datumctl mcp

Start the Datum MCP server

Synopsis

Start a local MCP server exposing tools to: • list & inspect CRDs • validate manifests via server-side dry run • generic CRUD (create/get/update/delete) for any served CRD • switch context at runtime via datum/change_context

MCP clients (e.g., Claude) connect over STDIO. Use —port to also expose a local HTTP debug API on 127.0.0.1:<port>. Select a Datum context with exactly one of —organization or —project.

datumctl mcp [flags]

Options

Flag	Type	Description
-h, --help	—	Help for mcp.
--namespace	string	Default namespace for CRUD/validation (if YAML or tool args omit it).
--organization	string	Organization ID to target (mutually exclusive with --project).
--port	int	Run HTTP debug API on 127.0.0.1:<port> (MCP still uses STDIO).
--project	string	Project ID to target (mutually exclusive with --organization).

Options inherited from parent commands

Flag	Type	Description
--as	string	Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
--as-group	stringArray	Group to impersonate for the operation. Can be repeated to specify multiple groups.
--as-uid	string	UID to impersonate for the operation.
--as-user-extra	stringArray	User extras to impersonate for the operation. Can be repeated to specify multiple values for the same key.
--certificate-authority	string	Path to a cert file for the certificate authority.
--disable-compression	—	If true, opt-out of response compression for all requests to the server.
--insecure-skip-tls-verify	—	If true, the server’s certificate will not be checked for validity. This will make your HTTPS connections insecure.
--log-flush-frequency	duration	Maximum number of seconds between log flushes. (default 5s)
--platform-wide	—	Access the platform root instead of a project or organization control plane.
--request-timeout	string	The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don’t timeout requests. (default "0")
-s, --server	string	The address and port of the Kubernetes API server.
--tls-server-name	string	Server name to use for server certificate validation. If not provided, the hostname used to contact the server is used.
--token	string	Bearer token for authentication to the API server.
--user	string	The name of the kubeconfig user to use.
-v, --v	Level	Number for the log level verbosity.
--vmodule	moduleSpec	Comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format).

See also

• datumctl - A CLI for interacting with the Datum platform

Auto generated by spf13/cobra on 24-Feb-2026