[{"_1":2,"_279":-5,"_280":-5},"loaderData",{"_3":4,"_13":14,"_16":17,"_275":276},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5},"username","routes/_layout.r.$namespace.$reponame",{"_18":19,"_20":-5,"_21":11,"_22":11,"_23":24,"_25":26,"_27":-5,"_28":11,"_29":30,"_90":91,"_116":117,"_274":11},"canonicalUrl","https://hub.docker.com/r/acuvity/mcp-server-alibaba-cloud-ops/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","acuvity","reponame","mcp-server-alibaba-cloud-ops","cloudBuildSource","isAutobuildsAvailable","repo",{"_31":32,"_41":42,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_34":26,"_23":24,"_59":60,"_61":44,"_62":63,"_64":65,"_66":67,"_68":-5,"_69":63,"_70":71,"_72":11,"_73":24,"_74":75,"_80":11,"_81":82,"_87":24,"_88":89},"categories",[33,38],{"_34":35,"_36":37},"name","Integration & delivery","slug","integration-and-delivery",{"_34":39,"_36":40},"Machine learning & AI","machine-learning-and-ai","content_types",[43,44],"helm","image","date_registered","2025-05-02T21:38:12.736378Z","description","Alibaba Cloud integration, supporting ECS, Cloud Monitor, OOS and widely used cloud products.","is_private","last_updated","2025-06-14T21:13:18.916361Z","last_modified","2025-06-14T21:13:18.488455Z","media_types",[56,57,58],"application/vnd.cncf.helm.config.v1+json","application/vnd.oci.image.index.v1+json","application/vnd.oci.image.config.v1+json","pull_count",2169,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","

\n \n \n $\"Acuvity$ \n \n \n

\n \n $\"Join$ \n \n\n $\"Follow$ \n \n\n $\"Follow$ \n \n

\n\n\n# What is mcp-server-alibaba-cloud-ops?\n[![Rating](https://img.shields.io/badge/D-3775A9?label=Rating)](https://docs.anthropic.com/en/docs/build-with-claude/tool-use/implement-tool-use#best-practices-for-tool-definitions)\n[![Helm](https://img.shields.io/badge/1.0.0-3775A9?logo=helm&label=Charts&logoColor=fff)](https://hub.docker.com/r/acuvity/mcp-server-alibaba-cloud-ops/tags/)\n[![Docker](https://img.shields.io/docker/image-size/acuvity/mcp-server-alibaba-cloud-ops/0.8.7?logo=docker&logoColor=fff&label=0.8.7)](https://hub.docker.com/r/acuvity/mcp-server-alibaba-cloud-ops)\n[![PyPI](https://img.shields.io/badge/0.8.7-3775A9?logo=pypi&logoColor=fff&label=alibaba-cloud-ops-mcp-server)](https://github.com/aliyun/alibaba-cloud-ops-mcp-server)\n[![Scout](https://img.shields.io/badge/Active-3775A9?logo=docker&logoColor=fff&label=Scout)](https://hub.docker.com/r/acuvity/mcp-server-alibaba-cloud-ops/)\n[![Install in VS Code Docker](https://img.shields.io/badge/VS_Code-One_click_install-0078d7?logo=githubcopilot)](https://insiders.vscode.dev/redirect/mcp/install?name=mcp-server-alibaba-cloud-ops&config=%7B%22args%22%3A%5B%22run%22%2C%22-i%22%2C%22--rm%22%2C%22--read-only%22%2C%22-e%22%2C%22ALIBABA_CLOUD_ACCESS_KEY_ID%22%2C%22-e%22%2C%22ALIBABA_CLOUD_ACCESS_KEY_SECRET%22%2C%22docker.io%2Facuvity%2Fmcp-server-alibaba-cloud-ops%3A0.8.7%22%5D%2C%22command%22%3A%22docker%22%7D)\n\n**Description:** Alibaba Cloud integration, supporting ECS, Cloud Monitor, OOS and widely used cloud products.\n\nPackaged by Acuvity and published to our curated MCP server [registry](https://mcp.acuvity.ai) from alibaba-cloud-ops-mcp-server original [sources](https://github.com/aliyun/alibaba-cloud-ops-mcp-server).\n\n**Quick links:**\n\n- [Integrate with your IDE](https://github.com/acuvity/mcp-servers-registry/blob/main/mcp-server-alibaba-cloud-ops/docker/README.md#-clients-integrations)\n- [Install with Docker](https://github.com/acuvity/mcp-servers-registry/tree/main/mcp-server-alibaba-cloud-ops/docker/README.md#-run-it-with-docker)\n- [Install with Helm](https://github.com/acuvity/mcp-servers-registry/tree/main/mcp-server-alibaba-cloud-ops/charts/mcp-server-alibaba-cloud-ops/README.md#how-to-install)\n\n# Why We Built This\n\nAt [Acuvity](https://acuvity.ai), security is central to our mission—especially for critical systems like MCP servers and integration in agentic systems.\nTo address this need, we've created a secure and robust Docker image designed to ensure alibaba-cloud-ops-mcp-server run reliably and safely.\n\n## 🔐 Key Security Features\n\n

