Identity-aware access proxy for infrastructure.
## Teleport MCP Server: Secure Infrastructure Access The **Teleport MCP Server** integrates Teleport access plane into Google Antigravity, providing certificate-based authentication and audit logging for secure access to SSH servers, Kubernetes clusters, databases, and applications. ### Why Teleport MCP? - **Certificate-Based Auth**: Replace long-lived credentials with short-lived certificates - **Session Recording**: Record all sessions for compliance and security auditing - **Access Requests**: Implement just-in-time access with approval workflows - **SSO Integration**: Leverage existing identity providers for authentication - **Protocol Support**: Secure SSH, Kubernetes, database, and application access ### Key Features #### 1. SSH Access ```python # Connect to an SSH node session = await mcp.ssh_connect( node="web-server-01", login="ubuntu", cluster="production" ) # Execute commands result = await mcp.ssh_exec( session_id=session["id"], command="systemctl status nginx" ) print(result["stdout"]) # Close session await mcp.ssh_disconnect(session_id=session["id"]) ``` #### 2. Kubernetes Access ```python # Get kubeconfig for a cluster kubeconfig = await mcp.get_kubeconfig( cluster="prod-k8s", ttl="8h" ) # List available clusters clusters = await mcp.list_kube_clusters() for cluster in clusters: print(f"Cluster: {cluster['name']} ({cluster['labels']})") ``` #### 3. Database Access ```python # Connect to a database db_session = await mcp.db_connect( database="prod-postgres", db_user="app_readonly", db_name="myapp" ) # Get connection string print(f"Connect: psql {db_session['connection_string']}") ``` #### 4. Access Requests ```python # Request elevated access request = await mcp.create_access_request( roles=["db-admin"], reason="Emergency database maintenance", suggested_reviewers=["alice@company.com"] ) # Check request status status = await mcp.get_access_request(request_id=request["id"]) print(f"Request status: {status['state']}") # List pending requests pending = await mcp.list_access_requests(state="pending") ``` ### Configuration ```json { "mcpServers": { "teleport": { "command": "npx", "args": ["-y", "@anthropic/mcp-teleport"], "env": { "TELEPORT_PROXY": "teleport.yourcompany.com:443", "TELEPORT_AUTH_TOKEN": "your-auth-token", "TELEPORT_CLUSTER": "production" } } } } ``` ### Use Cases **Production Access**: Provide developers secure, audited access to production systems with session recording for compliance. **Database Queries**: Enable secure database access for debugging without sharing credentials or connection strings. **Incident Response**: Quickly grant emergency access to systems with approval workflows and automatic expiration. **Contractor Access**: Provide temporary, scoped access to contractors with full audit trails and automatic cleanup. The Teleport MCP enables secure, audited infrastructure access directly within your Google Antigravity development environment.
{
"mcpServers": {
"teleport": {}
}
}