# ncloud [Health: Active]

**Category:** ☁️ Cloud Platforms  
**Repository:** https://github.com/sjk4425/ncloud-mcp-server  
**GitHub Stars:** 2  
**npm Downloads (last month):** 1079  
**Views:** 3  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/ncloud

## Description
MCP server for managing Naver Cloud Platform (Ncloud) infrastructure

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "ncloud": {
    "command": "npx",
    "args": ["-y","ncloud-mcp-server"],
    "env": {
      "NCLOUD_ACCESS_KEY": "",
      "NCLOUD_SECRET_KEY": ""
    }
  }
}
```

**Requires environment variables:** `NCLOUD_ACCESS_KEY`, `NCLOUD_SECRET_KEY` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What ncloud MCP server does

The ncloud MCP server exposes Naver Cloud Platform infrastructure APIs through the Model Context Protocol. It covers compute resources such as servers, block storage, snapshots, public IPs, auto scaling, and Cloud Functions. Networking tools include VPCs, subnets, access control groups, network ACLs, NAT gateways, routes, load balancers, target groups, and network interfaces.

The catalog also includes managed databases, Redis and Valkey cache, Object Storage, Ncloud Storage, NAS, Archive Storage, Kubernetes Service, Container Registry, certificates, KMS, secrets, monitoring, logging, governance, CI/CD services, analytics, media, CDN, messaging, mail, API Gateway, and billing. The available catalog depends on the selected Ncloud zone.

## How it works

The ncloud MCP server uses the Ncloud API gateway selected by `NCLOUD_ZONE`. Public, government, and financial zones use separate gateway domains, regions, service catalogs, and in some cases different API paths or operations. The default is the public zone; set `NCLOUD_ZONE=gov` or `NCLOUD_ZONE=fin` for the other environments. Zone-specific credentials are required, so a key from one zone cannot authenticate against another.

Tools use the same names and parameters across zones where the corresponding service is available. MCP tool annotations identify read-only, destructive, and idempotent operations for clients that support those hints. Destructive operations retain their `confirm` parameter as an additional safeguard. Requests have a configurable timeout, rate-limit retries, and optional response pruning or size limits.

## Setup and configuration

Node.js 20 or newer is required. The simplest launch method is:

```bash
npx -y ncloud-mcp-server
```

Set `NCLOUD_ACCESS_KEY` and `NCLOUD_SECRET_KEY` to keys issued by the appropriate Ncloud console. `NCLOUD_REGION` selects a supported region, such as `KR`, `JPN`, `SGN`, `USWN`, or `DEN` in the public zone; government and financial zones use their own region values. `NCLOUD_API_URL` can override the zone’s default gateway.

Optional settings control tool loading, request timeouts, client error language, response size, and empty-value removal. Archive Storage and SENS integrations have additional configuration variables. `NCLOUD_TOOL_GROUPS` can limit startup loading to selected categories, with a dynamic mode that permits session-time expansion.

## Tools and capabilities

The ncloud MCP server provides tools for:

- Provisioning and inspecting compute, storage, database, and container resources.
- Managing VPC networking, traffic distribution, DNS, routes, and security controls.
- Working with Kubernetes, container images, source repositories, builds, deployments, and pipelines.
- Querying monitoring, logs, activity records, resources, costs, prices, usage, and discounts.
- Sending or managing supported SENS messages, mail, media, CDN, and API Gateway resources.

## Limitations and notes

Public-zone behavior has mainly been tested with real accounts in the Korean region. Other regions may expose different API behavior.

Some capabilities require a main-account access key. Certificate Manager 2.0 and Cloud DB Serverless reject sub-account keys, while Secret Manager requires the correct key-isolation setting. Use the STS caller-identity tool to inspect the account identity. Service availability also differs by zone, and unsupported operations are not present in every catalog.

_Full upstream README: https://allmcps.com/mcp/ncloud/readme_