Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Descripción del creador (original en inglés)
Read-only-first OpenStack inspection: servers, images, volumes, networks, Keystone catalog.
Estos tres nunca se combinan en una sola puntuación: las opiniones, las mediciones y la popularidad son cosas distintas.
Todavía no escribimos un resumen sencillo para este. Abajo están los datos que leímos del registro.
Elige la app de IA que usas y copia la configuración.
OS_AUTH_URL, OS_USERNAME, OS_PASSWORD, OS_USER_DOMAIN_NAME, OS_PROJECT_ID, OS_APPLICATION_CREDENTIAL_ID, OS_APPLICATION_CREDENTIAL_SECRET, OS_REGION_NAME, OPENSTACK_MCP_PROJECT_IDS, OPENSTACK_MCP_CACERT_PEMLos valores marcados como secretos son llaves de tu cuenta. Nunca los compartas ni los pegues en un chat.
Necesitas
¿Qué app usas?
Elige tu app arriba. La recordamos, así que la próxima vez el botón dirá “Instalar en …”.
Abre Claude Desktop → Settings → Developer → Edit Config y pega esto en claude_desktop_config.json
{
"mcpServers": {
"openstack": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"OS_AUTH_URL",
"-e",
"OS_USERNAME",
"-e",
"OS_PASSWORD",
"-e",
"OS_USER_DOMAIN_NAME",
"-e",
"OS_PROJECT_ID",
"-e",
"OS_APPLICATION_CREDENTIAL_ID",
"-e",
"OS_APPLICATION_CREDENTIAL_SECRET",
"-e",
"OS_REGION_NAME",
"-e",
"OPENSTACK_MCP_PROJECT_IDS",
"-e",
"OPENSTACK_MCP_CACERT_PEM",
"ghcr.io/oomchiller/openstack-mcp-server:0.1.2"
],
"env": {
"OS_AUTH_URL": "your-value",
"OS_USERNAME": "your-value",
"OS_PASSWORD": "your-value",
"OS_USER_DOMAIN_NAME": "your-value",
"OS_PROJECT_ID": "your-value",
"OS_APPLICATION_CREDENTIAL_ID": "your-value",
"OS_APPLICATION_CREDENTIAL_SECRET": "your-value",
"OS_REGION_NAME": "your-value",
"OPENSTACK_MCP_PROJECT_IDS": "your-value",
"OPENSTACK_MCP_CACERT_PEM": "your-value"
}
}
}
}Ejecuta esto en tu terminal
claude mcp add openstack --env OS_AUTH_URL=your-value --env OS_USERNAME=your-value --env OS_PASSWORD=your-value --env OS_USER_DOMAIN_NAME=your-value --env OS_PROJECT_ID=your-value --env OS_APPLICATION_CREDENTIAL_ID=your-value --env OS_APPLICATION_CREDENTIAL_SECRET=your-value --env OS_REGION_NAME=your-value --env OPENSTACK_MCP_PROJECT_IDS=your-value --env OPENSTACK_MCP_CACERT_PEM=your-value -- docker run -i --rm -e OS_AUTH_URL -e OS_USERNAME -e OS_PASSWORD -e OS_USER_DOMAIN_NAME -e OS_PROJECT_ID -e OS_APPLICATION_CREDENTIAL_ID -e OS_APPLICATION_CREDENTIAL_SECRET -e OS_REGION_NAME -e OPENSTACK_MCP_PROJECT_IDS -e OPENSTACK_MCP_CACERT_PEM ghcr.io/oomchiller/openstack-mcp-server:0.1.2Completa los valores vacíos antes de ejecutarlo.
Pégalo en .cursor/mcp.json de tu proyecto, o en ~/.cursor/mcp.json
{
"mcpServers": {
"openstack": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"OS_AUTH_URL",
"-e",
"OS_USERNAME",
"-e",
"OS_PASSWORD",
"-e",
"OS_USER_DOMAIN_NAME",
"-e",
"OS_PROJECT_ID",
"-e",
"OS_APPLICATION_CREDENTIAL_ID",
"-e",
"OS_APPLICATION_CREDENTIAL_SECRET",
"-e",
"OS_REGION_NAME",
"-e",
"OPENSTACK_MCP_PROJECT_IDS",
"-e",
"OPENSTACK_MCP_CACERT_PEM",
"ghcr.io/oomchiller/openstack-mcp-server:0.1.2"
],
"env": {
"OS_AUTH_URL": "your-value",
"OS_USERNAME": "your-value",
"OS_PASSWORD": "your-value",
"OS_USER_DOMAIN_NAME": "your-value",
"OS_PROJECT_ID": "your-value",
"OS_APPLICATION_CREDENTIAL_ID": "your-value",
"OS_APPLICATION_CREDENTIAL_SECRET": "your-value",
"OS_REGION_NAME": "your-value",
"OPENSTACK_MCP_PROJECT_IDS": "your-value",
"OPENSTACK_MCP_CACERT_PEM": "your-value"
}
}
}
}Tu navegador te pide permiso para abrir la app; luego la app muestra la configuración y te pide confirmar. Los valores de las claves quedan vacíos para que los completes tú.