📦 Isolated Immutable Sandbox

\n\n- **Isolated Execution**: All tools run within secure, containerized sandboxes to enforce process isolation and prevent lateral movement.\n- **Non-root by Default**: Enforces least-privilege principles, minimizing the impact of potential security breaches.\n- **Read-only Filesystem**: Ensures runtime immutability, preventing unauthorized modification.\n- **Version Pinning**: Guarantees consistency and reproducibility across deployments by locking tool and dependency versions.\n- **CVE Scanning**: Continuously scans images for known vulnerabilities using [Docker Scout](https://docs.docker.com/scout/) to support proactive mitigation.\n- **SBOM & Provenance**: Delivers full supply chain transparency by embedding metadata and traceable build information.\"\n

\n\n

🛡️ Runtime Security and Guardrails

\n\n**Minibridge Integration**: [Minibridge](https://github.com/acuvity/minibridge) establishes secure Agent-to-MCP connectivity, supports Rego/HTTP-based policy enforcement 🕵️, and simplifies orchestration.\n\nThe [ARC](https://github.com/acuvity/mcp-servers-registry/tree/main) container includes a [built-in Rego policy](https://github.com/acuvity/mcp-servers-registry/tree/main/mcp-server-alibaba-cloud-ops/docker/policy.rego) that enables a set of runtime \"guardrails\"\" to help enforce security, privacy, and correct usage of your services. Below is an overview of each guardrail provided.\n\n### 🔒 Resource Integrity\n\n**Mitigates MCP Rug Pull Attacks**\n\n* **Goal:** Protect users from malicious tool description changes after initial approval, preventing post-installation manipulation or deception.\n* **Mechanism:** Locks tool descriptions upon client approval and verifies their integrity before execution. Any modification to the description triggers a security violation, blocking unauthorized changes from server-side updates.\n\n### 🛡️ Guardrails\n\n#### Covert Instruction Detection\n\nMonitors incoming requests for hidden or obfuscated directives that could alter policy behavior.\n\n* **Goal:** Stop attackers from slipping unnoticed commands or payloads into otherwise harmless data.\n* **Mechanism:** Applies a library of regex patterns and binary‐encoding checks to the full request body. If any pattern matches a known covert channel (e.g., steganographic markers, hidden HTML tags, escape-sequence tricks), the request is rejected.\n\n#### Sensitive Pattern Detection\n\nBlock user-defined sensitive data patterns (credential paths, filesystem references).\n\n* **Goal:** Block accidental or malicious inclusion of sensitive information that violates data-handling rules.\n* **Mechanism:** Runs a curated set of regexes against all payloads and tool descriptions—matching patterns such as `.env` files, RSA key paths, directory traversal sequences.\n\n#### Shadowing Pattern Detection\n\nDetects and blocks \"shadowing\" attacks, where a malicious MCP server sneaks hidden directives into its own tool descriptions to hijack or override the behavior of other, trusted tools.\n\n* **Goal:** Stop a rogue server from poisoning the agent’s logic by embedding instructions that alter how a different server’s tools operate (e.g., forcing all emails to go to an attacker’s address even when the user calls a separate `send_email` tool).\n* **Mechanism:** During policy load, each tool description is scanned for cross‐tool override patterns—such as `` sections referencing other tool names, hidden side‐effects, or directives that apply to a different server’s API. Any description that attempts to shadow or extend instructions for a tool outside its own namespace triggers a policy violation and is rejected.\n\n#### Schema Misuse Prevention\n\nEnforces strict adherence to MCP input schemas.\n\n* **Goal:** Prevent malformed or unexpected fields from bypassing validations, causing runtime errors, or enabling injections.\n* **Mechanism:** Compares each incoming JSON object against the declared schema (required properties, allowed keys, types). Any extra, missing, or mistyped field triggers an immediate policy violation.\n\n#### Cross-Origin Tool Access\n\nControls whether tools may invoke tools or services from external origins.\n\n* **Goal:** Prevent untrusted or out-of-scope services from being called.\n* **Mechanism:** Examines tool invocation requests and outgoing calls, verifying each target against an allowlist of approved domains or service names. Calls to any non-approved origin are blocked.\n\n#### Secrets Redaction\n\nAutomatically masks sensitive values so they never appear in logs or responses.\n\n* **Goal:** Ensure that API keys, tokens, passwords, and other credentials cannot leak in plaintext.\n* **Mechanism:** Scans every text output for known secret formats (e.g., AWS keys, GitHub PATs, JWTs). Matches are replaced with `[REDACTED]` before the response is sent or recorded.\n\nThese controls ensure robust runtime integrity, prevent unauthorized behavior, and provide a foundation for secure-by-design system operations.\n\n### Enable guardrails\n\nTo activate guardrails in your Docker containers, define the `GUARDRAILS` environment variable with the protections you need.\n\n| Guardrail | Summary |\n|----------------------------------|-------------------------------------------------------------------------|\n| `covert-instruction-detection` | Detects hidden or obfuscated directives in requests. |\n| `sensitive-pattern-detection` | Flags patterns suggesting sensitive data or filesystem exposure. |\n| `shadowing-pattern-detection` | Identifies tool descriptions that override or influence others. |\n| `schema-misuse-prevention` | Enforces strict schema compliance on input data. |\n| `cross-origin-tool-access` | Controls calls to external services or APIs. |\n| `secrets-redaction` | Prevents exposure of credentials or sensitive values. |\n\nExample: add `-e GUARDRAILS=\"secrets-redaction sensitive-pattern-detection\"` to enable those guardrails.\n\n## 🔒 Basic Authentication via Shared Secret\n\nProvides a lightweight auth layer using a single shared token.\n\n* **Mechanism:** Expects clients to send an `Authorization` header with the predefined secret.\n* **Use Case:** Quickly lock down your endpoint in development or simple internal deployments—no complex OAuth/OIDC setup required.\n\nTo turn on Basic Authentication, define `BASIC_AUTH_SECRET` environment variable with a shared secret.\n\nExample: add `-e BASIC_AUTH_SECRET=\"supersecret\"` to enable the basic authentication.\n\n> While basic auth will protect against unauthorized access, you should use it only in controlled environment,\n> rotate credentials frequently and **always** use TLS.\n\n

