> ## Documentation Index
> Fetch the complete documentation index at: https://controlplanecorporation-jakob-ess-2-0-0.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# MCP Server

> Connect any MCP-compatible AI tool to Control Plane.

The Control Plane MCP Server lets any AI tool with [Model Context Protocol](https://modelcontextprotocol.io/) support manage Control Plane resources through natural-language conversations.

<Tip>
  If your AI tool supports plugins — **Claude Code, Codex, or Antigravity CLI** — start with the [Control Plane AI Plugin](/ai/plugin) instead. The plugin auto-configures this MCP server and adds skills, agents, commands, and guardrails on top.
</Tip>

## Endpoint

<ParamField path="url" type="string" required>
  `https://mcp.cpln.io/mcp`
</ParamField>

## Authentication

OAuth with per-org consent. Your AI tool walks you through it on first use — see your tool's setup page below for the exact trigger.

## Toolset profiles

The full tool catalog is larger than most AI tools can hold in context at once — and some clients cap how many tools they accept. So each connection selects a **toolset profile** with the `toolsets` query parameter. Pick **one** — `core`, `mk8s`, and `full` are nested (each is a superset of the one above), and `readonly` stands on its own:

| Profile            | What it includes                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| ------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `readonly`         | Investigation only. Metrics, logs, traces, workload events, replicas and deployments, quotas, the audit trail, configuration inventory, and Terraform export — plus a generic read tool that works on **every** resource kind. It advertises no tool that creates, updates, deletes or executes a command, so an assistant on this profile cannot change a live resource.                                                                                                                         |
| `core` *(default)* | The everyday deploy-and-operate journey: GVCs, workloads, deployments, logs, image builds, custom domains, identities, policies, the template catalog, volume sets, Terraform export, metrics, traces, and the audit trail — plus a generic read/delete tool that works on **every** resource kind, and a raw-API escape hatch for anything else.                                                                                                                                                 |
| `mk8s`             | Everything in `core`, **plus** the typed BYOK managed-Kubernetes (mk8s) cluster tools (create/update across all 11 providers).                                                                                                                                                                                                                                                                                                                                                                    |
| `full`             | Everything in `mk8s`, **plus** the full administrative and fine-tuning surface: cloud-account registration (AWS/GCP/Azure/NATS), org IAM (users, groups, service accounts, policy edits), network-bridge agents, identity network-resource bindings, IP sets, audit contexts, advanced workload tuning (load balancer, sidecar, rollout, security, retry, external logging), deep custom-domain editing (routes, ports, CORS, TLS), volume-set snapshots / expand / shrink, and org/GVC settings. |

```text Examples theme={null}
https://mcp.cpln.io/mcp                    # core (default)
https://mcp.cpln.io/mcp?toolsets=readonly  # reads only, no writes
https://mcp.cpln.io/mcp?toolsets=mk8s      # core + BYOK Kubernetes
https://mcp.cpln.io/mcp?toolsets=full      # everything
```

An unknown value returns a `400` listing the accepted names (`readonly`, `core`, `mk8s`, `full`). So does combining `readonly` with another profile — it withholds the write tools the others add, so the two cannot be mixed.

<Tip>
  **Which profile should I use?** **`full`** is the complete catalog — it's what the [AI Plugin](/ai/plugin) configures for every client. Pick **`core`** (the default) for a lighter, focused catalog if your client caps tool counts or loads every tool definition up front; it still covers the whole build-and-operate workflow (it can read and delete *any* resource kind generically, and reaches anything else through the raw-API tool). Use **`mk8s`** when you manage BYOK Kubernetes clusters. Use **`readonly`** to point an assistant at production for performance work, incident triage, or an audit without the possibility of an unintended change.
</Tip>

<Note>
  The profile is fixed for the life of a connection — an AI agent can't expand it mid-session. If your assistant says a Control Plane tool isn't available, reconnect with the profile that includes it.
</Note>

## Compatible tools

<CardGroup cols={3}>
  <Card title="Claude Code" icon="https://mintcdn.com/controlplanecorporation-jakob-ess-2-0-0/77ax1RqSv3FsYeK2/icons/claude.svg?fit=max&auto=format&n=77ax1RqSv3FsYeK2&q=85&s=6235cc013d382114db0a5179f72ac4c4" href="/ai/claude" width="248" height="248" data-path="icons/claude.svg">
    Claude Code CLI
  </Card>

