Talos Linux MCP Server

MCP server for Talos Linux — resources, services, logs, health, config, lifecycle via gRPC.

Quick Install

Automated & IDE Setup

Copy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.

Add to Cursor Add to VS Code

Not yet automatically verified

We haven't yet run this listing's install command through our automated sandbox check. This isn't a red flag — we're steadily working through the catalog.

Manual Client & Custom JSON ConfigExpand JSON ▾

Client Config & Setup

Choose your client or environment

Target File:~/Library/Application Support/Claude/claude_desktop_config.json

claude_desktop_config.json

{
  "mcpServers": {
    "talos-linux-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "talos-mcp"
      ]
    }
  }
}

💡 Paste the JSON block into your client's configuration file under mcpServers, then restart the application.

Capabilities & Tool Schemas (23)Self-reported

Inspect callable tools, capabilities, and parameters exposed to AI agents by Talos Linux MCP Server.

talos_resource_definitions

List all available resource types and their aliases. Call this first to discover what can be queried.

talos_get

Get or list any COSI resource by type (e.g. `MachineStatus`, `Member`, `NodeAddress`, `Service`). Supports maintenance-mode (`insecure=true` + `endpoint`).

talos_version

Get Talos version info from target nodes. Supports maintenance-mode (`insecure=true` + `endpoint`).

talos_services

List all Talos services and their current state (running, stopped, health).

talos_containers

List containers in a namespace (default: `k8s.io` for Kubernetes containers).

talos_processes

List running processes on target nodes.

Documentation Overview

talos-mcp

An MCP server that exposes Talos Linux cluster management to AI agents (Claude Code, OpenAI Codex, and any MCP-compatible client). Instead of pasting talosctl output into chat, the agent calls structured tools that return machine-readable JSON directly from the Talos gRPC API — zero token cost for intermediate output.

Connects to your cluster via the native Talos gRPC API using the same mTLS credentials as talosctl (~/.talos/config).

Installation

Via npm (no Go required, Linux/macOS, amd64/arm64):

Terminal

npx talos-mcp

Via npm (global install) for persistent invocation from $PATH:

Terminal

npm install -g talos-mcp

Installs the binary as <npm-prefix>/bin/talos-mcp. Verify with:

bash

which talos-mcp        # path
talos-mcp --version    # version + commit hash
npm list -g talos-mcp  # npm's view of the installed version

Upgrade to the latest published release:

Terminal

npm install -g talos-mcp@latest

New releases appear on npmjs.com within minutes of every feat: / fix: / perf: (or breaking) merge to main — see CONTRIBUTING.md § Post-merge release pipeline for the mechanism.

Download binary (Linux/macOS, amd64/arm64):

Download the latest release from GitHub Releases, extract, and place the binary in your $PATH.

Build from source (requires Go 1.21+):

bash

git clone https://github.com/Nosmoht/talos-mcp-server
cd talos-mcp
go build -o talos-mcp ./cmd/talos-mcp

Configuration

Reads ~/.talos/config by default (the same file talosctl uses). Override via environment variables:

