MCP server for management and troubleshooting of certificates and other resources managed by cert-manager.

Claude Desktop config:

{
  "mcpServers": {
    "cert-manager-mcp-server": {
      "command": "sh",
      "args": [
        "-c",
        "docker run -i --rm -v ~/.kube:/home/app/.kube:ro -v ~/.config/gcloud:/home/app/.config/gcloud piblokto/cert-manager-mcp-server:v0.0.5"
      ]
    }
  }
}

Claude Desktop config for GKE clusters:

{
  "mcpServers": {
    "cert-manager-mcp-server": {
      "command": "sh",
      "args": [
        "-c",
        "docker run -i --rm -v ~/.kube:/home/app/.kube:ro -v ~/.config/gcloud:/home/app/.config/gcloud -e CLOUDSDK_CORE_PROJECT=<DEFAULT_PROJECT_ID> -e CLOUDSDK_COMPUTE_REGION=<DEFAULT_COMPUTE_REGION> piblokto/cert-manager-mcp-server:v0.0.5"
      ]
    }
  }
}

This MCP server provides the following tools for interacting with cert-manager and Kubernetes resources:

• list_certificates - List certificates within a namespace or across all namespaces, with options for filtering expired certificates and pagination. You can also include domains for listed certificates with include_domains argument (defaults to False to make responses more compact)
• get_certificate - Get detailed information about a specific certificate
• renew_certificate - Force renewal of a certificate

• list_issuers - List issuers or cluster issuers with their statuses and configuration. Unlike list_certificates there are no pagination or filtering except for cluster/namespaced issuers and namespaces for Issuers.

• list_namespaces - List all namespaces in the cluster
• list_contexts - List all available kubeconfig contexts
• get_current_context - Get the currently active kubeconfig context
• switch_context - Switch to a different kubeconfig context. Updates in-memory config