DigitalOcean MCP server
The whole DigitalOcean account, at the same depth as DigitalOcean's own MCP server.
- Tools
- 339
- Read-only
- 152
- Write
- 187
- Off by default
- Destructive
- 43
- Flagged distinctly
DigitalOcean through an assistant
Droplets and their lifecycle actions, the full networking surface, managed databases, Kubernetes, Functions, Container Registry, Block Storage, Spaces, App Platform, monitoring, billing and the GenAI product lines -- the complete tool coverage DigitalOcean's own server offers, on a token you scope to one team. Writes are opt-in, and every operation DigitalOcean itself rates High risk needs an explicit confirmation on top, which is stricter than DigitalOcean's own server enforces.
- Droplets, images, snapshots, sizes and tag-scoped bulk actions
- VPCs, firewalls, load balancers, DNS, reserved IPs and certificates
- Managed database clusters and per-engine config, Kubernetes clusters and node pools
- Functions, Container Registry, Block Storage, NFS shares and Spaces CDN
- Account, balance, billing history, invoices, alert policies and uptime checks
- Create, resize, power-cycle and delete infrastructure (opt-in, confirmation on high-risk)
What people actually ask
Real questions, answered from live DigitalOcean data.
“Which of my Droplets have backups disabled?”
digitalocean_droplet_listdigitalocean_droplet_backup_policy“Are any firewall rules open to the whole internet on SSH?”
digitalocean_firewall_listdigitalocean_firewall_get“What did I spend last month, and on what?”
digitalocean_billing_history_listdigitalocean_invoice_list339 DigitalOcean tools
Grouped by what they touch. Every tool is individually toggleable — you expose only what you want.
Genai
52 tools23 read-only · 29 writeShowing 10 of 10 tools
- digitalocean_dedicated_inference_createWriteDestructive
Create a new Dedicated Inference instance. This provisions dedicated GPU capacity and incurs ongoing DigitalOcean spend for as long as it exists. Returns the instance and, if applicable, an initial auth token.
- digitalocean_dedicated_inference_deleteWriteDestructive
Delete a Dedicated Inference instance. This cannot be undone.
- digitalocean_dedicated_inference_getRead-only
Get details of a Dedicated Inference instance by ID.
- digitalocean_dedicated_inference_listRead-only
List Dedicated Inference instances with optional region/name filters and pagination.
- digitalocean_dedicated_inference_updateWrite
Update a Dedicated Inference instance. model_deployments must be provided and non-empty (DigitalOcean's own MCP server enforces this even though the underlying API schema allows omitting it).
- digitalocean_genai_batch_inference_cancelWrite
Request cancellation of a batch inference job. The job may not be cancelled immediately -- poll with get to check status.
- digitalocean_genai_batch_inference_createWrite
Create a new batch inference job. Requires a previously uploaded file (via genai_batch_inference_create_file + genai_batch_inference_upload_file). For the openai provider, endpoint is also required.
- digitalocean_genai_batch_inference_create_fileWrite
Create a presigned URL for uploading a batch inference JSONL input file. The file must have a .jsonl extension. Upload the file to the returned URL via HTTP PUT (genai_batch_inference_upload_file) before creating a batch job.
- digitalocean_genai_batch_inference_getRead-only
Get the current status and metadata of a batch inference job by its ID.
- digitalocean_genai_batch_inference_get_resultsRead-only
Get the results download URL for a completed batch inference job. Returns a presigned download URL and output file ID. Fails if the job has not completed.
+ 42 more genai tools — see the full catalogue
Databases
38 tools18 read-only · 20 writeShowing 10 of 10 tools
- digitalocean_db_cluster_createWrite
Create a new database cluster.
- digitalocean_db_cluster_create_topicWrite
Create a topic for a Kafka cluster.
- digitalocean_db_cluster_create_userWrite
Create a new database user for a cluster.
- digitalocean_db_cluster_deleteWriteDestructive
Delete a database cluster by its id. There is no way to recover a cluster once destroyed.
- digitalocean_db_cluster_delete_topicWrite
Delete a Kafka topic by name.
