infra-ops-mcp (skyvanguard/infra-ops-mcp) is an MCP server listed on the M8ven Trust Index. It scores 50 out of 100, grade D. It declares 74 tools. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
D
Caution
50/100

infra-ops-mcp

A comprehensive MCP server for infrastructure operations with 92 tools across 13 categories, covering system monitoring, networking, containers, multi-cloud management, databases, CI/CD, IaC, security, and remote SSH fleet management.

→ skyvanguard/infra-ops-mcp· listed on glama

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

skyvanguard

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glamanot scored here

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
🚨
Known vulnerabilities in dependencies: 1 critical, 7 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 4 credentials: GITHUB_TOKEN, GITLAB_TOKEN, INFRA_PG_PASSWORD, INFRA_REDIS_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// tools this server exposes74 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

backup_status

Check backup status by listing files in the backup directory with sizes and dates

backup_integrity_check

Verify backup file integrity by checking existence, readability, and checksums or archive validity

backup_restore_test

Test restoring a backup by extracting to a temporary location and verifying contents

aws_ec2_instances

List EC2 instances

aws_s3_buckets

List S3 buckets

aws_rds_instances

List RDS instances

aws_lambda_functions

List Lambda functions

aws_cloudwatch_metrics

Get CloudWatch metrics

aws_route53_zones

List Route53 zones

azure_vm_list

List VMs

azure_aks_clusters

List AKS clusters

azure_storage_accounts

List storage accounts

gcp_compute_instances

List GCE instances

gcp_gke_clusters

List GKE clusters

docker_container_list

List Docker containers with their status, names, and basic info

docker_container_inspect

Inspect a Docker container to get detailed configuration and state information

docker_container_logs

Retrieve logs from a Docker container

docker_container_stats

Get real-time resource usage statistics for a Docker container

docker_container_start

Start a stopped Docker container

docker_container_stop

Stop a running Docker container

docker_container_restart

Restart a Docker container

docker_image_list

List Docker images available on the host

docker_network_list

List Docker networks

docker_volume_list

List Docker volumes

docker_compose_status

Get Docker Compose project status showing all services and their states

k8s_pod_list

List Kubernetes pods in a namespace with their status and metadata

k8s_pod_logs

Retrieve logs from a Kubernetes pod

k8s_deployment_list

List Kubernetes deployments in a namespace

k8s_service_list

List Kubernetes services in a namespace

k8s_node_list

List Kubernetes cluster nodes with their status and resource info

k8s_events

List Kubernetes cluster events for debugging and monitoring

k8s_scale_deployment

Scale a Kubernetes deployment to the specified number of replicas

db_postgres_query

Execute a read-only PostgreSQL query

db_postgres_health

Check PostgreSQL database health including version, connections, and size

db_mysql_query

Execute a read-only MySQL query

db_mysql_health

Check MySQL database health including version, status, and connections

db_mongodb_query

Execute a MongoDB find query on a collection

db_mongodb_health

Check MongoDB health including stats, server status, and connections

db_redis_info

Get Redis server INFO for a specific section or all sections

db_redis_health

Check Redis health including PING, memory usage, and database size

dns_records

Query DNS records for a domain with optional type and server

dns_propagation_check

Check DNS propagation across multiple public DNS servers

dns_zone_query

Query zone information including SOA and NS records for a domain

monitoring_custom_metrics

Query custom metrics from a Prometheus endpoint

monitoring_uptime_check

Perform an HTTP or TCP uptime check on a target

monitoring_alerts

Get active alerts from a Prometheus Alertmanager endpoint

monitoring_sla_status

Calculate SLA status and allowed downtime based on uptime percentage

remote_ssh_exec

Execute a command on a remote host via SSH

remote_fleet_command

Execute a command across multiple remote hosts via SSH

remote_host_inventory

List configured remote hosts and check their connectivity status

security_cve_scan

Run a CVE vulnerability scan on a filesystem path using Trivy

security_secrets_scan

Scan for hardcoded secrets and credentials using Gitleaks

security_cert_check

Check TLS certificate details for a host including expiration

security_compliance_check

Run compliance benchmarks using Trivy configuration scanning

security_port_audit

Audit listening ports and flag well-known dangerous ports

storage_raid_status

Get RAID array status and configuration

storage_lvm_info

Get LVM (Logical Volume Manager) information including physical volumes, volume groups, and logical volumes

