Alibaba Cloud MCP Server

The Alibaba Cloud Ops MCP Server is the official integration from Aliyun that connects Alibaba Cloud APIs to AI assistants via the Model Context Protocol. It enables agents to manage core cloud resources including ECS compute instances, VPC and VSwitch networking, RDS databases, OSS object storage, and CloudMonitor metrics, as well as orchestrate deployments through OOS (Operation Orchestration Service).

Capabilities span the full lifecycle of cloud operations: provisioning and controlling ECS instances (run, start, stop, reboot, delete, reset password, replace system disk), executing remote commands, querying regions, zones, images, and security groups, listing and operating on OSS buckets and objects, managing RDS instance state, and pulling CPU, memory, load average, and disk metrics from CloudMonitor. It also exposes OOS-based application deployment tools that upload artifacts to OSS and track deployment status, plus local helpers for directory listing, shell execution, and project stack analysis.

The server is distributed as a Python package run via uvx and is published by the official aliyun GitHub organization. It is integrated by default with platforms like Cursor, Cline, ModelScope, Lingma, Smithery, FC-Function AI, Qoder, and Alibaba Cloud Model Studio.

Tools

Prerequisites

• An Alibaba Cloud account with an AccessKey ID and AccessKey Secret. Create one in the RAM console.
• The uv package manager installed locally.
• The RAM user or role must have permissions for the cloud products you intend to manage (ECS, VPC, RDS, OSS, CloudMonitor, OOS).

Install and Configure

The server is published as the Python package alibaba-cloud-ops-mcp-server and is launched via uvx. Add the following block to your MCP client config (Claude Desktop, Cursor, Cline, etc.):

{
  "mcpServers": {
    "alibaba-cloud-ops-mcp-server": {
      "timeout": 600,
      "command": "uvx",
      "args": ["alibaba-cloud-ops-mcp-server@latest"],
      "env": {
        "ALIBABA_CLOUD_ACCESS_KEY_ID": "Your Access Key ID",
        "ALIBABA_CLOUD_ACCESS_KEY_SECRET": "Your Access Key SECRET"
      }
    }
  }
}

Required Environment Variables

• ALIBABA_CLOUD_ACCESS_KEY_ID: AccessKey ID of your RAM user.
• ALIBABA_CLOUD_ACCESS_KEY_SECRET: AccessKey Secret of your RAM user.

Restart your MCP client after editing the config. The server is also available out of the box on Qoder, Cursor, Cline, ModelScope, Lingma, Smithery AI, FC-Function AI, and Alibaba Cloud Model Studio.

• Provision and manage ECS fleets from natural language: launch new instances, reset passwords, or replace system disks across regions.
• Run remote shell commands on ECS instances via Cloud Assistant to perform routine maintenance, patching, or diagnostics.
• Inspect CloudMonitor metrics (CPU, memory, disk, load average) to triage performance issues on ECS instances.
• Manage OSS buckets and objects for storage cleanup, listing artifacts, or provisioning new buckets for projects.
• Deploy applications to ECS via OOS, with automatic artifact upload to OSS and deployment status tracking.
• Control RDS database lifecycle (start, stop, restart) and list instances for cost optimization or scheduled maintenance windows.

• "List all ECS instances in cn-hangzhou and stop any that have been idle (under 5% CPU) for the past 24 hours."
• "Create three ECS instances in cn-shanghai using image aliyun_3_x64 with instance type ecs.g6.large in security group sg-xxx."
• "Show me CPU and memory usage for instance i-bp1abc123 over the last 6 hours."
• "Run df -h on all production ECS instances and summarize disk pressure."
• "List my OSS buckets and tell me which ones are in the cn-beijing region."
• "Deploy the project at ./my-app to ECS instance i-bp1xyz and report the deployment status."

• Official Aliyun project: Maintained under the aliyun GitHub organization, ensuring API coverage stays aligned with Alibaba Cloud services.
• Broad service coverage: Includes ECS, VPC, RDS, OSS, CloudMonitor, and OOS in a single server rather than requiring separate integrations.
• Built-in deployment workflow: OOS_CodeDeploy automates artifact upload to OSS and orchestrates deployment to ECS, not just raw API calls.
• Wide client support: Works with Cursor, Cline, Claude Desktop, ModelScope, Smithery, and Alibaba Cloud Model Studio.

• Long-lived AccessKey required: Uses static ACCESS_KEY_ID and ACCESS_KEY_SECRET env vars rather than STS tokens or role-based auth, which is risky if exposed.
• Powerful destructive tools: Exposes DeleteInstances, DeleteBucket, ResetPassword, and ReplaceSystemDisk to the model without built-in confirmation guardrails.
• Limited service depth: Many Alibaba Cloud products (SLB, Container Service, MaxCompute, Function Compute, etc.) are not covered, and within covered services some operations like RDS create or VPC create are missing.

• AWS MCP servers by AWS Labs for managing AWS resources.
• Cloudflare MCP server for Cloudflare workers, KV, R2, and DNS.
• Tencent Cloud and other community-built cloud provider MCP servers on Smithery for multi-cloud setups.