\n\n> [!NOTE]\n> By default, all guardrails are turned off. You can enable or disable each one individually, ensuring that only the protections your environment needs are active.\n\n\n# Quick reference\n\n**Maintained by**:\n - [Acuvity team](mailto:support@acuvity.ai) for packaging\n - [ Zheng Dayu ](https://github.com/aliyun/alibaba-cloud-ops-mcp-server) for original source application\n\n**Where to get help**:\n - [The Acuvity MCP Forge repository](https://github.com/acuvity/mcp-servers-registry)\n - [The Acuvity community Discord](https://discord.gg/BkU7fBkrNk)\n - [ alibaba-cloud-ops-mcp-server ](https://github.com/aliyun/alibaba-cloud-ops-mcp-server)\n\n**Where to file issues**:\n - [Github issue tracker](https://github.com/acuvity/mcp-servers-registry/issues)\n - [ alibaba-cloud-ops-mcp-server ](https://github.com/aliyun/alibaba-cloud-ops-mcp-server)\n\n**Supported architectures**:\n - `amd64`\n - `arm64`\n\n**Base image**:\n - `ghcr.io/astral-sh/uv:python3.12-alpine`\n\n**Resources**:\n - [Charts](https://github.com/acuvity/mcp-servers-registry/tree/main/mcp-server-alibaba-cloud-ops/charts/mcp-server-alibaba-cloud-ops)\n - [Dockerfile](https://github.com/acuvity/mcp-servers-registry/tree/main/mcp-server-alibaba-cloud-ops/docker/Dockerfile)\n\n**Latest tags:**\n - `latest` -> `1.0.0-0.8.7` -> `0.8.7`\n - [older tags](https://hub.docker.com/r/acuvity/mcp-server-alibaba-cloud-ops/tags)\n\n**Verify signature with [cosign](https://github.com/sigstore/cosign):**\n - `cosign verify --certificate-oidc-issuer \"https://token.actions.githubusercontent.com\" --certificate-identity \"https://github.com/acuvity/mcp-servers-registry/.github/workflows/release.yaml@refs/heads/main\" docker.io/acuvity/mcp-server-alibaba-cloud-ops:latest`\n - `cosign verify --certificate-oidc-issuer \"https://token.actions.githubusercontent.com\" --certificate-identity \"https://github.com/acuvity/mcp-servers-registry/.github/workflows/release.yaml@refs/heads/main\" docker.io/acuvity/mcp-server-alibaba-cloud-ops:0.8.7`\n - `cosign verify --certificate-oidc-issuer \"https://token.actions.githubusercontent.com\" --certificate-identity \"https://github.com/acuvity/mcp-servers-registry/.github/workflows/release.yaml@refs/heads/main\" docker.io/acuvity/mcp-server-alibaba-cloud-ops:1.0.0-0.8.7`\n\n# 📦 How to Install\n\n\n> [!TIP]\n> Given mcp-server-alibaba-cloud-ops scope of operation it can be hosted anywhere.\n\n**Environment variables and secrets:**\n - `ALIBABA_CLOUD_ACCESS_KEY_ID` required to be set\n - `ALIBABA_CLOUD_ACCESS_KEY_SECRET` required to be set\n\nFor more information and extra configuration you can consult the [package](https://github.com/aliyun/alibaba-cloud-ops-mcp-server) documentation.\n\n# 🧰 Clients Integrations\n\nBelow are the steps for configuring most clients that use MCP to elevate their Copilot experience.\n\n> [!NOTE]\n> These integrations function natively across all Minibridge modes.\n> To keep things brief, only the docker local-run setup is covered here.\n\n