storage_mounts

Get mounted filesystem information including disk layout and usage

storage_smart_health

Get SMART health data for storage devices

storage_partitions

Get disk partition and block device information

storage_nfs_shares

Get NFS share configuration and exported filesystems

storage_quotas

Get filesystem quota information

system_cpu_info

Get CPU information including manufacturer, brand, speed, cores, and current load

system_memory_info

Get memory information including total, used, free RAM and swap usage

system_disk_usage

Get disk space usage for all mounted filesystems

system_process_list

List running processes with optional filtering by name and sorting by cpu, memory, or pid

system_process_kill

Kill a process by PID. Requires confirmation. Uses taskkill on Windows, kill on Unix.

system_service_list

List system services and their current status

system_service_control

Start, stop, or restart a system service. Requires confirmation. Uses sc on Windows, systemctl on Linux, launchctl on macOS.

system_uptime

Get system uptime and boot time information

system_users

Get currently logged in users

system_scheduled_tasks

List scheduled tasks. Uses schtasks on Windows, crontab -l on Linux, launchctl list on macOS.

system_hardware_info

Get hardware information including system manufacturer, BIOS, and baseboard details

system_drivers

List system drivers. Uses driverquery on Windows, lsmod on Linux, kextstat on macOS.

// known CVEs in dependencies1 critical7 high1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@3.2.4GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

high@modelcontextprotocol/sdk@1.25.3GHSA-345p-7cg4-v4c7

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

highjs-yaml@4.1.1GHSA-52cp-r559-cp3m

js-yaml: YAML merge-key chains can force quadratic CPU consumption

highjs-yaml@4.1.1GHSA-5p4m-2wfm-xmqj

JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported

highsysteminformation@5.30.5GHSA-5vv4-hvf7-2h46

Command Injection via Unsanitized `locate` Output in `versions()` — systeminformation

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
🔐 secretGITHUB_TOKEN"": "ghp_xxx",
🔐 secretGITLAB_TOKENGitLab access token
configINFRA_AWS_PROFILEAWS profile name
configINFRA_AWS_REGION"": "us-east-1"
configINFRA_AZURE_SUBSCRIPTIONAzure subscription ID
configINFRA_GCP_PROJECTGCP project ID
configINFRA_PG_DATABASEPostgreSQL database
configINFRA_PG_HOSTPostgreSQL host
🔐 secretINFRA_PG_PASSWORDPostgreSQL password
configINFRA_PG_PORTPostgreSQL port
configINFRA_PG_USERPostgreSQL user
configINFRA_REDIS_HOSTRedis host
🔐 secretINFRA_REDIS_PASSWORDRedis password
configINFRA_REDIS_PORTRedis port
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

74/74 tools missing one or more hints — backup_status (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); backup_integrity_check (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); backup_restore_test (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +71 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool test coverage

Only 9/74 tools referenced in tests (12%)

Write tests that reference each tool by name so every tool has at least one test.

Production dependencies are patched

0 critical, 7 high severity in production deps — @modelcontextprotocol/sdk@1.25.3 (high), js-yaml@4.1.1 (high)

Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.

Dev dependencies

1 critical/high in dev-only deps (does not ship to users)

Upgrade dev dependencies when convenient.

Dependency freshness

1/30 production deps stale: generic-pool@2023-01-26 (3.6y)

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/skyvanguard/infra-ops-mcp?variant=verified)](https://m8ven.ai/mcp/skyvanguard/infra-ops-mcp)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: aa1b936f517fb7431f099b98b473d3a86fbab92a
code hash: a10e942379361612b5b4d3f98454d13e8391bc6566b294152d615a6ae83060f5
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client