American Cloud MCP Server

Gérez les machines virtuelles, Kubernetes, le stockage, le réseau, le DNS et les bases de données gérées d’American Cloud depuis Claude, Cursor ou tout client MCP. S’exécute sur votre machine et reste en lecture seule jusqu’à ce que vous ajoutiez --allow-writes.

Documentation

American Cloud MCP Server

Manage American Cloud infrastructure from Claude, Cursor, and any other MCP client.

Runs locally on your machine over stdio — your API keys never leave your environment, and no hosted middleman sits between your AI assistant and your cloud.

Claude Code auditing American Cloud infrastructure over the MCP server with a read-only key

Quick start

Add to your MCP client configuration (Claude Desktop, Claude Code, Cursor, …):

{
  "mcpServers": {
    "americancloud": {
      "command": "npx",
      "args": ["-y", "@americancloud/mcp"],
      "env": {
        "AMERICANCLOUD_API_CLIENT_ID": "your-client-id",
        "AMERICANCLOUD_API_CLIENT_SECRET": "your-client-secret"
      }
    }
  }
}

Create and manage API keys at console.americancloud.com/api-keys.

The server is read-only by default — see Safety before enabling resource management.

Service groups

By default the core infrastructure groups are enabled: compute, storage, networking, kubernetes. Scope or extend with --services:

npx @americancloud/mcp --services all
npx @americancloud/mcp --services compute,dns
GroupToolsCovers
compute (default)25VMs, packages, images, regions, SSH keys
storage (default)27block storage, snapshots, object storage and its access keys
networking (default)57isolated/VPC networks, VPC tiers, public IPs, firewall, port forwarding, load balancers, egress, ACLs
kubernetes (default)11managed Kubernetes clusters
databases36managed MySQL/PostgreSQL/Redis, backups, infrastructure, offerings
wordpress16managed WordPress
dns7hosted DNS zones and records

Scoping with --services keeps the tool list small for context-sensitive clients.

Safety

This server lets an AI assistant manage real infrastructure with real billing. It's designed to be safe by default:

  • Read-only by default. Out of the box, only read tools (list/get/cost estimates) are registered — an assistant can explore and inspect but cannot create, modify, or delete anything. To enable management tools, add "--allow-writes" to args.
  • Use the narrowest key. For inspection, provision a read-only API key — then resource mutation is impossible regardless of any flag, because the key itself can't perform writes. Only use a read-write key together with --allow-writes when you actually want the assistant to make changes. One read tool needs a read-write key: get_kubernetes_cluster_config, because the kubeconfig grants full access to the cluster.
  • Destructive tools are flagged. Delete/release/reinstall/revert/cancel tools are marked destructive, so MCP clients that support confirmations will prompt before running them.
// management-enabled (read-write key + opt-in flag):
"args": ["-y", "@americancloud/mcp", "--allow-writes"]

With writes enabled, the assistant can provision and deploy — and it still shows you the cost and waits for approval before creating anything:

Claude Code provisioning a server and deploying to it over the MCP server with --allow-writes — cost shown first, writes run through you

Environment

VariableRequiredPurpose
AMERICANCLOUD_API_CLIENT_IDyesAPI client ID (X-API-Client-ID)
AMERICANCLOUD_API_CLIENT_SECRETyesAPI client secret (X-API-Client-Secret)
AMERICANCLOUD_API_URLnoAPI base URL override

Guides

Full documentation on the American Cloud docs site:

Versioning

See VERSIONING.md — the server versions independently; the exact-pinned @americancloud/sdk dependency states the API surface it targets.

Contributing

This server is generated and maintained in lockstep with the American Cloud SDK and API — see CONTRIBUTING.md for how to report issues or propose changes.

License

Apache-2.0 — see LICENSE and NOTICE.