- digitalocean_db_cluster_delete_userWrite
Delete a database user from a cluster.
- digitalocean_db_cluster_getRead-only
Get a database cluster by its id.
- digitalocean_db_cluster_get_caRead-only
Get the CA certificate for a cluster by its id.
- digitalocean_db_cluster_get_firewall_rulesRead-only
Get firewall rules (inbound sources) for a database cluster.
- digitalocean_db_cluster_get_kafka_configRead-only
Get the Kafka broker config for a cluster.
+ 28 more databases tools — see the full catalogue
Droplets
33 tools5 read-only · 28 writeShowing 10 of 10 tools
- digitalocean_change_kernel_dropletWrite
Change a droplet's kernel.
- digitalocean_disable_backups_dropletWrite
Disable backups on a droplet.
- digitalocean_disable_backups_droplets_tagWrite
Disable backups on droplets by tag.
- digitalocean_droplet_actionRead-only
Get a droplet action by droplet ID and action ID.
- digitalocean_droplet_backup_policyRead-only
Get a droplet's backup policy.
- digitalocean_droplet_createWriteDestructive
Create a new droplet. Supports standard distribution images via image_id and 1-click marketplace app images via image_slug. Exactly one of image_id or image_slug must be provided.
- digitalocean_droplet_deleteWriteDestructive
Delete a droplet.
- digitalocean_droplet_enable_private_netWriteDestructive
Enable private networking on a droplet.
- digitalocean_droplet_getRead-only
Get a droplet by its ID.
- digitalocean_droplet_kernelsRead-only
Get available kernels for a droplet.
+ 23 more droplets tools — see the full catalogue
Functions
26 tools14 read-only · 12 writeShowing 10 of 10 tools
- digitalocean_functions_create_access_keyWrite
Create an access key for a DigitalOcean Functions namespace. The secret appears ONLY in this response and cannot be retrieved later -- capture and store it immediately. Access keys grant programmatic data-plane access.
- digitalocean_functions_create_namespaceWrite
Create a new DigitalOcean Functions namespace.
- digitalocean_functions_create_or_update_actionWrite
Create or update an action in a DigitalOcean Functions namespace. If the action already exists it will be overwritten.
- digitalocean_functions_create_or_update_packageWrite
Create or update a package in a DigitalOcean Functions namespace. Packages are used to group related actions.
- digitalocean_functions_create_triggerWrite
Create a scheduled trigger for a function in a DigitalOcean Functions namespace. Currently only SCHEDULED type triggers are supported.
- digitalocean_functions_delete_access_keyWrite
Delete an access key for a DigitalOcean Functions namespace. This is irreversible -- once deleted, the key's secret can never be used again.
- digitalocean_functions_delete_actionWriteDestructive
Delete an action from a DigitalOcean Functions namespace.
- digitalocean_functions_delete_namespaceWriteDestructive
Delete a DigitalOcean Functions namespace. This permanently removes the namespace and all its functions, packages, and triggers.
- digitalocean_functions_delete_packageWriteDestructive
Delete a package from a DigitalOcean Functions namespace.
- digitalocean_functions_delete_triggerWrite
Delete a trigger from a DigitalOcean Functions namespace.
+ 16 more functions tools — see the full catalogue
Container registry
18 tools11 read-only · 7 writeShowing 10 of 10 tools
- digitalocean_docr_createWrite
Create a new container registry. DigitalOcean accounts are limited to one registry.
- digitalocean_docr_deleteWriteDestructive
Delete a container registry. There is no way to recover it once deleted.
- digitalocean_docr_docker_credentialsRead-only
Get Docker credentials for a container registry, as a Docker config.json payload.
- digitalocean_docr_garbage_collection_getRead-only
Get the active garbage collection for a container registry.
- digitalocean_docr_garbage_collection_listRead-only
List garbage collections for a container registry.
- digitalocean_docr_garbage_collection_startWriteDestructive
Start a garbage collection for a container registry to free up storage.
