This server provides read-only access to one or more Argo CD instances via MCP, allowing you to inspect and query GitOps deployments without making any changes. Authentication uses browser session cookies and multiple instances are supported.
Connections & Instance Info
list_connections– View all configured Argo CD instances (name, URL, description)get_version– Retrieve the Argo CD version of a specific instanceget_settings– Fetch the global settings of a specific Argo CD instance
Applications
list_applications– List all applications, optionally filtered by project names or label selectorsget_application– Get detailed info on a specific app (sync status, health, spec)get_application_resource_tree– View the full Kubernetes resource tree and relationships for an appget_application_managed_resources– List managed resources, filterable by API group, kind, namespace, or resource nameget_application_logs– Retrieve pod logs, with options for pod/container filtering, tail lines, and time window
Projects
list_projects– List all Argo CD projectsget_project– Get detailed project info including source repos, destinations, and roles
Clusters
list_clusters– List all registered Kubernetes clusters and their connection statusget_cluster– Get detailed info about a specific cluster by server URL
Repositories
list_repositories– List all configured Git/Helm repositories and their connection statusget_repository– Get detailed info about a specific repository by URL
Provides read-only access to Argo CD instances using browser session cookies, enabling listing applications, projects, clusters, repositories, and retrieving application details, resource trees, managed resources, and logs.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@mcp-read-only-argocdList all applications in staging."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
MCP Read-Only Argo CD Server
👁 Tests
👁 License: MIT
👁 Python 3.11+
A secure MCP (Model Context Protocol) server that provides read-only access to Argo CD instances using browser session cookies.
Default layout:
Config:
~/.config/lukleh/mcp-read-only-argocd/connections.yamlCredentials: stored in
connections.yamlCache:
~/.cache/lukleh/mcp-read-only-argocd/
Features
Read-only by design: only read operations are exposed
Session cookie authentication: uses your existing
argocd.tokenbrowser sessionMulti-instance support: connect to multiple Argo CD instances at once
Automatic cookie rotation: refreshed session cookies are persisted to
connections.yamlStale token recovery: a 401 response triggers a one-time Chrome cookie refresh and retry
Package-native runtime paths: no repository checkout required for normal use
Related MCP server: argocd-mcp
Why Session Cookies?
Unlike token-based setups, this server can reuse your existing browser session:
no extra API token management
uses your existing SSO/OIDC login
matches the permissions you already have in the UI
Prerequisites
Python 3.11 or higher
an Argo CD browser session cookie
an MCP client such as Claude Code or Codex
Quick Start
1. Install the Server
# Run the published package without cloning the repository
uvx mcp-read-only-argocd@latest --write-sample-config
# Or install it once and reuse the command directly
uv tool install mcp-read-only-argocd
mcp-read-only-argocd --write-sample-configWhen using uvx, prefer mcp-read-only-argocd@latest in user-facing docs and
MCP client configs. This avoids reusing a stale cached tool environment after a
new release is published.
The command above writes a starter config to ~/.config/lukleh/mcp-read-only-argocd/connections.yaml.
2. Confirm Runtime Paths
uvx mcp-read-only-argocd@latest --print-paths3. Edit the Connections File
Edit ~/.config/lukleh/mcp-read-only-argocd/connections.yaml:
- connection_name: staging
url: https://argocd.example.com
description: Staging Argo CD
session_token: your-session-token
- connection_name: production
url: https://argocd-prod.example.com
description: Production Argo CD
session_token: your-other-session-token4. Get Your argocd.token Session Cookie
Log in to your Argo CD web UI
Open browser developer tools
Go to Application/Storage -> Cookies
Copy the value of the
argocd.tokencookie
5. Store the Session Cookie
Put the cookie value in the session_token field for each connection in
~/.config/lukleh/mcp-read-only-argocd/connections.yaml. The server detects
changes to connections.yaml before tool calls, so editing this file does not
require an MCP restart.
If Argo CD rejects the active token with a 401 response, the server tries once to
load a fresh argocd.token from Chrome Profile 1 for the matching connection
domain. When that token differs from the active token, the failed request is
retried once. If the retry succeeds, the fresh token is written back to
connections.yaml.
6. Configure Your MCP Client
Claude Code
claude mcp add mcp-read-only-argocd \
--scope user \
-- uvx mcp-read-only-argocd@latestCodex
codex mcp add mcp-read-only-argocd \
-- uvx mcp-read-only-argocd@latest7. Restart and Test
Restart your MCP client and try a simple query such as:
List all applications in the staging Argo CD instance.Configuration
connections.yaml supports a list of Argo CD connections:
- connection_name: staging
url: https://argocd.example.com
description: Staging Argo CD instance
session_token: your-session-token
timeout: 30
verify_ssl: trueFields:
connection_name: unique identifier used in tool calls and token refreshesurl: Argo CD base URLdescription: optional human-readable descriptionsession_token: Argo CDargocd.tokenbrowser cookietimeout: optional request timeout in secondsverify_ssl: optional SSL verification toggle
Runtime path override environment variables:
MCP_READ_ONLY_ARGOCD_CONFIG_DIRMCP_READ_ONLY_ARGOCD_CACHE_DIR
Command Line Testing
# Show the resolved runtime paths
uvx mcp-read-only-argocd@latest --print-paths
# Write or refresh the default connections.yaml
uvx mcp-read-only-argocd@latest --write-sample-config
uvx mcp-read-only-argocd@latest --write-sample-config --overwrite
# Run the server with the default home-directory config
uvx mcp-read-only-argocd@latest
# Or point at a different runtime root
uvx mcp-read-only-argocd@latest --config-dir /path/to/config-dirMCP Tools
Core
list_connectionsget_versionget_settings
Applications
list_applicationsget_applicationget_application_resource_treeget_application_managed_resourcesget_application_logs
Projects
list_projectsget_project
Clusters
list_clustersget_cluster
Repositories
list_repositoriesget_repository
Local Development
If you want to work on the repository itself:
git clone https://github.com/lukleh/mcp-read-only-argocd.git
cd mcp-read-only-argocd
uv sync --extra dev
uv run pytest -q
uv run mcp-read-only-argocd --print-paths
uv run python smoke_test.py --print-pathsThe checked-in sample file remains available at connections.yaml.sample for documentation and review, but package users should prefer --write-sample-config.
License
MIT
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Latest Blog Posts
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/lukleh/mcp-read-only-argocd'
If you have feedback or need assistance with the MCP directory API, please join our Discord server
