A Go Model Context Protocol server providing AI agents with typed tools for the OpenSVC v3 daemon API: cluster state, nodes, objects, instances, resources and logs.
Tools are mostly read-only, with an explicit instance status refresh. The OpenSVC daemon enforces the caller's grants.
The server uses HTTPS over TCP and accepts native OpenSVC and OpenID JWTs.
Native tokens route by cluster_id and iss. OpenID requests supply
X-OpenSVC-Cluster-ID and X-OpenSVC-Node to select a configured daemon.
The unchanged token is delegated to the selected daemon, which verifies it;
no JWT verification keys are installed on MCP or agent. There is no embedded
authorization server or token exchange.
See the tool documentation for inputs, outputs and usage.
- Go 1.25.5 or later to build from source.
- Access to an OpenSVC v3 daemon API.
- A native OpenSVC access JWT with
cluster_id, or an OpenID JWT accepted by the target daemon with explicit cluster and node targets. - An administrator-owned catalogue of trusted daemon HTTPS endpoints.
- A server certificate and private key for HTTPS.
From the repository root:
go build -o bin/om3-mcp ./cmd/om3-mcpConfigure the HTTPS listener with its certificate and cluster catalogue. The configuration guide provides a complete example and the cluster template.
For demos only, a cluster can set tls.insecure: true.
This disables daemon certificate verification and is strongly discouraged in production.
go fmt ./...
go test ./...
go vet ./...