Rancher MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 97 installs a week from pypi. Last commit 4 Oct 2026.
Capability-aware MCP server for Rancher-managed Kubernetes: discovery, resources, workflows.
What the code does
We read the source, 3 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
return subprocess.run( # noqa: S603
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add rancher-mcp -e 'RANCHER_URL=<RANCHER_URL>' -e 'RANCHER_TOKEN=<RANCHER_TOKEN>' -- uvx rancher-mcp{
"mcpServers": {
"rancher-mcp": {
"command": "uvx",
"args": [
"rancher-mcp"
],
"env": {
"RANCHER_TOKEN": "<RANCHER_TOKEN>",
"RANCHER_URL": "<RANCHER_URL>"
}
}
}
}[mcp_servers.rancher-mcp]
command = "uvx"
args = ["rancher-mcp"]
env = { RANCHER_URL = "<RANCHER_URL>", RANCHER_TOKEN = "<RANCHER_TOKEN>" }{
"mcpServers": {
"rancher-mcp": {
"command": "uvx",
"args": [
"rancher-mcp"
],
"env": {
"RANCHER_TOKEN": "<RANCHER_TOKEN>",
"RANCHER_URL": "<RANCHER_URL>"
}
}
}
}{
"servers": {
"rancher-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"rancher-mcp"
],
"env": {
"RANCHER_TOKEN": "<RANCHER_TOKEN>",
"RANCHER_URL": "<RANCHER_URL>"
}
}
}
}Put your own values in place of
<RANCHER_URL> (Rancher server URL (single-instance mode)), <RANCHER_TOKEN> (Rancher API token (token-xxxxx:yyyyyyyyy)).
The author’s registry entry marks them as required.
Optional settings from the registry entry, left out of the block above:
RANCHER_VERIFY_SSL (Verify TLS certificates (default true)), RANCHER_INSTANCES_JSON (Multi-instance config JSON (overrides single-instance mode; supports per-instance read_only)).
Alternatives to Rancher MCP
same job, measured the same wayKubernetes MCP server for diagnosis, resource management, GitOps, and RBAC-enforced operations.
MCP server for Azure Logic Apps - debug workflows, manage runs, and authoring
TypeScript MCP server for AI-powered containerization workflows with Docker and Kubernetes support
Read-only Kubernetes MCP server: inspect resources, logs, events, and metrics. Secrets are masked.
SQL Server MCP with RAG capabilities for macOS (Docker SQL Server support)
OpenShift/Kubernetes cluster management via the oc CLI for MCP clients
Kubernetes MCP server with RBAC-style, context-scoped guardrails for AI agents.
MimiOps is an opinionated MCP server for Kubernetes
Rancher MCP — questions
Answers built from our own checks of this server.