Variable	Default	Description
`TALOSCONFIG`	`~/.talos/config`	Path to talosconfig file
`TALOS_CONTEXT`	active context	Context name to use
`TALOS_ENDPOINTS`	from config	Comma-separated endpoint overrides
`TALOS_MCP_READ_ONLY`	`false`	Set to `true` to disable all mutating tools at startup
`TALOS_MCP_HTTP_ADDR`	(unset)	If set (e.g. `:8080`), serve Streamable HTTP instead of stdio
`TALOS_MCP_AUTH_TOKEN`	(unset)	Required bearer token when HTTP mode is active
`TALOS_MCP_ALLOWED_NODES`	(unset)	Comma-separated IPs, hostnames, and CIDR ranges permitted as tool targets. Unset allows all.
`TALOS_MCP_ALLOWED_PATHS`	(all)	Comma-separated path prefixes allowed for `talos_read_file` and `talos_list_files` (e.g. `/etc,/proc`). Defense-in-depth only — checks run on the MCP server host and do not resolve symlinks on the remote Talos node, so a symlink under an allowed prefix that points elsewhere is not detected.
`TALOS_MCP_SKIP_VERSION_CHECK`	`false`	Set to `true` to bypass upgrade path validation (e.g. for factory images or custom tags)
`TALOS_MCP_ENABLE_INSECURE`	`false`	Unlock `insecure=true` on `talos_apply_config` / `talos_get` / `talos_version` / `talos_meta`. Bypasses mTLS — REQUIRES `TALOS_MCP_INSECURE_ALLOWED_NODES`.
`TALOS_MCP_INSECURE_ALLOWED_NODES`	(unset)	Comma-separated IPs / CIDRs permitted as maintenance-mode endpoints. Required when `TALOS_MCP_ENABLE_INSECURE=true`. Refused: `0.0.0.0/0`, `::/0`, IPv4 mask `<16`, IPv6 mask `<48`.
`TALOS_MCP_META_PRIVILEGED_KEYS`	(none)	Comma-separated META keys (decimal or `0x`-prefixed hex) that `talos_meta` is allowed to write/delete beyond `UserReserved1/2/3`.
`TALOS_MCP_SAFETY_PROFILE`	(unset)	`conservative` / `standard` / `expert` preset that seeds gating flags. `expert` enables `EnableInsecure`.
`TALOS_MCP_RATE_LIMIT`	`10`	HTTP mode: token-bucket refill rate (requests/second, float)
`TALOS_MCP_RATE_BURST`	`20`	HTTP mode: token-bucket burst capacity (int)
`TALOS_MCP_MAX_BODY_SIZE`	`4194304`	HTTP mode: max POST request body size in bytes (4 MiB default)
`TALOS_MCP_MAX_CONCURRENT`	`20`	HTTP mode: max concurrent POST handlers (fail-fast 503 on overload)
`TALOS_MCP_SUBSCRIPTION_RATE`	`1s`	Minimum interval between delivered `resources/updated` notifications per `(session, URI)` pair (Go duration, e.g. `500ms`)
`TALOS_MCP_SUBSCRIPTION_BURST`	`3`	Initial notification burst per `(session, URI)` before the rate kicks in

Compatibility

This server is tested against Talos Linux v1.9.x through v1.13.x.

talos-mcp	Talos Linux	machinery SDK
v0.x (current)	v1.9.0 – v1.13.x	v1.13.4

The server logs a startup warning if the connected cluster's Talos version is outside the tested range. All 19 gRPC methods used have been stable since Talos v1.9.

Upgrade path validation

The talos_upgrade tool validates that the target version follows Talos's supported upgrade path — at most one minor version at a time (e.g. v1.11.x → v1.12.x). Upgrades that skip minor versions are rejected with an error.

If your image uses a custom or factory tag (e.g. factory.talos.dev/... or :latest) the tag cannot be parsed and validation is skipped automatically. To bypass validation explicitly, set TALOS_MCP_SKIP_VERSION_CHECK=true.

Client Setup

Claude Code

Add to your project's .mcp.json:

config.json

{
  "mcpServers": {
    "talos": {
      "command": "npx",
      "args": ["-y", "talos-mcp"]
    }
  }
}

Or globally in ~/.claude.json under "mcpServers". If you prefer a local binary, replace "command": "npx" with the path to the binary.

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

config.json

{
  "mcpServers": {
    "talos": {
      "command": "npx",
      "args": ["-y", "talos-mcp"]
    }
  }
}

OpenAI Codex

Add to .codex/config.toml (project) or ~/.codex/config.toml (global):

toml

[mcp_servers.talos]
command = "npx"
args = ["-y", "talos-mcp"]

[mcp_servers.talos.env]
TALOSCONFIG = "/path/to/talosconfig"

Generic MCP client

The server speaks the MCP protocol over stdio:

bash

./talos-mcp

Tools

Read-only

Tool	Description
`talos_resource_definitions`	List all available resource types and their aliases. Call this first to discover what can be queried.
`talos_get`	Get or list any COSI resource by type (e.g. `MachineStatus`, `Member`, `NodeAddress`, `Service`). Supports maintenance-mode (`insecure=true` + `endpoint`).
`talos_version`	Get Talos version info from target nodes. Supports maintenance-mode (`insecure=true` + `endpoint`).
`talos_services`	List all Talos services and their current state (running, stopped, health).
`talos_containers`	List containers in a namespace (default: `k8s.io` for Kubernetes containers).
`talos_processes`	List running processes on target nodes.
`talos_health`	Check cluster health (etcd, Kubernetes API, node readiness). Supports `control_plane_nodes` / `worker_nodes` override.
`talos_logs`	Fetch recent service logs (last N lines, no follow).
`talos_dmesg`	Read kernel ring buffer messages.
`talos_events`	Fetch recent Talos runtime events (service changes, config changes).
`talos_etcd`	Query etcd cluster: `members` (default) or `status`.
`talos_etcd_snapshot`	Stream an etcd snapshot to a local file path.
`talos_list_files`	List files and directories on a node filesystem.
`talos_read_file`	Read file contents from a node filesystem.
`talos_validate`	Validate a machine config (YAML/JSON) offline — no cluster connection.

