VMWare MCP
An MCP server that gives AI agents direct access to your VMware vSphere infrastructure. Built on top of govc, it exposes 55 typed tools covering VM lifecycle, snapshots, datastores, networking, and more.
Available Tools
| Category | Tools |
|---|---|
| Navigation | about, ls, find, tree, events, tasks, logs, logs.ls |
| VM Lifecycle | vm.create, vm.clone, vm.instantclone, vm.destroy, vm.register, vm.unregister, vm.upgrade |
| VM Configuration | vm.change, vm.customize, vm.info, vm.ip, vm.power, vm.migrate, vm.vnc, vm.question |
| VM Disks | vm.disk.create, vm.disk.attach, vm.disk.change, vm.disk.promote |
| VM Networking | vm.network.add, vm.network.change |
| VM Options & Policies | vm.option.info, vm.option.ls, vm.policy.ls, vm.target.info, vm.target.cap.ls, vm.guest.tools |
| Snapshots | snapshot.create, snapshot.remove, snapshot.export, snapshot.tree |
| Datastore | datastore.info, datastore.ls, datastore.cp, datastore.mv, datastore.tail, datastore.disk.info, datastore.cluster.info, datastore.cluster.change, datastore.maintenance.enter, datastore.maintenance.exit |
| Session | session.login, session.logout, session.ls, session.rm |
| vSAN | vsan.info |
| Task | task.cancel |
Plus 3 meta tools: govc_search (fuzzy search across all commands), govc_help (get help for any command), and govc_run (escape hatch for any govc command).
Quick Start — Docker
cp .env.docker.example .env.docker # fill in your credentials
docker run --rm -i --name vmware-mcp --env-file .env.docker ghcr.io/2501-ai/vmware-mcp
Quick Start — From Source
git clone https://github.com/2501-ai/vmware-mcp.git
cd vmware-mcp
bun install
cp .env.example .env # fill in your credentials
bun run ui # opens MCP Inspector in your browser
To wire the server into an MCP client directly, see the Scripts section.
Configuration
| Variable | Required | Description |
|---|---|---|
GOVC_URL | ✅ | vCenter / ESXi SDK URL (e.g. https://vcenter.example.com/sdk) |
GOVC_USERNAME | ✅ | vSphere username |
GOVC_PASSWORD | ✅ | vSphere password |
GOVC_INSECURE | Set 1 to skip TLS verification | |
GOVC_BIN | Path to govc binary (default: govc) | |
GOVC_TIMEOUT_MS | Subprocess timeout in ms (default: 120000) |
SSH Tunnel
If vCenter is only reachable through an internal network:
ssh [-J jump_user@jump_host] -L 8443:vcenter_host:443 user@internal_host -N
Then use GOVC_URL=https://localhost:8443/sdk with GOVC_INSECURE=1.
Development
Prerequisites
Scripts
| Script | Description |
|---|---|
bun run start | Run MCP server (stdio) |
bun run dev | Run with --watch |
bun run ui | Launch MCP Inspector (web UI) |
bun run check | Biome + tsc (CI gate) |
bun run docker:build | Build Docker image (native arch) |
bun run docker:build:ci | Build Docker image (linux/amd64) |
Adding a Command
- Add entry to
GOVC_COMMAND_INDEXinsrc/commands.ts. - Add
GovcToolDeftoGOVC_TOOL_DEFSwith typed flags. - Generator wires it automatically.
bun run check.
License
MIT