Visual Studio Code

\n\nTo get started immediately, you can use the \"one-click\" link below:\n\n[![Install in VS Code Docker](https://img.shields.io/badge/VS_Code-One_click_install-0078d7?logo=githubcopilot)](https://insiders.vscode.dev/redirect/mcp/install?name=mcp-server-alibaba-cloud-ops&config=%7B%22args%22%3A%5B%22run%22%2C%22-i%22%2C%22--rm%22%2C%22--read-only%22%2C%22-e%22%2C%22ALIBABA_CLOUD_ACCESS_KEY_ID%22%2C%22-e%22%2C%22ALIBABA_CLOUD_ACCESS_KEY_SECRET%22%2C%22docker.io%2Facuvity%2Fmcp-server-alibaba-cloud-ops%3A0.8.7%22%5D%2C%22command%22%3A%22docker%22%7D)\n\n## Global scope\n\nPress `ctrl + shift + p` and type `Preferences: Open User Settings JSON` to add the following section:\n\n```json\n{\n \"mcp\": {\n \"servers\": {\n \"acuvity-mcp-server-alibaba-cloud-ops\": {\n \"env\": {\n \"ALIBABA_CLOUD_ACCESS_KEY_ID\": \"TO_BE_SET\",\n \"ALIBABA_CLOUD_ACCESS_KEY_SECRET\": \"TO_BE_SET\"\n },\n \"command\": \"docker\",\n \"args\": [\n \"run\",\n \"-i\",\n \"--rm\",\n \"--read-only\",\n \"-e\",\n \"ALIBABA_CLOUD_ACCESS_KEY_ID\",\n \"-e\",\n \"ALIBABA_CLOUD_ACCESS_KEY_SECRET\",\n \"docker.io/acuvity/mcp-server-alibaba-cloud-ops:0.8.7\"\n ]\n }\n }\n }\n}\n```\n\n## Workspace scope\n\nIn your workspace create a file called `.vscode/mcp.json` and add the following section:\n\n```json\n{\n \"servers\": {\n \"acuvity-mcp-server-alibaba-cloud-ops\": {\n \"env\": {\n \"ALIBABA_CLOUD_ACCESS_KEY_ID\": \"TO_BE_SET\",\n \"ALIBABA_CLOUD_ACCESS_KEY_SECRET\": \"TO_BE_SET\"\n },\n \"command\": \"docker\",\n \"args\": [\n \"run\",\n \"-i\",\n \"--rm\",\n \"--read-only\",\n \"-e\",\n \"ALIBABA_CLOUD_ACCESS_KEY_ID\",\n \"-e\",\n \"ALIBABA_CLOUD_ACCESS_KEY_SECRET\",\n \"docker.io/acuvity/mcp-server-alibaba-cloud-ops:0.8.7\"\n ]\n }\n }\n}\n```\n\n> To pass secrets you should use the `promptString` input type described in the [Visual Studio Code documentation](https://code.visualstudio.com/docs/copilot/chat/mcp-servers).\n\n

\n\n

Windsurf IDE

\n\nIn `~/.codeium/windsurf/mcp_config.json` add the following section:\n\n```json\n{\n \"mcpServers\": {\n \"acuvity-mcp-server-alibaba-cloud-ops\": {\n \"env\": {\n \"ALIBABA_CLOUD_ACCESS_KEY_ID\": \"TO_BE_SET\",\n \"ALIBABA_CLOUD_ACCESS_KEY_SECRET\": \"TO_BE_SET\"\n },\n \"command\": \"docker\",\n \"args\": [\n \"run\",\n \"-i\",\n \"--rm\",\n \"--read-only\",\n \"-e\",\n \"ALIBABA_CLOUD_ACCESS_KEY_ID\",\n \"-e\",\n \"ALIBABA_CLOUD_ACCESS_KEY_SECRET\",\n \"docker.io/acuvity/mcp-server-alibaba-cloud-ops:0.8.7\"\n ]\n }\n }\n}\n```\n\nSee [Windsurf documentation](https://docs.windsurf.com/windsurf/mcp) for more info.\n\n

\n\n

Cursor IDE

\n\nAdd the following JSON block to your mcp configuration file:\n- `~/.cursor/mcp.json` for global scope\n- `.cursor/mcp.json` for project scope\n\n```json\n{\n \"mcpServers\": {\n \"acuvity-mcp-server-alibaba-cloud-ops\": {\n \"env\": {\n \"ALIBABA_CLOUD_ACCESS_KEY_ID\": \"TO_BE_SET\",\n \"ALIBABA_CLOUD_ACCESS_KEY_SECRET\": \"TO_BE_SET\"\n },\n \"command\": \"docker\",\n \"args\": [\n \"run\",\n \"-i\",\n \"--rm\",\n \"--read-only\",\n \"-e\",\n \"ALIBABA_CLOUD_ACCESS_KEY_ID\",\n \"-e\",\n \"ALIBABA_CLOUD_ACCESS_KEY_SECRET\",\n \"docker.io/acuvity/mcp-server-alibaba-cloud-ops:0.8.7\"\n ]\n }\n }\n}\n```\n\nSee [cursor documentation](https://docs.cursor.com/context/model-context-protocol) for more information.\n\n