Mutating

These tools modify cluster state and have explicit safety guards.

Read the full README →View source on GitHub →

Related MCP Servers

View all in Developer Tools View all alternatives

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars

Stargazers on the source repository.

npm downloads

621

Package downloads in the last 30 days.

Last commit

1mo ago

Most recent push to the default branch.

Tools exposed

Callable tools this server registers over MCP.

Directory activity

1 views

Config copies, upvotes, and views on AllMCPs.

Reviews

No reviews yet — be the first to share how this listing worked for you.

Frequently Asked Questions about Talos Linux MCP Server

Add the following block to your claude_desktop_config.json under mcpServers: "mcpServers": { "talos-linux-mcp-server": { "command": "npx", "args": ["-y","talos-mcp"] } }

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:

Live Dynamic SVG Preview

Talos Linux MCP Server AllMCPs Directory Badge

Markdown (GitHub README)

[![AllMCPs](https://allmcps.com/api/badge/talos-linux-mcp-server?style=directory)](https://allmcps.com/mcp/talos-linux-mcp-server)

HTML Embed

<a href="https://allmcps.com/mcp/talos-linux-mcp-server"><img src="https://allmcps.com/api/badge/talos-linux-mcp-server?style=directory" alt="Talos Linux MCP Server on AllMCPs" /></a>

Technical Specs & Signals

CategoryDeveloper Tools

5/9 checks healthy over the last 45d

55Quality signal: Good · 55/100How this signal is calculated ▾

Server availabilityNot measured

Not scored for repo-hosted servers — we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.

Verified ownership10/20

Documentation & tools25/30

Adoption & activity6/15

Community engagement0/10

A guidance signal from public completeness & health data — not a user rating. New listings start lower and rise as they add docs, get verified, and grow adoption. Signals we can't observe for a listing are skipped, not counted against it.

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 5d ago via OSV.dev · talos-mcp (npm)

★ Featured

AllMCPs Server

The official MCP server for AllMCPs.com - submit and manage tools directly from your AI. The open directory for MCP servers. Connect Claude, Cursor, Windsurf, and AI agents to databases, tools, files, and APIs. Explore 10,000+ servers. AllMCPs is the premier, open directory for discovering, evaluating, and installing Model Context Protocol (MCP) servers to equip AI agents and LLMs with real-world superpowers.

Explore Server →

Own this project?

This directory is pre-filled from public sources. Claim via GitHub README, site badge, or DNS TXT to unlock edit access and the Official badge — proof is checked automatically, then reviewed by our team.

Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.

Claim & get free dofollow

Share & Embed

Add our SVG badge (dark/light directory styles) or embeddable widget to your site.

Explore more

More in 💻 Developer Tools →Best MCP servers for Developers →Alternatives to Talos Linux MCP Server →Install in Claude Desktop Install in Cursor Install in VS Code Setup guides for all 13 MCP clients

Talos Linux MCP Server

MCP server for Talos Linux — resources, services, logs, health, config, lifecycle via gRPC.

Quick Install

Automated & IDE Setup

Copy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.

Add to Cursor Add to VS Code

Not yet automatically verified

We haven't yet run this listing's install command through our automated sandbox check. This isn't a red flag — we're steadily working through the catalog.

Manual Client & Custom JSON ConfigExpand JSON ▾

Client Config & Setup

Choose your client or environment

Target File:~/Library/Application Support/Claude/claude_desktop_config.json

claude_desktop_config.json

{
  "mcpServers": {
    "talos-linux-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "talos-mcp"
      ]
    }
  }
}

💡 Paste the JSON block into your client's configuration file under mcpServers, then restart the application.

Capabilities & Tool Schemas (23)Self-reported

Inspect callable tools, capabilities, and parameters exposed to AI agents by Talos Linux MCP Server.

talos_resource_definitions

List all available resource types and their aliases. Call this first to discover what can be queried.

talos_get

Get or list any COSI resource by type (e.g. `MachineStatus`, `Member`, `NodeAddress`, `Service`). Supports maintenance-mode (`insecure=true` + `endpoint`).

talos_version

Get Talos version info from target nodes. Supports maintenance-mode (`insecure=true` + `endpoint`).

talos_services

List all Talos services and their current state (running, stopped, health).

talos_containers

List containers in a namespace (default: `k8s.io` for Kubernetes containers).

talos_processes

List running processes on target nodes.

