDSDK_CORE_PROJECT=<DEFAULT_PROJECT_ID> -e CLOUDSDK_COMPUTE_REGION=<DEFAULT_COMPUTE_REGION> piblokto/cert-manager-mcp-server:v0.0.5"
      ]
    }
  }
}

Tools

This MCP server provides the following tools for interacting with cert-manager and Kubernetes resources:

Certificate Management

  • list_certificates - List certificates within a namespace or across all namespaces, with options for filtering expired certificates and pagination. You can also include domains for listed certificates with include_domains argument (defaults to False to make responses more compact)
  • get_certificate - Get detailed information about a specific certificate
  • renew_certificate - Force renewal of a certificate

Issuer Management

  • list_issuers - List issuers or cluster issuers with their statuses and configuration. Unlike list_certificates there are no pagination or filtering except for cluster/namespaced issuers and namespaces for Issuers.

Kubernetes Context Management

  • list_namespaces - List all namespaces in the cluster
  • list_contexts - List all available kubeconfig contexts
  • get_current_context - Get the currently active kubeconfig context
  • switch_context - Switch to a different kubeconfig context. Updates in-memory config

Available Tools

Tool Name Description Read-Only Parameters
list_certificates List certificates within a namespace or all namespaces, with filtering and pagination options namespace_name, all_namespaces, include_domains, list_expired, cursor, page_size
get_certificate Get detailed information about a specific certificate namespace_name, certificate_name
renew_certificate Force renewal of a certificate in a given namespace namespace_name, certificate_name
list_issuers List issuers or cluster issuers with their statuses and configuration list_cluster_issuers, all_namespaces, namespace_name
list_namespaces List all namespaces in the cluster None
list_contexts List all available kubeconfig contexts None
get_current_context Get the currently active kubeconfig context None
switch_context Switch to a different kubeconfig context ctx

Star History

Star History Chart

Repository Owner

pibblokto
pibblokto

User

Repository Details

Language Python
Default Branch main
Size 237 KB
Contributors 1
License Apache License 2.0
MCP Verified Nov 11, 2025

Programming Languages

Python
99.71%
Dockerfile
0.29%

Tags

Join Our Newsletter

Stay updated with the latest AI tools, news, and offers by subscribing to our weekly newsletter.

We respect your privacy. Unsubscribe at any time.

Related MCPs

Discover similar Model Context Protocol servers

  • CipherTrust Manager MCP Server

    CipherTrust Manager MCP Server

    Enables AI assistants to access CipherTrust Manager securely via the Model Context Protocol.

    CipherTrust Manager MCP Server provides an implementation of the Model Context Protocol (MCP), offering AI assistants such as Claude and Cursor a unified interface to interact with CipherTrust Manager resources. Communication is facilitated through JSON-RPC over stdin/stdout, enabling key management, CTE client management, user management, and connection management functionalities. The tool is configurable via environment variables and integrates with existing CipherTrust Manager instances using the ksctl CLI for secure resource access.

    • 7
    • MCP
    • sanyambassi/ciphertrust-manager-mcp-server
  • MCP K8S Go

    MCP K8S Go

    Golang-based MCP server that enables AI-driven interactions with Kubernetes clusters.

    MCP K8S Go provides a server implementation of the Model Context Protocol for managing and interacting with Kubernetes clusters. It offers functionality to list, retrieve, create, and modify Kubernetes resources such as contexts, namespaces, pods, and nodes using standardized context-aware approaches. Designed for integration with AI assistants like Claude Desktop, it enables prompting and tool execution to manage cluster state, monitor events, fetch pod logs, and run in-pod commands. The solution supports deployment via various installation methods including Docker, Node.js, and Go binaries.

    • 356
    • MCP
    • strowk/mcp-k8s-go
  • Keycloak MCP Server

    Keycloak MCP Server

    MCP server for streamlined Keycloak administration and user management

    Keycloak MCP Server provides a Model Context Protocol (MCP) interface for managing Keycloak users and realms. It enables easy creation, deletion, and listing of users and realms through standardized tools. Designed for integration with platforms like Claude Desktop and tools like Smithery, it automates repeated Keycloak admin tasks and supports both NPM and local development setups.

    • 33
    • MCP
    • ChristophEnglisch/keycloak-model-context-protocol
  • Kafka Schema Registry MCP Server

    Kafka Schema Registry MCP Server

    MCP-compliant server for advanced Kafka Schema Registry management and integration.

    Kafka Schema Registry MCP Server is a fully-compliant Model Context Protocol (MCP) server built with the FastMCP 2.8.0+ framework. It provides advanced schema context support, enables multi-registry management, and offers comprehensive schema export capabilities. The tool is designed for seamless integration with Claude Desktop and other MCP clients using JSON-RPC over stdio. It supports Docker-based deployment and includes features to streamline both administrator and end-user workflows.

    • 26
    • MCP
    • aywengo/kafka-schema-reg-mcp
  • mcp-confluent

    mcp-confluent

    MCP server for managing Confluent Cloud resources via natural language.

    mcp-confluent is a Model Context Protocol (MCP) server implementation designed to enable natural language interaction with Confluent Cloud REST APIs. It integrates with AI tools such as Claude Desktop and Goose CLI, allowing users to manage Kafka topics, connectors, and Flink SQL statements conversationally. The project offers flexible configuration, CLI usage, and supports various transports for secure and customizable operations.

    • 115
    • MCP
    • confluentinc/mcp-confluent
  • sslmon-mcp

    sslmon-mcp

    Domain registration and SSL certificate monitoring via Model Context Protocol.

    sslmon-mcp is a Model Context Protocol (MCP) compliant server that enables querying domain registration details and SSL certificate information for any given domain. It offers both HTTP-based remote service and a local NPX server for integration with AI tools and platforms. The tool helps automate security monitoring, domain lifecycle management, and certificate validity tracking via standardized API endpoints.

    • 1
    • MCP
    • firesh/sslmon-mcp
  • Didn't find tool you were looking for?

    Be as detailed as possible for better results