Purpose
cert-manager-mcp-server is an MCP (Model Context Protocol) server used to manage and troubleshoot certificates and other resources managed by cert-manager. It encapsulates cert-manager and Kubernetes-related operations as MCP tools for invocation by MCP-compatible clients (such as Claude Desktop).
Main Capabilities
This MCP server provides the following tools for interacting with cert-manager and Kubernetes resources:
Certificate Management
- list_certificates: Lists certificates within a namespace or across all namespaces, supporting filtering of expired certificates and pagination. The include_domains parameter can be used to include domains in the listed certificates (the default value is False, to make the response more compact).
- get_certificate: Retrieves detailed information about a specified certificate.
- renew_certificate: Forces renewal of a certificate.
Issuer Management
- list_issuers: Lists Issuers or ClusterIssuers along with their status and configuration. Unlike list_certificates, there is no pagination or filtering functionality, apart from distinguishing between cluster-level/namespace-level Issuers and the namespace of the Issuer.
Kubernetes Context Management
- list_namespaces: Lists all namespaces in the cluster.
- list_contexts: Lists all available kubeconfig contexts.
- get_current_context: Retrieves the currently active kubeconfig context.
- switch_context: Switches to a different kubeconfig context, updating the in-memory configuration.
Usage
The project provides a Claude Desktop configuration example, as well as a Claude Desktop configuration example for GKE clusters. For the specific configuration content and installation steps, please refer to the repository documentation.
Applicable Scenarios
Suitable for scenarios that require viewing, troubleshooting, and renewing certificates managed by cert-manager through an MCP client, as well as scenarios that require viewing or switching Kubernetes contexts.
Limitations
Apart from the above tools and configuration examples, information regarding fees, pricing, platform support scope, actual usage results, etc. is not currently provided.
