AAP MCP Server (official Ansible)
access level: configurable✔ Source-reviewed Oct 2026
We read this project's source code and tool definitions (Oct 2026). This is a code review, not a live test against real systems. Re-check after upgrades.
| Repository | https://github.com/ansible/aap-mcp-server |
|---|---|
| Category | Ansible |
| Systems touched | Ansible Automation Platform: controller, gateway, galaxy, EDA via OpenAPI toolsets |
| Access (as described) | configurable |
| License / price | Apache-2.0 / free |
| GitHub stars | 34 |
| Read tools | OpenAPI-derived reads across enabled services (controller/galaxy/gateway/eda); custom toolsets e.g. jobs_read, inventories_list, ping/config |
| Write / delete / exec tools | Write ops (e.g. job_templates_launch_create) only when ALLOW_WRITE_OPERATIONS=true; otherwise filtered |
| Read-only mode | Yes: ALLOW_WRITE_OPERATIONS defaults unset/false; toolsets + token permissions further restrict |
| Safety notes | Leave ALLOW_WRITE_OPERATIONS off unless the agent should launch jobs. Scope the AAP token; use toolsets for role-based surfaces. Skills catalog can still be served broadly when skills_enabled=true — review that toggle. |
| Verified | yes (README review 2026-11-07) |
| Notes | Official ansible/aap-mcp-server. Updated 2026-11-03. Prefer over community AAP wrappers when you run AAP. Added 2026-11-07. |
📬 SysAdmin Agents
The SysAdmin Agents newsletter: new MCP servers, agent skills and safety notes for sysadmins. One email a week.