- digitalocean_docr_garbage_collection_updateWrite
Update a garbage collection for a container registry, e.g. to cancel it.
- digitalocean_docr_getRead-only
Get a container registry by name.
- digitalocean_docr_listRead-only
List all container registries.
- digitalocean_docr_optionsRead-only
Get available container registry options, including subscription tiers and regions.
+ 8 more container registry tools — see the full catalogue
Kubernetes
17 tools8 read-only · 9 writeShowing 10 of 10 tools
- digitalocean_doks_create_clusterWriteDestructive
Create a new DigitalOcean Kubernetes cluster with at least one node pool. This provisions real Droplets and incurs ongoing DigitalOcean spend for as long as the cluster exists.
- digitalocean_doks_create_nodepoolWrite
Create a new node pool in an existing DigitalOcean Kubernetes cluster. This provisions real Droplets.
- digitalocean_doks_delete_clusterWriteDestructive
Permanently delete a DigitalOcean Kubernetes cluster and all its node pools. This cannot be undone.
- digitalocean_doks_delete_nodeWriteDestructive
Delete a single node from a node pool in a DigitalOcean Kubernetes cluster. This cannot be undone -- the node pool will recreate a replacement node automatically unless the pool is already at its minimum size.
- digitalocean_doks_delete_nodepoolWriteDestructive
Permanently delete a node pool and all its nodes from a DigitalOcean Kubernetes cluster. This cannot be undone.
- digitalocean_doks_get_clusterRead-only
Get a DigitalOcean Kubernetes cluster's configuration and status.
- digitalocean_doks_get_cluster_upgradesRead-only
Get the Kubernetes versions a cluster is eligible to upgrade to.
- digitalocean_doks_get_credentialsRead-only
Get short-lived Kubernetes API server credentials (server URL, certificate/token data) for a cluster.
- digitalocean_doks_get_kubeconfigRead-only
Get the kubeconfig YAML for a DigitalOcean Kubernetes cluster, for use with kubectl and other Kubernetes tooling.
- digitalocean_doks_get_nodepoolRead-only
Get a single node pool in a DigitalOcean Kubernetes cluster.
+ 7 more kubernetes tools — see the full catalogue
Monitoring
16 tools7 read-only · 9 writeShowing 10 of 10 tools
- digitalocean_alert_policy_createWrite
Create a new Alert Policy.
- digitalocean_alert_policy_deleteWrite
Delete an Alert Policy permanently.
- digitalocean_alert_policy_getRead-only
Get Alert Policy information by UUID.
- digitalocean_alert_policy_listRead-only
List all Alert Policies in your account with pagination.
- digitalocean_alert_policy_updateWrite
Update an Alert Policy.
- digitalocean_uptimecheck_alert_createWrite
Create a new UptimeCheck alert.
- digitalocean_uptimecheck_alert_deleteWrite
Delete an UptimeCheck alert.
- digitalocean_uptimecheck_alert_getRead-only
Get UptimeCheck Alert information by CheckID and AlertID.
- digitalocean_uptimecheck_alert_listRead-only
List UptimeCheck Alerts with pagination.
- digitalocean_uptimecheck_alert_updateWrite
Update an UptimeCheck alert.
+ 6 more monitoring tools — see the full catalogue
Dns
14 tools6 read-only · 8 writeShowing 10 of 10 tools
- digitalocean_certificate_deleteWriteDestructive
Permanently delete a certificate. This cannot be undone and breaks TLS termination for anything still using it.
- digitalocean_certificate_getRead-only
Get certificate information by ID.
- digitalocean_certificate_listRead-only
List certificates with pagination.
- digitalocean_custom_certificate_createWrite
Upload a new custom TLS certificate from a private key, leaf certificate, and certificate chain.
- digitalocean_domain_createWrite
Create a new domain.
- digitalocean_domain_deleteWriteDestructive
Permanently delete a domain and every DNS record under it. This cannot be undone.
- digitalocean_domain_getRead-only
Get domain information by name.
- digitalocean_domain_listRead-only
List domains with pagination.
- digitalocean_domain_record_createWrite
Create a new domain record.