\n\n

Claude Desktop

\n\nIn the `claude_desktop_config.json` configuration file add the following section:\n\n```json\n{\n \"mcpServers\": {\n \"acuvity-mcp-server-alibaba-cloud-ops\": {\n \"env\": {\n \"ALIBABA_CLOUD_ACCESS_KEY_ID\": \"TO_BE_SET\",\n \"ALIBABA_CLOUD_ACCESS_KEY_SECRET\": \"TO_BE_SET\"\n },\n \"command\": \"docker\",\n \"args\": [\n \"run\",\n \"-i\",\n \"--rm\",\n \"--read-only\",\n \"-e\",\n \"ALIBABA_CLOUD_ACCESS_KEY_ID\",\n \"-e\",\n \"ALIBABA_CLOUD_ACCESS_KEY_SECRET\",\n \"docker.io/acuvity/mcp-server-alibaba-cloud-ops:0.8.7\"\n ]\n }\n }\n}\n```\n\nSee [Anthropic documentation](https://docs.anthropic.com/en/docs/agents-and-tools/mcp) for more information.\n

\n\n

OpenAI python SDK

\n\n## Running locally\n\n```python\nasync with MCPServerStdio(\n params={\n \"env\": {\"ALIBABA_CLOUD_ACCESS_KEY_ID\":\"TO_BE_SET\",\"ALIBABA_CLOUD_ACCESS_KEY_SECRET\":\"TO_BE_SET\"},\n \"command\": \"docker\",\n \"args\": [\"run\",\"-i\",\"--rm\",\"--read-only\",\"-e\",\"ALIBABA_CLOUD_ACCESS_KEY_ID\",\"-e\",\"ALIBABA_CLOUD_ACCESS_KEY_SECRET\",\"docker.io/acuvity/mcp-server-alibaba-cloud-ops:0.8.7\"]\n }\n) as server:\n tools = await server.list_tools()\n```\n\n## Running remotely\n\n```python\nasync with MCPServerSse(\n params={\n \"url\": \"http://:/sse\",\n }\n) as server:\n tools = await server.list_tools()\n```\n\nSee [OpenAI Agents SDK docs](https://openai.github.io/openai-agents-python/mcp/) for more info.\n\n

\n\n## 🐳 Run it with Docker\n\n

Locally with STDIO

\n\nIn your client configuration set:\n\n- command: `docker`\n- arguments: `run -i --rm --read-only -e ALIBABA_CLOUD_ACCESS_KEY_ID -e ALIBABA_CLOUD_ACCESS_KEY_SECRET docker.io/acuvity/mcp-server-alibaba-cloud-ops:0.8.7`\n\n

\n\n

Locally with HTTP/sse

\n\nSimply run as:\n\n```console\ndocker run -it -p 8000:8000 --rm --read-only -e ALIBABA_CLOUD_ACCESS_KEY_ID -e ALIBABA_CLOUD_ACCESS_KEY_SECRET docker.io/acuvity/mcp-server-alibaba-cloud-ops:0.8.7\n```\n\nThen on your application/client, you can configure to use it like:\n\n```json\n{\n \"mcpServers\": {\n \"acuvity-mcp-server-alibaba-cloud-ops\": {\n \"url\": \"http://localhost:8000/sse\"\n }\n }\n}\n```\n\nYou might have to use different ports for different tools.\n\n

\n\n

Remotely with Websocket tunneling and MTLS

\n\n> This section assume you are familiar with TLS and certificates and will require:\n> - a server certificate with proper DNS/IP field matching your tool deployment.\n> - a client-ca used to sign client certificates\n\n1. Start the server in `backend` mode\n - add an environment variable like `-e MINIBRIDGE_MODE=backend`\n - add the TLS certificates (recommended) through a volume let's say `/certs` ex (`-v $PWD/certs:/certs`)\n - instruct minibridge to use those certs with\n - `-e MINIBRIDGE_TLS_SERVER_CERT=/certs/server-cert.pem`\n - `-e MINIBRIDGE_TLS_SERVER_KEY=/certs/server-key.pem`\n - `-e MINIBRIDGE_TLS_SERVER_KEY_PASS=optional`\n - `-e MINIBRIDGE_TLS_SERVER_CLIENT_CA=/certs/client-ca.pem`\n\n2. Start `minibridge` locally in frontend mode:\n - Get [minibridge](https://github.com/acuvity/minibridge) binary for your OS.\n\nIn your client configuration, Minibridge works like any other STDIO command.\n\nExample for Claude Desktop:\n\n```json\n{\n \"mcpServers\": {\n \"acuvity-mcp-server-alibaba-cloud-ops\": {\n \"command\": \"minibridge\",\n \"args\": [\"frontend\", \"--backend\", \"wss://:8000/ws\", \"--tls-client-backend-ca\", \"/path/to/ca/that/signed/the/server-cert.pem/ca.pem\", \"--tls-client-cert\", \"/path/to/client-cert.pem\", \"--tls-client-key\", \"/path/to/client-key.pem\"]\n }\n }\n}\n```\n\nThat's it.\n\nMinibridge offers a host of additional features. For step-by-step guidance, please visit the wiki. And if anything’s unclear, don’t hesitate to reach out!\n\n

