argoproj-labs/mcp-for-argocd

npx argocd-mcp@latest stdio   # with env ARGOCD_BASE_URL=<argocd_url> and ARGOCD_API_TOKEN=<argocd_token>
docker run -e ARGOCD_BASE_URL=<argocd_url> -e ARGOCD_API_TOKEN=<argocd_token> argoprojlabs/mcp-for-argocd http --stateless

Usage

• •Configure in Cursor (.cursor/mcp.json), VS Code (.vscode/mcp.json), or Claude Desktop (claude_desktop_config.json) with the npx command and ARGOCD_BASE_URL / ARGOCD_API_TOKEN env vars.
• •Set MCP_READ_ONLY=true to disable create/update/delete/sync/run_resource_action tools.
• •Multi-instance: configure a token registry file (ARGOCD_TOKEN_REGISTRY_PATH) mapping base URLs to tokens and pass the optional `argocdBaseUrl` argument per call.
• •For horizontally-scaled Kubernetes deployments, run with `--stateless` so any replica can handle any request without session affinity.

Key features

• ✓Complete Argo CD API integration: list_clusters, get_appproject, application management (list/get/create/update/delete/sync_application), resource tree, managed resources, workload logs, resource events and actions.
• ✓Both stdio and HTTP stream transports with flexible client integration.
• ✓Security model: API token is read only from transport layer (header x-argocd-api-token / env ARGOCD_API_TOKEN), never from tool arguments; default token is bound to the default base URL to prevent token exfiltration.
• ✓Token registry for per-base-URL tokens with fail-closed startup on a misconfigured registry; read-only mode; stateless mode for HPA.
• ✓Pre-configured for AI assistants; one-click VS Code install links included.

Best for

DevOps/GitOps teams letting AI assistants manage Argo CD (list/sync/create applications, inspect resources and logs) in natural language from IDEs.

Caveats

• ⚠Requires an Argo CD instance with API access and an Argo CD API token.
• ⚠For self-signed certificates you must set NODE_TLS_REJECT_UNAUTHORIZED=0, which disables SSL verification (dev environments only).
• ⚠The default API token is bound to the default base URL and is never sent to other hosts; targeting additional instances requires an explicit registry token.
• ⚠Created by and donated from Akuity (argoproj-labs).