- digitalocean_domain_record_deleteWrite
Delete a domain record.
+ 4 more dns tools — see the full catalogue
Nfs
13 tools4 read-only · 9 writeShowing 10 of 10 tools
- digitalocean_nfs_attachWrite
Attach a NFS file share to a VPC.
- digitalocean_nfs_detachWrite
Detach a NFS file share from a VPC.
- digitalocean_nfs_file_share_createWrite
Create a new NFS file share.
- digitalocean_nfs_file_share_deleteWriteDestructive
Delete a file share by ID.
- digitalocean_nfs_file_share_getRead-only
Get a file share by ID.
- digitalocean_nfs_file_share_listRead-only
List NFS file shares with optional region filter. Supports pagination.
- digitalocean_nfs_reassignWrite
Reassign a NFS file share from one VPC to another.
- digitalocean_nfs_resizeWrite
Resize a NFS file share.
- digitalocean_nfs_snapshotWrite
Create a snapshot of a NFS file share.
- digitalocean_nfs_snapshot_deleteWrite
Delete a NFS snapshot by ID.
+ 3 more nfs tools — see the full catalogue
Volumes
13 tools6 read-only · 7 writeShowing 10 of 10 tools
- digitalocean_volume_action_getRead-only
Get a volume action by ID.
- digitalocean_volume_action_listRead-only
List volume actions.
- digitalocean_volume_attachWrite
Attach a volume to a droplet.
- digitalocean_volume_createWrite
Create a new block storage volume.
- digitalocean_volume_deleteWriteDestructive
Delete a block storage volume by ID.
- digitalocean_volume_detachWrite
Detach a volume from a droplet.
- digitalocean_volume_getRead-only
Get a block storage volume by ID.
- digitalocean_volume_listRead-only
List block storage volumes with optional name/region filters. Supports pagination.
- digitalocean_volume_resizeWrite
Resize a volume.
- digitalocean_volume_snapshot_createWrite
Create a new snapshot from a volume.
+ 3 more volumes tools — see the full catalogue
Account
11 tools9 read-only · 2 writeShowing 10 of 10 tools
- digitalocean_account_get_informationRead-only
Retrieve account information for the current user.
- digitalocean_action_getRead-only
Get a specific action by ID.
- digitalocean_action_listRead-only
List actions with pagination.
- digitalocean_balance_getRead-only
Get balance information for the user account.
- digitalocean_billing_history_listRead-only
List billing history with pagination.
- digitalocean_get_invoiceRead-only
Get the itemized line items for a specific invoice.
- digitalocean_invoice_listRead-only
List invoices with pagination.
- digitalocean_key_createWrite
Create a new SSH key on the account.
- digitalocean_key_deleteWrite
Delete an SSH key from the account.
- digitalocean_key_getRead-only
Get a specific SSH key by ID.
+ 1 more account tool — see the full catalogue
Firewalls
10 tools2 read-only · 8 writeShowing 10 of 10 tools
- digitalocean_firewall_add_dropletsWrite
Adds one or more droplets to a firewall.
- digitalocean_firewall_add_rulesWrite
Add one or more inbound and/or outbound rules to a firewall.
- digitalocean_firewall_add_tagsWrite
Adds one or more tags to a firewall.
- digitalocean_firewall_createWrite
Create a new firewall with a single inbound and outbound rule, optionally applied to droplets and/or tags.
- digitalocean_firewall_deleteWriteDestructive
Permanently delete a firewall. This cannot be undone.
- digitalocean_firewall_getRead-only
Get firewall information by ID.
- digitalocean_firewall_listRead-only
List firewalls with pagination.
- digitalocean_firewall_remove_dropletsWrite
Removes one or more droplets from a firewall.
- digitalocean_firewall_remove_rulesWrite
Remove one or more inbound and/or outbound rules from a firewall.
- digitalocean_firewall_remove_tagsWrite
Removes one or more tags from a firewall.
Load balancers
10 tools2 read-only · 8 writeShowing 10 of 10 tools
- digitalocean_lb_add_dropletsWrite
Add Droplets to a Load Balancer.
