ROSA HCP MCP Server

A Model Context Protocol (MCP) server for ROSA HCP (Red Hat OpenShift Service on AWS using Hosted Control Planes) that enables AI assistants to integrate with Red Hat Managed OpenShift services.

Features

• 6 Core Tools: whoami, get_clusters, get_cluster, create_rosa_hcp_cluster, get_rosa_hcp_prerequisites_guide, setup_htpasswd_identity_provider
• ROSA CLI Integration: HTPasswd identity provider setup using proven ROSA CLI validation and patterns
• Dual Transport Support: stdio and Server-Sent Events (SSE)
• OCM API Integration: Direct integration with OpenShift Cluster Manager
• Multi-Region Support: Configurable AWS regions (default: us-east-1)
• Enterprise Authentication: OCM offline tokens with concurrent user support

Installation

Prerequisites

• Go 1.21 or later
• OCM offline token from console.redhat.com/openshift/token

Build from Source

git clone https://github.com/tiwillia/rosa-mcp-go
cd rosa-mcp-go
make build

Container Installation

# Build container image
make container-build

# Run with SSE transport
make container-run

OpenShift Deployment

# Deploy to OpenShift
make deploy

# Configure template parameters as needed:
# - IMAGE: Container image (default: quay.io/redhat-ai-tools/rosa-mcp-server)
# - MCP_HOST: Hostname for the route
# - CERT_MANAGER_ISSUER_NAME: TLS certificate issuer

Configuration

Command Line Flags

rosa-mcp-server [flags]

Flags:
  --config string         path to configuration file
  --host string           host for SSE transport (default "0.0.0.0")
  --ocm-base-url string   OCM API base URL (default "https://api.openshift.com")
  --ocm-client-id string  OCM client ID (default "cloud-services")
  --port int              port for SSE transport (default 8080)
  --sse-base-url string   SSE base URL for public endpoints
  --transport string      transport mode (stdio/sse) (default "stdio")

TOML Configuration File

ocm_base_url = "https://api.openshift.com"
transport = "stdio"
port = 8080
sse_base_url = "https://example.com:8080"

Usage Examples

Stdio Transport (Local)

Stdio transport requires the OCM_OFFLINE_TOKEN environment variable for authentication.

# Set your OCM token
export OCM_OFFLINE_TOKEN="your-ocm-token-here"

# Start server
./rosa-mcp-server --transport=stdio

SSE Transport (Remote)

SSE transport uses header-based authentication with the X-OCM-OFFLINE-TOKEN header. No environment variables required.

# Start SSE server
./rosa-mcp-server --transport=sse --port=8080

# Server will be available at:
# - SSE stream: http://localhost:8080/sse
# - MCP messages: http://localhost:8080/message
# Authentication: Send X-OCM-OFFLINE-TOKEN header with requests

Authentication Setup

1. Get OCM Offline Token

1. Visit console.redhat.com/openshift/token
2. Log in with your Red Hat account
3. Copy the offline token

If you already have the ocm-cli: Run ocm token --refresh to obtain your offline token.

2. Configure Authentication

For stdio transport:

export OCM_OFFLINE_TOKEN="your-token-here"

For SSE transport: Include header in HTTP requests:

X-OCM-OFFLINE-TOKEN: your-token-here

Available Tools

1. whoami

Get information about the authenticated account.

{
  "name": "whoami",
  "description": "Get the authenticated account"
}

2. get_clusters

Retrieve a list of clusters filtered by state.

{
  "name": "get_clusters",
  "parameters": {
    "state": {
      "type": "string",
      "description": "Filter clusters by state (e.g., ready, installing, error)",
      "required": true
    }
  }
}

3. get_cluster

Get detailed information about a specific cluster.

{
  "name": "get_cluster",
  "parameters": {
    "cluster_id": {
 

... [View full README on GitHub](https://github.com/redhat-community-ai-tools/rosa-mcp-server#readme)