\n\n## ☁️ Deploy On Kubernetes\n\n

Deploy using Helm Charts

\n\n### Chart settings requirements\n\nThis chart requires some mandatory information to be installed.\n\n**Mandatory Secrets**:\n - `ALIBABA_CLOUD_ACCESS_KEY_ID` secret to be set as secrets.ALIBABA_CLOUD_ACCESS_KEY_ID either by `.value` or from existing with `.valueFrom`\n - `ALIBABA_CLOUD_ACCESS_KEY_SECRET` secret to be set as secrets.ALIBABA_CLOUD_ACCESS_KEY_SECRET either by `.value` or from existing with `.valueFrom`\n\n### How to install\n\nYou can inspect the chart `README`:\n\n```console\nhelm show readme oci://docker.io/acuvity/mcp-server-alibaba-cloud-ops --version 1.0.0\n````\n\nYou can inspect the values that you can configure:\n\n```console\nhelm show values oci://docker.io/acuvity/mcp-server-alibaba-cloud-ops --version 1.0.0\n````\n\nInstall with helm\n\n```console\nhelm install mcp-server-alibaba-cloud-ops oci://docker.io/acuvity/mcp-server-alibaba-cloud-ops --version 1.0.0\n```\n\nFrom there your MCP server mcp-server-alibaba-cloud-ops will be reachable by default through `http/sse` from inside the cluster using the Kubernetes Service `mcp-server-alibaba-cloud-ops` on port `8000` by default. You can change that by looking at the `service` section of the `values.yaml` file.\n\n### How to Monitor\n\nThe deployment will create a Kubernetes service with a `healthPort`, that is used for liveness probes and readiness probes. This health port can also be used by the monitoring stack of your choice and exposes metrics under the `/metrics` path.\n\nSee full charts [Readme](https://github.com/acuvity/mcp-servers-registry/tree/main/mcp-server-alibaba-cloud-ops/charts/mcp-server-alibaba-cloud-ops/README.md) for more details about settings and runtime security including guardrails activation.\n\n