- digitalocean_lb_add_fwd_rulesWrite
Add Forwarding Rules to a Load Balancer.
- digitalocean_lb_createWrite
Create a new Load Balancer.
- digitalocean_lb_deleteWriteDestructive
Delete a Load Balancer by ID. This is irreversible.
- digitalocean_lb_delete_cacheWrite
Delete the CDN cache of a global load balancer by ID.
- digitalocean_lb_getRead-only
Get a Load Balancer by ID.
- digitalocean_lb_listRead-only
List Load Balancers with pagination.
- digitalocean_lb_remove_dropletsWrite
Remove Droplets from a Load Balancer.
- digitalocean_lb_remove_fwd_rulesWrite
Remove Forwarding Rules from a Load Balancer.
- digitalocean_lb_updateWrite
Update a Load Balancer.
More tools
68 tools37 read-only · 31 writeShowing 10 of 10 tools
- digitalocean_apps_create_app_from_specWrite
Creates an application from a given app spec. Within the app spec, a source has to be provided -- a Git repository, a Dockerfile, or a container image.
- digitalocean_apps_deleteWriteDestructive
Delete an existing app on DigitalOcean App Platform. This is a destructive operation and cannot be undone.
- digitalocean_apps_get_deployment_statusRead-only
Retrieves the active deployment for an application on DigitalOcean App Platform. Useful for getting the current state of an app's latest deployment and its health status.
- digitalocean_apps_get_infoRead-only
Get information about an application on DigitalOcean App Platform.
- digitalocean_apps_get_logsRead-only
Retrieves app logs for a specific app deployment and component on DigitalOcean App Platform. Returns both live and historic log URLs.
- digitalocean_apps_listRead-only
List all applications on DigitalOcean App Platform. Supports pagination -- use digitalocean_apps_get_info for full detail on a specific app.
- digitalocean_apps_updateWrite
Updates an existing application on DigitalOcean App Platform. Provide app_id and spec to deploy a new spec; omit spec to just trigger a fresh deployment (forced rebuild) of the app's current spec.
- digitalocean_byoip_prefix_createWrite
Create a new BYOIP prefix.
- digitalocean_byoip_prefix_deleteWriteDestructive
Delete a BYOIP prefix. This is irreversible.
- digitalocean_byoip_prefix_getRead-only
Get BYOIP prefix information by UUID.
+ 58 more more tools tools — see the full catalogue
Every tool name and description, machine-readable: /llms-full.txt
You decide what it can touch
The same model applies to every connector, and it defaults closed.
Your own credential
You supply your own DigitalOcean key, scoped however you like on their side. It is encrypted with AES-256-GCM and never returned by any API response or tool call.
Writes off by default
A new connection switches on a read-oriented default set only. Every write tool must be enabled deliberately before any client can call it.
Roles enforced server-side
READ, WRITE and ADMIN gate tool invocation on the server, not just in the UI. A READ member's token is refused any write tool.
Connect DigitalOcean in minutes
No infrastructure to run. Copy one URL and one token into your client.
- 1Create a free workspace and connect DigitalOcean.
- 2Choose which tools to expose — writes stay off until you enable them.
- 3Copy your MCP endpoint URL and bearer token.
- 4Paste them into Claude, Cursor, or any MCP client.
{
"mcpServers": {
"serve-mcp": {
"url": "https://servemcp.com/api/mcp/your-workspace",
"transport": "http",
"headers": {
"Authorization": "Bearer smcp_..."
}
}
}
}More in Network & Infrastructure
Cisco Meraki
Network & InfrastructureEvery read in the Meraki Dashboard API, across every product line. No write tools exist.
Microsoft Azure
Network & InfrastructureThe core-infrastructure slice of Azure Resource Manager, on your own tenant's consent.
Cloudflare
Network & InfrastructureDNS, WAF, Workers and analytics -- scoped to the zones you explicitly authorise.
Put DigitalOcean in front of your assistant
Free plan, no card required. Connect in minutes.