Model Context Protocol moderate risk

Alibaba Cloud Ops

This MCP server enables AI assistants to manage and monitor Alibaba Cloud resources like ECS, RDS, OSS, and VPC, and deploy applications, using Alibaba Cloud APIs.

Connections & Capabilities

Connects To

GitHubDocker

Capabilities

readwriteexecadmin

Quickstart

Config

{
  "mcpServers": {
    "alibaba-cloud-ops-mcp-server": {
      "timeout": 600,
      "command": "uvx",
      "args": [
        "alibaba-cloud-ops-mcp-server@latest"
      ],
      "env": {
        "ALIBABA_CLOUD_ACCESS_KEY_ID": "Your Access Key ID",
        "ALIBABA_CLOUD_ACCESS_KEY_SECRET": "Your Access Key SECRET"
      }
    }
  }
}

Exposed MCP Tools (10)

safe

DescribeInstances

Retrieves information about ECS instances.

Read-only operation.

high

RunInstances

Creates new ECS instances.

Creates cloud resources, potentially incurring costs and security implications.

critical

DeleteInstances

Deletes ECS instances.

Destructive operation that permanently removes cloud resources.

safe

ListBuckets

Lists available OSS buckets.

Read-only operation.

moderate

PutBucket

Creates a new OSS bucket.

Creates a new storage bucket.

critical

DeleteBucket

Deletes an OSS bucket.

Destructive operation that permanently removes a storage bucket and its contents.

high

OOS_CodeDeploy

Deploys applications to ECS instances using OOS.

Automates application deployment, which can have significant impact if misconfigured.

safe

LOCAL_ListDirectory

Lists files and subdirectories in a given directory on the server.

Read-only operation on the local filesystem.

critical

LOCAL_RunShellScript

Executes a shell script or command on the server.

Allows arbitrary code execution on the server.

safe

LOCAL_AnalyzeDeployStack

Identifies the project's technology stack and deployment method.

Analyzes local files, no external impact.

Safety Assessment

This MCP server provides significant capabilities for managing Alibaba Cloud resources, but it also introduces risks due to its ability to perform write and delete operations. It's safe to use if access keys are carefully managed and the AI assistant is used responsibly. Risky scenarios include using it with an untrusted AI assistant or exposing it to unauthorized users.

Leverages Alibaba Cloud's existing security infrastructure.
OOS (Operation Orchestration Service) is used for many write operations, providing some level of auditing.
API access is controlled by Alibaba Cloud's IAM (Identity and Access Management).

Requires providing Alibaba Cloud Access Key ID and Secret, which if compromised, grants broad access.
Enables potentially destructive operations like deleting instances and buckets.
Directly interacts with cloud resources, so errors can have real-world consequences.
LOCAL_RunShellScript allows arbitrary code execution on the server's host.