Back to Home
theforeman icon

foreman-mcp-server

Verified Safe

by theforeman

Overview

Enables Large Language Models (LLMs) to interact with a Foreman instance by exposing its API and documentation as MCP tools and resources.

Installation

Run Command
uv run foreman-mcp-server --foreman-url https://foreman.example.com --foreman-username $FOREMAN_USERNAME --foreman-password $FOREMAN_PASSWORD --log-level debug --host localhost --port 8080 --transport stdio --no-verify-ssl

Environment Variables

  • PORT
  • HOST
  • LOG_LEVEL
  • FOREMAN_URL
  • FOREMAN_USERNAME
  • FOREMAN_PASSWORD
  • FOREMAN_CA_BUNDLE

Security Notes

The server correctly sanitizes sensitive information (passwords, tokens) in logs. It supports SSL verification and custom CA bundles, defaulting to verification. Foreman credentials are handled via environment variables or request headers (for streamable-http). A potential concern is the `user_map` growing indefinitely, which could lead to resource exhaustion, but not a direct data security flaw. The `--no-verify-ssl` option exists and can expose users to man-in-the-middle attacks if used carelessly.

Similar Servers

Stats

Interest Score34
Security Score8
Cost ClassMedium
Avg Tokens750
Stars4
Forks9
Last Update2025-12-13

Tags

ForemanMCPAPILLMPythonDocumentation