You can run the ocm-mcp server in a container using Podman or Docker. Make sure you have a valid OCM token, which you can obtain by logging into
You can run the ocm-mcp server in a container using Podman or Docker. Make sure you have a valid OCM token, which you can obtain by logging into https://console.redhat.com/openshift/token:. Exposed over MCP by the ocm mcp mcp server, that capability becomes something an assistant can invoke while it works, not something you go and do afterwards.
Setup follows the usual MCP pattern — install or clone the server, register it in your client's configuration file, restart the client. The configuration blocks on this page cover the common clients.
You will need 4 environment variables: ACCESS_TOKEN_URL, OCM_CLIENT_ID, OCM_OFFLINE_TOKEN, MCP_TRANSPORT. The server will not start without them, which is usually why the tools fail to appear on a first run. Keep credentials in your client's env block or a secrets manager rather than in a file you might commit.
Plenty of cloud and infrastructure servers cover similar ground. The differences that matter in practice are scope of access and how much setup stands between you and a working tool call. It is maintained by redhat-ai-tools; worth a glance at recent repository activity before you build anything load-bearing on it.
SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.
{
"mcpServers": {
"ocm-mcp": {
"command": "podman",
"args": [
"run",
"-i",
"--rm",
"-e", "ACCESS_TOKEN_URL",
"-e", "OCM_CLIENT_ID",
"-e", "OCM_OFFLINE_TOKEN",
"-e", "MCP_TRANSPORT",
"quay.io/redhat-ai-tools/ocm-mcp"
],
"env": {
"ACCESS_TOKEN_URL": "https://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/token",
"OCM_CLIENT_ID": "cloud-services",
"OCM_OFFLINE_TOKEN": "REDACTED",
"MCP_TRANSPORT": "stdio"
}
}
}
}Configuration as documented by the project. Restart the client after saving.
| Variable | Description | Required |
|---|---|---|
| ACCESS_TOKEN_URL | Credential the server authenticates with. | Yes |
| OCM_CLIENT_ID | Configuration value read at startup. | Optional |
| OCM_OFFLINE_TOKEN | Credential the server authenticates with. | Yes |
| MCP_TRANSPORT | Configuration value read at startup. | Optional |
Manage your whole Supabase project in conversation — database, auth, storage, Edge Functions and branches.
Stop letting your assistant hallucinate n8n node parameters — this server hands it the real schemas, templates and validation.
AWS Labs' official server suite — current AWS docs, CDK guidance, cost analysis and service tools.
Cloud browsers for AI agents — automation sessions that run in Browserbase's fleet, not on your machine.
Workers, KV, R2 and D1 by conversation — Cloudflare's official remote servers for building and observability.
Dashboards, Prometheus and Loki queries, incidents and alerts — observability by conversation.