Alibaba Cloud Ops MCP Server

The official Alibaba Cloud MCP server manages ECS, RDS, OSS and VPC, reads metrics and deploys an app to ECS from an agent.

  • 137 ★ on the repository
  • Last commit
MCP serverOfficial

Broad access

Why this level

  • The access key opens creating and deleting ECS instances, password resets, system disk replacement and running commands on machines.
  • The local tools `LOCAL_RunShellScript` and `LOCAL_ListDirectory` execute scripts and read directories on the user's computer.
All reasons and checks

aliyun/alibaba-cloud-ops-mcp-server

Install

In your terminal, with SkillFoxx CLI

npx skillfoxx add mcp/alibaba-cloud-ops-mcp-server

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Broad accessThe tool can change data, run commands or handle secrets.

  • The access key opens creating and deleting ECS instances, password resets, system disk replacement and running commands on machines.
  • The local tools `LOCAL_RunShellScript` and `LOCAL_ListDirectory` execute scripts and read directories on the user's computer.

This is third-party code. Review the repository files before installing.

What it does

The server gives an agent Alibaba Cloud tools: create, start, stop, reboot and delete ECS instances, view images, zones and security groups, and manage RDS, OSS buckets and VPC networks. Cloud Monitor metrics return CPU load, memory and disks. A separate deploy flow: `LOCAL_AnalyzeDeployStack` identifies the project stack, the user builds an artifact, and `OOS_CodeDeploy` uploads it to OSS and deploys to ECS, creating the application and group if needed. There are local tools for listing directories and running scripts, plus dynamic OpenAPI calls.

Who it is for. Alibaba Cloud admins and developers who want to manage ECS, databases and storage from Cursor, Cline or another MCP client.

Good fit when

  • You need to view ECS instances, images and security groups of a region without opening the console.
  • An agent checks CPU and disk load of virtual machines through Cloud Monitor metrics.
  • An application is built locally and deployed to ECS through `OOS_CodeDeploy`.
  • You need to restart an RDS database or create an OSS bucket from a task description.

Not a fit when

  • Read-only access is needed: a key with broad rights also opens instance deletion.
  • The server would be exposed over `sse` or `streamable-http` without protection.
  • The cloud is not Alibaba: the tools are bound to its products.

Example request

Show the ECS instances in the cn-hangzhou region, check CPU load for the last hour and stop nothing.

MCP

Transport
stdio, sse, http
Authentication
API key

Environment variables

ALIBABA_CLOUD_ACCESS_KEY_ID required
Alibaba Cloud access key ID
ALIBABA_CLOUD_ACCESS_KEY_SECRET required, secret
Alibaba Cloud access key secret

Limitations

It needs `ALIBABA_CLOUD_ACCESS_KEY_ID` and `ALIBABA_CLOUD_ACCESS_KEY_SECRET`, and the server starts through `uvx`, so install uv first. Tool rights equal the key rights and can only be narrowed by policies on the cloud side. The default transport is `stdio`; for `sse` and `streamable-http` set `--transport`, `--port` (default 8000) and `--host` (default 127.0.0.1); the value `0.0.0.0` exposes the server on all interfaces. Some operations run through Alibaba Cloud OOS, which has its own quotas.

How to disable. Remove the `alibaba-cloud-ops-mcp-server` block from the MCP client configuration and restart the client. Revoke the access key in the Alibaba Cloud console if it is no longer needed.

FAQ

How do I connect the server to Cursor?

Add a block to the MCP configuration with the `uvx` command, the `alibaba-cloud-ops-mcp-server@latest` argument and two access key variables. The README has an install button for Cursor.

Which environment variables are required?

`ALIBABA_CLOUD_ACCESS_KEY_ID` and `ALIBABA_CLOUD_ACCESS_KEY_SECRET`. They set the rights of every tool, so issue a key with the minimum needed policies.

What does the deploy tool do?

`OOS_CodeDeploy` uploads a built artifact to OSS and deploys it to ECS, creating the application and group if they are missing. `OOS_GetDeployStatus` shows the deployment state.

How do I run the server over HTTP?

Add `--transport streamable-http` or `sse` and, if needed, `--port` and `--host`. It listens on 127.0.0.1:8000 by default, and `0.0.0.0` covers all interfaces.

What does Cloud Monitor cover?

CPU usage, load average over one, five and fifteen minutes, memory use, and disk usage and capacity of ECS instances.

Discussion

No questions or reviews yet.

ACK MCP Server

alibabacloud-ack-mcp-server

Official

The official Alibaba Cloud MCP server for ACK clusters: kubectl, Prometheus metrics, SLS logs and diagnostics.

MCP serverBroad access121Repository stars
Official

AWS's official MCP server suite: docs, IaC, containers, serverless, databases, cost and monitoring

MCP serverBroad access9.9KRepository stars
Official

The agent starts LocalStack, deploys Terraform, CDK and SAM, reads logs, fixes IAM policies and injects faults to test resilience

MCP serverBroad access29Repository stars
Official

Google's MCP server for deploying apps to Cloud Run from an agent, with service listing and log reading

MCP serverBroad access639Repository stars
Official

Google Cloud MCP servers: gcloud commands, logs and metrics, Cloud Storage and Backup and DR

MCP serverBroad access949Repository stars
Official

Octopus Deploy MCP Server lets an agent read projects, releases and tasks in Octopus and, once confirmed, deploy releases.

MCP serverBroad access103Repository stars

README in short

The page lists clients with a ready install, features, a configuration template and a tool table marking whether a call goes through OOS, an API or locally. A separate section describes the deployment order.

README badge

Report a problem