Pégalo en .vscode/mcp.json de tu proyecto
{
"servers": {
"openstack": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"OS_AUTH_URL",
"-e",
"OS_USERNAME",
"-e",
"OS_PASSWORD",
"-e",
"OS_USER_DOMAIN_NAME",
"-e",
"OS_PROJECT_ID",
"-e",
"OS_APPLICATION_CREDENTIAL_ID",
"-e",
"OS_APPLICATION_CREDENTIAL_SECRET",
"-e",
"OS_REGION_NAME",
"-e",
"OPENSTACK_MCP_PROJECT_IDS",
"-e",
"OPENSTACK_MCP_CACERT_PEM",
"ghcr.io/oomchiller/openstack-mcp-server:0.1.2"
],
"env": {
"OS_AUTH_URL": "your-value",
"OS_USERNAME": "your-value",
"OS_PASSWORD": "your-value",
"OS_USER_DOMAIN_NAME": "your-value",
"OS_PROJECT_ID": "your-value",
"OS_APPLICATION_CREDENTIAL_ID": "your-value",
"OS_APPLICATION_CREDENTIAL_SECRET": "your-value",
"OS_REGION_NAME": "your-value",
"OPENSTACK_MCP_PROJECT_IDS": "your-value",
"OPENSTACK_MCP_CACERT_PEM": "your-value"
}
}
}
}Tu navegador te pide permiso para abrir la app; luego la app muestra la configuración y te pide confirmar. Los valores de las claves quedan vacíos para que los completes tú.
Este se ejecuta en tu computadora, y ChatGPT solo puede conectarse a servidores en internet. Elige otra app.
Tu elección se guarda en una cookie en este dispositivo; no necesitas cuenta.
OS_USERNAME envOS_USER_DOMAIN_NAME envOS_PROJECT_ID envOS_APPLICATION_CREDENTIAL_ID envOS_REGION_NAME envOPENSTACK_MCP_PROJECT_IDS envOPENSTACK_MCP_CACERT_PEM envEsta configuración se genera a partir de la ficha del creador en el registro. Si el README dice otra cosa, sigue el README.
Se ejecuta en tu computadora; la lista de herramientas aparece en tu app de IA después de instalarlo.
Revisamos información que cualquiera puede ver; no hemos leído el código. Las revisiones que no aplican no se cuentan. · Revisado el 6 nov 2026
El nombre en el registro se verificó con la cuenta de GitHub oomchiller, dueña del repo
Todavía no hemos leído este repo en GitHub
Todavía no hemos leído este repo en GitHub
Este se ejecuta en tu computadora; no hay endpoint en internet
Se ejecuta en tu computadora y usa ajustes locales en su lugar
Se ejecuta en tu computadora; solo podemos leer listas de herramientas de endpoints en internet
Comparado con todos los servidores activos de esta categoría en el registro. Las estrellas solo cuentan cuando quien lo publica es dueño del repo.
Superó 1 de 1 revisiones básicas aplicables. No hemos leído el código. Antes de agregar una clave o un token, revisa qué acceso pide el servidor y usa una clave que tenga solo los permisos que necesitas.
Debes completar: OS_AUTH_URL, OS_PASSWORD, OS_APPLICATION_CREDENTIAL_SECRET
Se ejecuta en tu computadora. Tu app de IA lo inicia cuando hace falta, y los datos no pasan por los servidores del creador (a menos que el propio servidor llame a un servicio en línea).
El repo de GitHub cambió por última vez –, y la última versión (0.1.2) llegó al registro anteayer.
Las apps compatibles con MCP, como Claude Desktop, Claude Code, Cursor y VS Code. También necesitas Docker en tu computadora.
En la misma categoría: Spec Driven Development, Remote Desktop Commander, DiffCI
Servidores de la misma categoría hechos por otros creadores, ordenados por estrellas.
Cómo leer una tarjeta:★ Estrellas de GitHubiTres pilares: reseñas · revisiones · usoiActualizado = fecha en que se publicó la última versión en el registroi
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Fail-closed, change-aware verification for AI coding agents with affected-test guidance.
Copiado tal cual del repo del creador. PopNx MCP no lo ha revisado ni lo respalda. Se quitaron HTML, imágenes y scripts. Los enlaces llevan fuera de este sitio.
Community project, not affiliated with OpenStack/OpenInfra Foundation.
A Model Context Protocol server that lets AI assistants inspect OpenStack clouds. It is read-only by default, bounded in what it returns, and configured entirely through OpenStack's own settings and environment variables, so it runs unchanged as a local process or a container.
flowchart LR
AI[MCP client] <-->|stdio / Streamable HTTP| Server[openstack-mcp-server] Server <-->|openstacksdk| Cloud[OpenStack APIs]
get_scope.limit, complete and next_marker; results are typed (outputSchema, structuredContent) and capped in size.isError results with a category and an action, without SDK messages, URLs or tokens.The read-only mode is a convenience. The security boundary is the Keystone role of the identity you configure; see SECURITY.md.