\n\n# 🧠 Server features\n\nFor detailed list of all features, tools, arguments and SBOM hashes provided by this server please consult the [readme](https://github.com/acuvity/mcp-servers-registry/tree/main/mcp-server-alibaba-cloud-ops)\n\n## 🧰 Tools (34)\n\n\n💬 Questions? Open an issue or contact us [ support@acuvity.ai ](mailto:support@acuvity.ai).\n📦 Contributions welcome!","has_starred","hub_user","immutable_tags_settings",{"_76":11,"_77":78},"enabled","rules",[79],".*","is_automated","permissions",{"_83":84,"_85":11,"_86":11},"read",true,"write","admin","user","storage_size",1557810694,"orgData",{"_92":93,"_94":95,"_96":97,"_98":24,"_99":100,"_101":102,"_103":104,"_105":106,"_107":108,"_109":110,"_111":112,"_113":114,"_115":84},"id","136563be7dbc49ddbe7cce2b16d857a2","uuid","136563be-7dbc-49dd-be7c-ce2b16d857a2","type","organization","orgname","full_name","Acuvity","location","Sunnyvale ","company","Acuvity Inc.","profile_url","https://www.acuvity.ai","date_joined","2023-09-07T21:24:49.932756Z","gravatar_url","https://www.gravatar.com/avatar/a8486cbfb368141655f23b5009df016f?s=80&r=g&d=mm","gravatar_email","contact@acuvity.ai","badge","verified_publisher","is_active","recentTags",[118,153,184,194,203,212,220,229,256,265],{"_119":44,"_120":121,"_122":123,"_124":125,"_92":126,"_127":128,"_50":142,"_143":121,"_144":24,"_145":58,"_34":146,"_147":148,"_149":134,"_150":142,"_151":67,"_152":84},"content_type","creator",23105788,"digest","sha256:05deb6491a5a2905cab41b30020935c3aa22b69b59f8ae44587805a013e86faa","full_size",268,917138754,"images",[129],{"_130":131,"_122":123,"_132":131,"_133":134,"_135":136,"_137":131,"_138":131,"_139":-5,"_140":125,"_64":67,"_141":-5},"architecture","","features","last_pulled","2026-02-17T10:34:51.141823213Z","last_pushed","2025-06-14T21:13:17.664435806Z","os","os_features","os_version","size","variant","2025-06-14T21:13:17.853787Z","last_updater","last_updater_username","media_type","sha256-f6fdbe211dc4051a3702914134524bcfd4db82a736271deb6114bc87826f1a38.sig","repository",27258610,"tag_last_pulled","tag_last_pushed","tag_status","v2",{"_119":44,"_120":121,"_122":154,"_124":155,"_92":156,"_127":157,"_50":182,"_143":121,"_144":24,"_145":57,"_34":183,"_147":148,"_149":161,"_150":182,"_151":67,"_152":84},"sha256:f6fdbe211dc4051a3702914134524bcfd4db82a736271deb6114bc87826f1a38",114349403,917138714,[158,164,171,177],{"_130":159,"_122":160,"_132":131,"_133":161,"_135":162,"_137":163,"_138":131,"_139":-5,"_140":155,"_64":67,"_141":-5},"amd64","sha256:ba9ce9ba6cfdd9afe8105aa661f6488acec6db99c45e773043aa71ad73c92f53","2026-02-17T13:59:15.149560859Z","2025-06-14T21:06:08.416857276Z","linux",{"_130":165,"_122":166,"_132":131,"_133":167,"_135":168,"_137":165,"_138":131,"_139":-5,"_140":169,"_64":170,"_141":-5},"unknown","sha256:938ace33b69132bbe15252fc240726b8009e8b0bfb0321b6570548a22742bdbb","2025-10-16T08:20:30.15390732Z","2025-06-14T21:06:09.113514154Z",10574098,"inactive",{"_130":172,"_122":173,"_132":131,"_133":174,"_135":175,"_137":163,"_138":131,"_139":-5,"_140":176,"_64":170,"_141":-5},"arm64","sha256:9e6d05c28368d2a7cf5c7d9254164e77cc94355c7485f617bb5d4684efbefa6b","2025-11-01T13:37:28.801508013Z","2025-06-14T21:06:23.869453331Z",111441412,{"_130":165,"_122":178,"_132":131,"_133":179,"_135":180,"_137":165,"_138":131,"_139":-5,"_140":181,"_64":170,"_141":-5},"sha256:04a027192e7fbe3bc483669dab362ced85059ef9a29b4400dacedc4c644e6d87","2025-07-13T06:38:48.679564139Z","2025-06-14T21:06:24.758529194Z",10594433,"2025-06-14T21:13:14.024668Z","0.8.7",{"_119":44,"_120":185,"_122":154,"_124":155,"_92":186,"_127":187,"_50":192,"_143":121,"_144":24,"_145":57,"_34":193,"_147":148,"_149":161,"_150":192,"_151":67,"_152":84},33852538,892346626,[188,189,190,191],{"_130":159,"_122":160,"_132":131,"_133":161,"_135":162,"_137":163,"_138":131,"_139":-5,"_140":155,"_64":67,"_141":-5},{"_130":165,"_122":166,"_132":131,"_133":167,"_135":168,"_137":165,"_138":131,"_139":-5,"_140":169,"_64":170,"_141":-5},{"_130":172,"_122":173,"_132":131,"_133":174,"_135":175,"_137":163,"_138":131,"_139":-5,"_140":176,"_64":170,"_141":-5},{"_130":165,"_122":178,"_132":131,"_133":179,"_135":180,"_137":165,"_138":131,"_139":-5,"_140":181,"_64":170,"_141":-5},"2025-06-14T21:13:14.016607Z","latest",{"_119":44,"_120":121,"_122":154,"_124":155,"_92":195,"_127":196,"_50":201,"_143":121,"_144":24,"_145":57,"_34":202,"_147":148,"_149":161,"_150":201,"_151":67,"_152":84},917138709,[197,198,199,200],{"_130":159,"_122":160,"_132":131,"_133":161,"_135":162,"_137":163,"_138":131,"_139":-5,"_140":155,"_64":67,"_141":-5},{"_130":165,"_122":166,"_132":131,"_133":167,"_135":168,"