mcp-redhat-subscription

An MCP server for the Red Hat Subscription Management API. Full coverage of the RHSM API — subscriptions, systems, allocations, errata, packages, images, cloud access, and organization.

Tools

Subscriptions

| Tool | Description | |------|-------------| | listSubscriptions | List Red Hat subscriptions for the authenticated account | | getSubscription | Get details of a specific subscription including pools and consumed quantities | | listSubscriptionContentSets | List all content sets for a subscription | | listSubscriptionSystems | List all systems consuming a subscription |

Systems

| Tool | Description | |------|-------------| | listSystems | List systems registered with Red Hat Subscription Management | | getSystem | Get details of a specific registered system | | removeSystem | Remove a system profile | | attachSystemEntitlement | Attach an entitlement to a system from a pool | | removeSystemEntitlement | Remove an entitlement from a system | | listSystemErrata | List all applicable errata for a system | | listSystemPackages | List all packages for a system | | listSystemPools | List all pools for a system |

Allocations (Satellite Manifests)

| Tool | Description | |------|-------------| | listAllocations | List subscription allocations | | getAllocation | Get details of a specific allocation | | createAllocation | Create a new Satellite allocation | | updateAllocation | Update an allocation (name, version, SCA) | | removeAllocation | Remove an allocation (requires force) | | listAllocationVersions | List available Satellite versions | | listAllocationPools | List all pools for an allocation | | attachAllocationEntitlement | Attach an entitlement to an allocation | | updateAllocationEntitlement | Update entitlement quantity on an allocation | | removeAllocationEntitlement | Remove an entitlement from an allocation | | exportAllocation | Trigger manifest export | | getExportJobStatus | Check export job status | | downloadAllocationExport | Download a completed manifest export |

Errata

| Tool | Description | |------|-------------| | listErrata | List all errata applicable to the user's systems | | listErrataByContentSetArch | List errata for a content set and architecture | | getErratum | Get details of a specific advisory | | listErratumImages | List updated container images for an advisory | | listErratumPackages | List all packages for an advisory | | listErratumSystems | List all systems affected by an advisory |

Images

| Tool | Description | |------|-------------| | listImagesByContentSet | List available images in a content set | | listImageDownloads | List RHEL image downloads by version and architecture | | downloadImage | Download an image by SHA256 checksum |

Packages

| Tool | Description | |------|-------------| | listPackagesByContentSetArch | List packages for a content set and architecture | | getPackage | Get details of a package by checksum | | downloadPackage | Download a package by SHA256 checksum |

Cloud Access

| Tool | Description | |------|-------------| | listCloudAccessProviders | List enabled cloud access providers | | addCloudProviderAccounts | Add provider accounts (AWS, Azure, GCE) | | updateCloudProviderAccount | Update a provider account | | removeCloudProviderAccount | Remove a provider account | | removeCloudProviderAccountBySourceId | Remove a provider account by source ID | | verifyCloudProviderAccount | Verify a provider account | | enableGoldImages | Enable Gold image access for a provider |

Organization

| Tool | Description | |------|-------------| | getOrganization | Get organization details including SCA capability |

Prerequisites

• Node.js 18+
• A Red Hat offline API token (generate one here)

Configuration

Set your Red Hat offline API token in your shell profile:

export REDHAT_TOKEN="your-offline-token-here"

In enterprise environments, provide REDHAT_TOKEN through your secrets management solution (e.g. HashiCorp Vault, Kubernetes secrets, or your CI platform's secret variables) rather than shell profiles.

Gemini CLI

Add to ~/.gemini/settings.json:

{
  "mcpServers": {
    "redhat-subscription": {
      "command": "npx",
      "args": ["-y", "mcp-redhat-subscription"],
      "env": {
        "REDHAT_TOKEN": "$REDHAT_TOKEN"
      }
    }
  }
}

watsonx Orchestrate

# Add a connection for the Red Hat API token
orchestrate connections add --app-id "redhat-subscription"
orchestrate connections configure --app-id redhat-subscription --env draft --kind key_value --type team --url "https://access.redhat.com"
orchestrate connections set-credentials --app-id "redhat-subscription" --env draft -e REDHAT_TOKEN=your-offline-token-here

# Import the MCP toolkit
orchestrate toolkits import --kind mcp \
  --name redhat-subscription \
  --description "Red Hat Subscription Management" \
  --command "npx -y mcp-redhat-subscription" \
  --tools "*" \
  --app-id redhat-subscription

Claude Code

Add to ~/.claude/settings.json:

{
  "mcpServers": {
    "redhat-subscription": {
      "command": "npx",
      "args": ["-y", "mcp-redhat-subscription"],
      "env": {
        "REDHAT_TOKEN": "${REDHAT_TOKEN}"
      }
    }
  }
}

VS Code / Cursor

Add to .vscode/mcp.json in your workspace:

{
  "mcpServers": {
    "redhat-subscription": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "mcp-redhat-subscription"],
      "env": {
        "REDHAT_TOKEN": "${REDHAT_TOKEN}"
      }
    }
  }
}

Authentication

The server exchanges your Red Hat offline API token for a short-lived bearer token via Red Hat SSO. Tokens are cached and refreshed automatically.

Related MCP Servers

• mcp-redhat-account - Account management
• mcp-redhat-knowledge - Knowledge Base search
• mcp-redhat-manpage - RHEL man pages
• mcp-redhat-support - Support case management

License

MIT