The server is listed in the MCP Registry as io.github.oomchiller/openstack-mcp-server; registry-aware clients can install it from there. Manual setup:
docker run --rm -i \
-e OS_AUTH_URL=https://keystone.example.com:5000/v3 \ -e OS_USERNAME=mcp-reader -e OS_PASSWORD \ -e OS_USER_DOMAIN_NAME=Default -e OS_PROJECT_ID=0123456789abcdef0123456789abcdef \ -e OS_REGION_NAME=RegionOne \ ghcr.io/oomchiller/openstack-mcp-server@sha256:
Pin the image by digest; release digests are listed on the releases page. For a private CA, pass the certificate text in OPENSTACK_MCP_CACERT_PEM.
{
"mcpServers": { "openstack": { "command": "uvx", "args": ["--from", "git+https://github.com/oomchiller/openstack-mcp-server@v0.1.2", "openstack-mcp-server"], "env": { "OS_CLOUD": "mycloud" } } } }
clouds.yaml is found the usual way (OS_CLIENT_CONFIG_FILE, ./clouds.yaml, ~/.config/openstack/clouds.yaml, /etc/openstack/).
Credentials come from openstacksdk: OS_CLOUD with clouds.yaml, or OS_* variables (password or application credentials). Server behaviour:
| Variable | Default | Meaning |
|---|---|---|
OPENSTACK_MCP_MODE | readonly | readonly or admin. |
OPENSTACK_MCP_ENABLE_WRITE_TOOLS | false | With admin, registers write tools. |
OPENSTACK_MCP_PROJECT_IDS | empty | Comma-separated project IDs the server may use; the first is the default. |
OPENSTACK_MCP_DEFAULT_LIMIT | 50 | Items per list call when limit is omitted. |
OPENSTACK_MCP_MAX_LIMIT | 100 | Largest accepted limit (up to 1000). |
OPENSTACK_MCP_MAX_RESPONSE_BYTES | 524288 | Largest result; larger ones fail with response_too_large. |
OPENSTACK_MCP_API_TIMEOUT | 10 | Seconds per OpenStack request; no retries. |
OPENSTACK_MCP_CACERT_PEM | unset | CA bundle as PEM text; takes precedence over OS_CACERT. |
OPENSTACK_MCP_ALLOW_INSECURE | false | Allow verify: false or an http:// auth URL. |
OPENSTACK_MCP_ENABLE_PROMPTS | true | Register the prompt. |
OPENSTACK_MCP_ENABLE_RESOURCES | true | Register openstack://scope. |
OPENSTACK_MCP_TRANSPORT | stdio | stdio or streamable-http. |
OPENSTACK_MCP_HTTP_HOST / _PORT | 127.0.0.1 / 8000 | HTTP bind; path /mcp. |
OPENSTACK_MCP_HTTP_ALLOW_REMOTE | false | Allow a non-loopback HTTP bind. The HTTP transport has no authentication. |
OPENSTACK_MCP_LOG_LEVEL | WARNING | stderr log level. SDK loggers stay at CRITICAL. |
An invalid OPENSTACK_MCP_* value stops the server with exit code 2 and names the variable. Missing credentials do not: the server starts, and cloud tools return [not_configured].
Gateways that run several instances of this server and do not prefix prompt names or resource URIs (Docker MCP Gateway) should set OPENSTACK_MCP_ENABLE_PROMPTS=false and OPENSTACK_MCP_ENABLE_RESOURCES=false.
| Group | Tools |
|---|---|
| Scope | get_scope |
| Compute | list_servers, get_server, list_flavors |
| Image | list_images, get_image |
| Block storage | list_volumes, get_volume, list_volume_attachments, get_volume_attachment |
| Network | list_networks, get_network, list_subnets, get_subnet, list_ports, get_port, list_floating_ips, list_routers, get_router, list_router_interfaces, list_security_groups, get_security_group |
| Identity | list_regions, list_domains, list_projects, list_services, list_endpoints |
| Service inventory | list_hypervisors, list_compute_services, list_aggregates, list_network_agents, list_volume_services |
Identity and service inventory usually need more than a project reader role; such calls fail with [forbidden] rather than returning empty lists.
With OPENSTACK_MCP_MODE=admin and OPENSTACK_MCP_ENABLE_WRITE_TOOLS=true, 31 experimental write tools are added (servers, volumes, images, networks, subnets, ports, floating IPs, routers, security groups). See docs/SPEC.md for the full behaviour.
uv sync --locked
uv run pytest --cov uv run ruff check . && uv run ruff format --check . uv run mypy src tests
See CONTRIBUTING.md, ARCHITECTURE.md and DECISIONS.md.
Apache License 2.0; see LICENSE. Parts of the code started in openstack-kr/python-openstackmcp-server; see NOTICE.