Infraveil Control Plane
- Updated June 19, 2026
- infraveilhq/infraveil-mcp
Infraveil Control Plane MCP is a self-hosted MCP server that lets AI agents query governed backend state and enqueue signed deploy or remediation requests requiring human approval.
About
Infraveil Control Plane MCP is a self-hosted server that lets AI agents query governed backend state and file signed deploy or remediation requests that always pass through human approval. Developers reach for it when agents must operate infrastructure in-loop without gaining silent mutation authority. Configure infraveil-mcp with base URL and agent credentials, then use tools like evaluate_deploy_gate, request_deploy, and remediate to read state and enqueue approval-backed changes.
- Self-hosted MCP server with HMAC-SHA256 signed requests and verified responses
- Read-only fleet status and deploy-gate evaluation without auto-applying changes
- request_deploy and remediate enqueue human-approval queue with approval URLs
- Least-privilege per-agent token scoped by the Infraveil control plane
Infraveil Control Plane by the numbers
- Data as of Jul 7, 2026 (Skillselion catalog sync)
claude mcp add --env INFRAVEIL_BASE_URL=YOUR_INFRAVEIL_BASE_URL --env INFRAVEIL_CLIENT_ID=YOUR_INFRAVEIL_CLIENT_ID --env INFRAVEIL_AGENT_ID=YOUR_INFRAVEIL_AGENT_ID --env INFRAVEIL_AGENT_TOKEN=YOUR_INFRAVEIL_AGENT_TOKEN --env INFRAVEIL_AGENT_FILE=YOUR_INFRAVEIL_AGENT_FILE --env INFRAVEIL_VERIFY_RESPONSES=YOUR_INFRAVEIL_VERIFY_RESPONSES infraveil-mcp -- uvx infraveil-mcpAdd your badge
Show developers this MCP server is listed on Skillselion. Paste this into your README.
| Package | infraveil-mcp |
|---|---|
| Transport | STDIO |
| Auth | Required |
| Last updated | June 19, 2026 |
| Repository | infraveilhq/infraveil-mcp ↗ |
How can an AI agent inspect backend state and propose infrastructure changes without applying them without human approval?
Let AI agents read governed backend state and enqueue signed deploy or remediation requests that require human approval.
Who is it for?
Developers running Infraveil who want in-loop agent access to fleet status, deploy gates, and approval-queued changes with mutual request signing.
Skip if: Teams without an Infraveil control plane who only need a local offline guard for single-machine destructive shell commands.
What you get
Returns signed read-only fleet and policy data and approval-queue IDs with URLs for deploy or remediation requests that never auto-apply.
Recommended MCP Servers
나라장터 낙찰정보나라장터 낙찰정보서비스 Open API를 위한 로컬 MCP 서버나라장터 사전규격나라장터 사전규격정보서비스 Open API를 위한 로컬 MCP 서버나라장터 입찰공고나라장터 입찰공고정보서비스(공공데이터포털 data.go.kr) Open API를 감싼 로컬 MCP 서버
Accelerators36 tools for AWS infrastructure, security compliance, AI workflows, and ACI governance.
ACMSApple Container MCP Server (ACMS) provides access to Apple's container CLI tool on macOS3
Acronis MCPThe first real CLI for the Acronis Cyber Protect Cloud platform - every tenant, agent, and usage15FAQ
Can this MCP apply deploys automatically?
No. request_deploy and remediate only enqueue requests into the control plane human-approval queue and return approval URLs.
How is trust established on the wire?
Requests and responses are HMAC-SHA256 signed with per-agent tokens plus nonce and timestamp replay protection.
What read-only tools are available?
Agents can inspect governed state and use evaluate_deploy_gate to see whether a proposed change would pass policy without mutating infrastructure.