_137":165,"_138":131,"_139":-5,"_140":169,"_64":170,"_141":-5},{"_130":172,"_122":173,"_132":131,"_133":174,"_135":175,"_137":163,"_138":131,"_139":-5,"_140":176,"_64":170,"_141":-5},{"_130":165,"_122":178,"_132":131,"_133":179,"_135":180,"_137":165,"_138":131,"_139":-5,"_140":181,"_64":170,"_141":-5},"2025-06-14T21:13:13.999942Z","1.0.0-0.8.7",{"_119":44,"_120":121,"_122":204,"_124":125,"_92":205,"_127":206,"_50":210,"_143":121,"_144":24,"_145":58,"_34":211,"_147":148,"_149":208,"_150":210,"_151":67,"_152":84},"sha256:b8ec4a4edfdf38df1d803b3334822f35d9abf6e49ea36d8a1836a1af328891f2",917136614,[207],{"_130":131,"_122":204,"_132":131,"_133":208,"_135":209,"_137":131,"_138":131,"_139":-5,"_140":125,"_64":67,"_141":-5},"2026-02-17T10:34:53.082081075Z","2025-06-14T21:04:40.084060488Z","2025-06-14T21:04:40.251685Z","sha256-0e4de1dd7d92c46b1c700c971aebf03296bb51a7173c6fa426770cf75ac8549b.sig",{"_119":43,"_120":185,"_122":213,"_124":214,"_92":215,"_127":216,"_50":217,"_143":121,"_144":24,"_145":56,"_34":218,"_147":148,"_149":219,"_150":217,"_151":170,"_152":84},"sha256:0e4de1dd7d92c46b1c700c971aebf03296bb51a7173c6fa426770cf75ac8549b",38580,892346636,[],"2025-06-14T21:04:37.13677Z","1.0.0","2026-02-17T10:34:53.836924898Z",{"_119":44,"_120":121,"_122":221,"_124":125,"_92":222,"_127":223,"_50":227,"_143":121,"_144":24,"_145":58,"_34":228,"_147":148,"_149":225,"_150":227,"_151":67,"_152":84},"sha256:9c897c17eed6d3c908bc560d0a8a03e49987041992ab909a96226bac1c446b6a",903948505,[224],{"_130":131,"_122":221,"_132":131,"_133":225,"_135":226,"_137":131,"_138":131,"_139":-5,"_140":125,"_64":67,"_141":-5},"2026-02-17T10:34:54.68202892Z","2025-05-22T17:48:43.036147232Z","2025-05-22T17:48:43.239084Z","sha256-28475f24a592d1a6ec4eca84511fc86cad77edd856bb5b1de563c48ba46adb74.sig",{"_119":44,"_120":185,"_122":230,"_124":231,"_92":232,"_127":233,"_50":253,"_143":121,"_144":24,"_145":57,"_34":254,"_147":148,"_149":255,"_150":253,"_151":170,"_152":84},"sha256:28475f24a592d1a6ec4eca84511fc86cad77edd856bb5b1de563c48ba46adb74",113353043,899934756,[234,239,243,248],{"_130":165,"_122":235,"_132":131,"_133":236,"_135":237,"_137":165,"_138":131,"_139":-5,"_140":238,"_64":170,"_141":-5},"sha256:565649792d94b6d40a11dee9ef8f4018501a896699fd9fe29cb487780f28105a","2025-07-09T02:47:53.829193512Z","2025-05-22T17:40:34.103109897Z",2728946,{"_130":159,"_122":240,"_132":131,"_133":241,"_135":242,"_137":163,"_138":131,"_139":-5,"_140":231,"_64":170,"_141":-5},"sha256:18f40969920d42af194774e2acf04405b59e193b78c94de09e0fab04833f8594","2025-10-10T21:32:35.639714056Z","2025-05-22T17:40:48.025165071Z",{"_130":165,"_122":244,"_132":131,"_133":245,"_135":246,"_137":165,"_138":131,"_139":-5,"_140":247,"_64":170,"_141":-5},"sha256:28f35151cae93df94d1f5894c755d2f0d6503ba3dc37b73b612d68080ae51e9f","2025-07-10T08:41:17.263163652Z","2025-05-22T17:40:48.65139439Z",2728879,{"_130":172,"_122":249,"_132":131,"_133":250,"_135":251,"_137":163,"_138":131,"_139":-5,"_140":252,"_64":170,"_141":-5},"sha256:3afb199dda8ce6ceb6354317debbf7bfbbf55863623a81fa7a08189b047f8b26","2025-07-09T05:56:49.161093297Z","2025-05-22T17:40:33.467083182Z",110494349,"2025-05-22T17:48:36.753299Z","0.8.6","2026-02-17T10:34:55.456392161Z",{"_119":44,"_120":185,"_122":230,"_124":231,"_92":257,"_127":258,"_50":263,"_143":121,"_144":24,"_145":57,"_34":264,"_147":148,"_149":255,"_150":263,"_151":170,"_152":84},899934660,[259,260,261,262],{"_130":159,"_122":240,"_132":131,"_133":241,"_135":242,"_137":163,"_138":131,"_139":-5,"_140":231,"_64":170,"_141":-5},{"_130":165,"_122":244,"_132":131,"_133":245,"_135":246,"_137":165,"_138":131,"_139":-5,"_140":247,"_64":170,"_141":-5},{"_130":172,"_122":249,"_132":131,"_133":250,"_135":251,"_137":163,"_138":131,"_139":-5,"_140":252,"_64":170,"_141":-5},{"_130":165,"_122":235,"_132":131,"_133":236,"_135":237,"_137":165,"_138":131,"_139":-5,"_140":238,"_64":170,"_141":-5},"2025-05-22T17:48:36.592963Z","1.0.0-0.8.6",{"_119":44,"_120":121,"_122":266,"_124":125,"_92":267,"_127":268,"_50":272,"_143":121,"_144":24,"_145":58,"_34":273,"_147":148,"_149":270,"_150":272,"_151":67,"_152":84},"sha256:0412b6e56c4caa55f389401b9d1971bda89f55614eede0e6f27c3b955b4fe6f0",903943576,[269],{"_130":131,"_122":266,"_132":131,"_133":270,"_135":271,"_137":131,"_138":131,"_139":-5,"_140":125,"_64":67,"_141":-5},"2026-02-17T10:34:56.872114547Z","2025-05-22T17:39:25.013630229Z","2025-05-22T17:39:25.192726Z","sha256-f48d179de97825081f5787563ba9fd4bda3833cac0acac75c5a602798c0fc59e.sig","isPotentialSpam","routes/_layout.r.$namespace.$reponame.tags",{"_277":84,"_278":11},"isRunInDesktopEnabled","canDeleteTags","actionData","errors"]