Rancher Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Rancher Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="./docs/logo.svg" alt="rancher-mcp logo" width="96" /> </p>
<p align="center"> <a href="https://github.com/Jasonrve/rancher-mcp/actions/workflows/ci.yml"> <img src="https://github.com/Jasonrve/rancher-mcp/actions/workflows/ci.yml/badge.svg" alt="CI status" /> </a> <a href="https://github.com/Jasonrve/rancher-mcp/actions/workflows/pages.yml"> <img src="https://github.com/Jasonrve/rancher-mcp/actions/workflows/pages.yml/badge.svg" alt="GitHub Pages status" /> </a> <img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="MIT license" /> <img src="https://img.shields.io/badge/Node-%3E=22-339933.svg" alt="Node 22+" /> </p>
A polished TypeScript MCP server for Rancher workflows.
It exposes the Rancher tool surface as a standalone MCP service, forwards caller identity when available, and falls back to configured Rancher credentials when needed. The repo includes tests, a documentation site, and GitHub Pages publishing.
Rancher users often need the tool surface without the surrounding operator/runtime package. rancher-mcp keeps the useful Rancher and Fleet actions, but packages them as a focused MCP server that is easier to run locally, automate, and connect to agent clients.
Authorization header to Rancher| Group | Examples | What it is for |
|---|---|---|
| Rancher core | cluster_list, project_create, namespace_create | Everyday cluster, project, and namespace workflows |
| Access control | project_member_create, principal_get_by_name | Finding principals and binding them to projects |
| Fleet | create_fleet_gitrepo, update_fleet_gitrepo, force_fleet_sync | GitOps repo and sync management |
npm install
npm test
npm run build
npm run devThis repository is set up for a beta release channel on npm.
.github/workflows/publish-beta.ymlbetanpx -y rancher-mcp@beta| Variable | Purpose |
|---|---|
RANCHER_URL | Base Rancher URL |
RANCHER_TOKEN | Fallback bearer token |
RANCHER_USERNAME | Fallback basic-auth username |
RANCHER_PASSWORD | Fallback basic-auth password |
RANCHER_MCP_TRANSPORT | http or stdio |
RANCHER_MCP_PATH | HTTP route for MCP traffic |
PORT | HTTP listen port |
| Command | Description |
|---|---|
npm run dev | Start the server |
npm run test | Run Vitest |
npm run build | Compile TypeScript |
npm run docs:dev | Start the docs site |
npm run docs:build | Build the docs site |
npm run docs:preview | Preview the docs site |
.
├── src/
├── tests/
├── docs/
├── dist/
├── package.json
└── README.mdThis repository mirrors the Rancher-side MCP surface from the original C# implementation.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.