Documentation Overview

talos-mcp

Connects to your cluster via the native Talos gRPC API using the same mTLS credentials as talosctl (~/.talos/config).

Installation

Via npm (no Go required, Linux/macOS, amd64/arm64):

Terminal

npx talos-mcp

Via npm (global install) for persistent invocation from $PATH:

Terminal

npm install -g talos-mcp

Installs the binary as <npm-prefix>/bin/talos-mcp. Verify with:

bash

which talos-mcp        # path
talos-mcp --version    # version + commit hash
npm list -g talos-mcp  # npm's view of the installed version

Upgrade to the latest published release:

Terminal

npm install -g talos-mcp@latest

New releases appear on npmjs.com within minutes of every feat: / fix: / perf: (or breaking) merge to main — see CONTRIBUTING.md § Post-merge release pipeline for the mechanism.

Download binary (Linux/macOS, amd64/arm64):

Download the latest release from GitHub Releases, extract, and place the binary in your $PATH.

Build from source (requires Go 1.21+):

bash

git clone https://github.com/Nosmoht/talos-mcp-server
cd talos-mcp
go build -o talos-mcp ./cmd/talos-mcp

Configuration

Reads ~/.talos/config by default (the same file talosctl uses). Override via environment variables:

Variable	Default	Description
`TALOSCONFIG`	`~/.talos/config`	Path to talosconfig file
`TALOS_CONTEXT`	active context	Context name to use
`TALOS_ENDPOINTS`	from config	Comma-separated endpoint overrides
`TALOS_MCP_READ_ONLY`	`false`	Set to `true` to disable all mutating tools at startup
`TALOS_MCP_HTTP_ADDR`	(unset)	If set (e.g. `:8080`), serve Streamable HTTP instead of stdio
`TALOS_MCP_AUTH_TOKEN`	(unset)	Required bearer token when HTTP mode is active
`TALOS_MCP_ALLOWED_NODES`	(unset)	Comma-separated IPs, hostnames, and CIDR ranges permitted as tool targets. Unset allows all.
`TALOS_MCP_ALLOWED_PATHS`	(all)	Comma-separated path prefixes allowed for `talos_read_file` and `talos_list_files` (e.g. `/etc,/proc`). Defense-in-depth only — checks run on the MCP server host and do not resolve symlinks on the remote Talos node, so a symlink under an allowed prefix that points elsewhere is not detected.
`TALOS_MCP_SKIP_VERSION_CHECK`	`false`	Set to `true` to bypass upgrade path validation (e.g. for factory images or custom tags)
`TALOS_MCP_ENABLE_INSECURE`	`false`	Unlock `insecure=true` on `talos_apply_config` / `talos_get` / `talos_version` / `talos_meta`. Bypasses mTLS — REQUIRES `TALOS_MCP_INSECURE_ALLOWED_NODES`.
`TALOS_MCP_INSECURE_ALLOWED_NODES`	(unset)	Comma-separated IPs / CIDRs permitted as maintenance-mode endpoints. Required when `TALOS_MCP_ENABLE_INSECURE=true`. Refused: `0.0.0.0/0`, `::/0`, IPv4 mask `<16`, IPv6 mask `<48`.
`TALOS_MCP_META_PRIVILEGED_KEYS`	(none)	Comma-separated META keys (decimal or `0x`-prefixed hex) that `talos_meta` is allowed to write/delete beyond `UserReserved1/2/3`.
`TALOS_MCP_SAFETY_PROFILE`	(unset)	`conservative` / `standard` / `expert` preset that seeds gating flags. `expert` enables `EnableInsecure`.
`TALOS_MCP_RATE_LIMIT`	`10`	HTTP mode: token-bucket refill rate (requests/second, float)
`TALOS_MCP_RATE_BURST`	`20`	HTTP mode: token-bucket burst capacity (int)
`TALOS_MCP_MAX_BODY_SIZE`	`4194304`	HTTP mode: max POST request body size in bytes (4 MiB default)
`TALOS_MCP_MAX_CONCURRENT`	`20`	HTTP mode: max concurrent POST handlers (fail-fast 503 on overload)
`TALOS_MCP_SUBSCRIPTION_RATE`	`1s`	Minimum interval between delivered `resources/updated` notifications per `(session, URI)` pair (Go duration, e.g. `500ms`)
`TALOS_MCP_SUBSCRIPTION_BURST`	`3`	Initial notification burst per `(session, URI)` before the rate kicks in

Compatibility

This server is tested against Talos Linux v1.9.x through v1.13.x.

talos-mcp	Talos Linux	machinery SDK
v0.x (current)	v1.9.0 – v1.13.x	v1.13.4

The server logs a startup warning if the connected cluster's Talos version is outside the tested range. All 19 gRPC methods used have been stable since Talos v1.9.