  <Card title="Claude Desktop" icon="https://mintcdn.com/controlplanecorporation-jakob-ess-2-0-0/77ax1RqSv3FsYeK2/icons/claude.svg?fit=max&auto=format&n=77ax1RqSv3FsYeK2&q=85&s=6235cc013d382114db0a5179f72ac4c4" href="/ai/claude-desktop" width="248" height="248" data-path="icons/claude.svg">
    Claude apps for Mac & Windows
  </Card>

  <Card title="Claude Web" icon="https://mintcdn.com/controlplanecorporation-jakob-ess-2-0-0/77ax1RqSv3FsYeK2/icons/claude.svg?fit=max&auto=format&n=77ax1RqSv3FsYeK2&q=85&s=6235cc013d382114db0a5179f72ac4c4" href="/ai/claude-web" width="248" height="248" data-path="icons/claude.svg">
    claude.ai in the browser
  </Card>

  <Card title="Codex" icon="https://mintcdn.com/controlplanecorporation-jakob-ess-2-0-0/77ax1RqSv3FsYeK2/icons/codex.svg?fit=max&auto=format&n=77ax1RqSv3FsYeK2&q=85&s=402163449934d645c9511cc23be2a28d" href="/ai/codex" width="2406" height="2406" data-path="icons/codex.svg">
    OpenAI Codex
  </Card>

  <Card title="Cursor" icon="https://mintcdn.com/controlplanecorporation-jakob-ess-2-0-0/77ax1RqSv3FsYeK2/icons/cursor.svg?fit=max&auto=format&n=77ax1RqSv3FsYeK2&q=85&s=711a0315def2651ff9f6e6ea1d0e7a2b" href="/ai/cursor" width="24" height="24" data-path="icons/cursor.svg">
    Cursor IDE
  </Card>

  <Card title="VS Code" icon="https://mintcdn.com/controlplanecorporation-jakob-ess-2-0-0/77ax1RqSv3FsYeK2/icons/vscode.svg?fit=max&auto=format&n=77ax1RqSv3FsYeK2&q=85&s=30d92e7fd7dc9e09c184a6f9f9d2705a" href="/ai/vscode" width="100" height="100" data-path="icons/vscode.svg">
    Visual Studio Code
  </Card>

  <Card title="Antigravity" icon="https://mintcdn.com/controlplanecorporation-jakob-ess-2-0-0/77ax1RqSv3FsYeK2/icons/antigravity.png?fit=max&auto=format&n=77ax1RqSv3FsYeK2&q=85&s=91a6b31217df1962d37c9277eee35fea" href="/ai/antigravity" width="128" height="128" data-path="icons/antigravity.png">
    Google Antigravity (CLI or IDE)
  </Card>

  <Card title="Amp" icon="https://mintcdn.com/controlplanecorporation-jakob-ess-2-0-0/77ax1RqSv3FsYeK2/icons/amp.svg?fit=max&auto=format&n=77ax1RqSv3FsYeK2&q=85&s=256515a34c872949880821a5c832a78e" href="/ai/amp" width="21" height="21" data-path="icons/amp.svg">
    Sourcegraph Amp
  </Card>

  <Card title="OpenCode" icon="https://mintcdn.com/controlplanecorporation-jakob-ess-2-0-0/77ax1RqSv3FsYeK2/icons/opencode.svg?fit=max&auto=format&n=77ax1RqSv3FsYeK2&q=85&s=5bdf5acf9985dcdd09888b93c5381e95" href="/ai/opencode" width="512" height="512" data-path="icons/opencode.svg">
    OpenCode terminal assistant
  </Card>
</CardGroup>

<Note>
  Don't see your tool listed? Any client that supports remote MCP servers can connect — point it at `https://mcp.cpln.io/mcp` and let it handle OAuth.
</Note>

## Next steps

<CardGroup cols={2}>
  <Card title="Tools Reference" icon="https://mintcdn.com/controlplanecorporation-jakob-ess-2-0-0/77ax1RqSv3FsYeK2/icons/mcp.svg?fit=max&auto=format&n=77ax1RqSv3FsYeK2&q=85&s=2942fe0aa7e5bf6e0f7e9d114dd0e8b5" href="/ai/tools" width="24" height="24" data-path="icons/mcp.svg">
    Every tool the server exposes, grouped by resource, with toolset profiles
  </Card>

  <Card title="Usage Examples" icon="lightbulb" href="/ai/examples">
    Practical prompts for common Control Plane workflows
  </Card>

  <Card title="AI Plugin" icon="puzzle-piece" href="/ai/plugin">
    Recommended path for Claude Code, Codex, Antigravity CLI
  </Card>

  <Card title="Access Control" icon="shield" href="/concepts/access-control">
    Scope what an AI tool can do in your org with policies and least privilege
  </Card>
</CardGroup>