Alibaba Cloud Ops MCP Server
The official Alibaba Cloud MCP server manages ECS, RDS, OSS and VPC, reads metrics and deploys an app to ECS from an agent.
- 137 ★ on the repository
- Last commit
Broad access
Why this level
- The access key opens creating and deleting ECS instances, password resets, system disk replacement and running commands on machines.
- The local tools `LOCAL_RunShellScript` and `LOCAL_ListDirectory` execute scripts and read directories on the user's computer.
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add mcp/alibaba-cloud-ops-mcp-serverDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The access key opens creating and deleting ECS instances, password resets, system disk replacement and running commands on machines.
- The local tools `LOCAL_RunShellScript` and `LOCAL_ListDirectory` execute scripts and read directories on the user's computer.
This is third-party code. Review the repository files before installing.
What it does
The server gives an agent Alibaba Cloud tools: create, start, stop, reboot and delete ECS instances, view images, zones and security groups, and manage RDS, OSS buckets and VPC networks. Cloud Monitor metrics return CPU load, memory and disks. A separate deploy flow: `LOCAL_AnalyzeDeployStack` identifies the project stack, the user builds an artifact, and `OOS_CodeDeploy` uploads it to OSS and deploys to ECS, creating the application and group if needed. There are local tools for listing directories and running scripts, plus dynamic OpenAPI calls.
Who it is for. Alibaba Cloud admins and developers who want to manage ECS, databases and storage from Cursor, Cline or another MCP client.
Good fit when
- You need to view ECS instances, images and security groups of a region without opening the console.
- An agent checks CPU and disk load of virtual machines through Cloud Monitor metrics.
- An application is built locally and deployed to ECS through `OOS_CodeDeploy`.
- You need to restart an RDS database or create an OSS bucket from a task description.
Not a fit when
- Read-only access is needed: a key with broad rights also opens instance deletion.
- The server would be exposed over `sse` or `streamable-http` without protection.
- The cloud is not Alibaba: the tools are bound to its products.
Example request
Show the ECS instances in the cn-hangzhou region, check CPU load for the last hour and stop nothing.MCP
- Transport
- stdio, sse, http
- Authentication
- API key
Environment variables
ALIBABA_CLOUD_ACCESS_KEY_IDrequired- Alibaba Cloud access key ID
ALIBABA_CLOUD_ACCESS_KEY_SECRETrequired, secret- Alibaba Cloud access key secret
Limitations
It needs `ALIBABA_CLOUD_ACCESS_KEY_ID` and `ALIBABA_CLOUD_ACCESS_KEY_SECRET`, and the server starts through `uvx`, so install uv first. Tool rights equal the key rights and can only be narrowed by policies on the cloud side. The default transport is `stdio`; for `sse` and `streamable-http` set `--transport`, `--port` (default 8000) and `--host` (default 127.0.0.1); the value `0.0.0.0` exposes the server on all interfaces. Some operations run through Alibaba Cloud OOS, which has its own quotas.
How to disable. Remove the `alibaba-cloud-ops-mcp-server` block from the MCP client configuration and restart the client. Revoke the access key in the Alibaba Cloud console if it is no longer needed.
FAQ
How do I connect the server to Cursor?
Add a block to the MCP configuration with the `uvx` command, the `alibaba-cloud-ops-mcp-server@latest` argument and two access key variables. The README has an install button for Cursor.
Which environment variables are required?
`ALIBABA_CLOUD_ACCESS_KEY_ID` and `ALIBABA_CLOUD_ACCESS_KEY_SECRET`. They set the rights of every tool, so issue a key with the minimum needed policies.
What does the deploy tool do?
`OOS_CodeDeploy` uploads a built artifact to OSS and deploys it to ECS, creating the application and group if they are missing. `OOS_GetDeployStatus` shows the deployment state.
How do I run the server over HTTP?
Add `--transport streamable-http` or `sse` and, if needed, `--port` and `--host`. It listens on 127.0.0.1:8000 by default, and `0.0.0.0` covers all interfaces.
What does Cloud Monitor cover?
CPU usage, load average over one, five and fifteen minutes, memory use, and disk usage and capacity of ECS instances.
Discussion
No questions or reviews yet.
Related
MCP serversACK MCP Server
alibabacloud-ack-mcp-server
The official Alibaba Cloud MCP server for ACK clusters: kubectl, Prometheus metrics, SLS logs and diagnostics.
AWS's official MCP server suite: docs, IaC, containers, serverless, databases, cost and monitoring
The agent starts LocalStack, deploys Terraform, CDK and SAM, reads logs, fixes IAM policies and injects faults to test resilience
Google's MCP server for deploying apps to Cloud Run from an agent, with service listing and log reading
Google Cloud MCP servers: gcloud commands, logs and metrics, Cloud Storage and Backup and DR
Octopus Deploy MCP Server lets an agent read projects, releases and tasks in Octopus and, once confirmed, deploy releases.
README in short
The page lists clients with a ready install, features, a configuration template and a tool table marking whether a call goes through OOS, an API or locally. A separate section describes the deployment order.