Upgrade path validation

Client Setup

Claude Code

Add to your project's .mcp.json:

config.json

{
  "mcpServers": {
    "talos": {
      "command": "npx",
      "args": ["-y", "talos-mcp"]
    }
  }
}

Or globally in ~/.claude.json under "mcpServers". If you prefer a local binary, replace "command": "npx" with the path to the binary.

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

config.json

{
  "mcpServers": {
    "talos": {
      "command": "npx",
      "args": ["-y", "talos-mcp"]
    }
  }
}

OpenAI Codex

Add to .codex/config.toml (project) or ~/.codex/config.toml (global):

toml

[mcp_servers.talos]
command = "npx"
args = ["-y", "talos-mcp"]

[mcp_servers.talos.env]
TALOSCONFIG = "/path/to/talosconfig"

Generic MCP client

The server speaks the MCP protocol over stdio:

bash

./talos-mcp

Tools

Read-only

Tool	Description
`talos_resource_definitions`	List all available resource types and their aliases. Call this first to discover what can be queried.
`talos_get`	Get or list any COSI resource by type (e.g. `MachineStatus`, `Member`, `NodeAddress`, `Service`). Supports maintenance-mode (`insecure=true` + `endpoint`).
`talos_version`	Get Talos version info from target nodes. Supports maintenance-mode (`insecure=true` + `endpoint`).
`talos_services`	List all Talos services and their current state (running, stopped, health).
`talos_containers`	List containers in a namespace (default: `k8s.io` for Kubernetes containers).
`talos_processes`	List running processes on target nodes.
`talos_health`	Check cluster health (etcd, Kubernetes API, node readiness). Supports `control_plane_nodes` / `worker_nodes` override.
`talos_logs`	Fetch recent service logs (last N lines, no follow).
`talos_dmesg`	Read kernel ring buffer messages.
`talos_events`	Fetch recent Talos runtime events (service changes, config changes).
`talos_etcd`	Query etcd cluster: `members` (default) or `status`.
`talos_etcd_snapshot`	Stream an etcd snapshot to a local file path.
`talos_list_files`	List files and directories on a node filesystem.
`talos_read_file`	Read file contents from a node filesystem.
`talos_validate`	Validate a machine config (YAML/JSON) offline — no cluster connection.

Mutating

These tools modify cluster state and have explicit safety guards.

Read the full README →View source on GitHub →

Related MCP Servers

View all in Developer Tools View all alternatives

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars

Stargazers on the source repository.

npm downloads

621

Package downloads in the last 30 days.

Last commit

1mo ago

Most recent push to the default branch.

Tools exposed

Callable tools this server registers over MCP.

Directory activity

1 views

Config copies, upvotes, and views on AllMCPs.

Reviews

No reviews yet — be the first to share how this listing worked for you.

Frequently Asked Questions about Talos Linux MCP Server

Add the following block to your claude_desktop_config.json under mcpServers: "mcpServers": { "talos-linux-mcp-server": { "command": "npx", "args": ["-y","talos-mcp"] } }

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:

Live Dynamic SVG Preview

Markdown (GitHub README)

[![AllMCPs](https://allmcps.com/api/badge/talos-linux-mcp-server?style=directory)](https://allmcps.com/mcp/talos-linux-mcp-server)

HTML Embed

<a href="https://allmcps.com/mcp/talos-linux-mcp-server"><img src="https://allmcps.com/api/badge/talos-linux-mcp-server?style=directory" alt="Talos Linux MCP Server on AllMCPs" /></a>

Technical Specs & Signals

CategoryDeveloper Tools

5/9 checks healthy over the last 45d

55Quality signal: Good · 55/100How this signal is calculated ▾

Server availabilityNot measured

Not scored for repo-hosted servers — we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.

Verified ownership10/20

Documentation & tools25/30

Adoption & activity6/15

Community engagement0/10

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 5d ago via OSV.dev · talos-mcp (npm)

★ Featured

AllMCPs Server

Explore Server →

Own this project?

Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.

Claim & get free dofollow

Share & Embed

Add our SVG badge (dark/light directory styles) or embeddable widget to your site.