Labsco
MCP SERVER

Alibaba Cloud RDS OpenAPI MCP Server

by aliyun ↗

Manage and diagnose Alibaba Cloud RDS instances — performance data, slow logs, parameters, allowlists — and run read-only SQL inside them.

Cloud Resources & Infrastructure as Code
Summary
Diagnosis and management in the same session, on one credential.

The useful pairing is reading the slow log and then changing the parameter — normally two consoles and a context switch. That also sets the security question sharply: this credential can create instances and open public connections, so give it a scoped RAM role rather than an account key, and use --toolsets to leave the groups you do not run unregistered. SQL execution is read-only, which keeps the data plane narrower than the management plane.

What it is

Alibaba Cloud's MCP server over the RDS OpenAPI. It covers the management plane — creating and configuring instances, accounts, parameters and allowlists — and the diagnostic plane, with performance data and slow logs, plus read-only SQL against the databases themselves.

What you get
  • Instances — create_db_instance, describe_db_instances, modify_db_instance_spec and the lifecycle operations around them
  • Accounts and access — create_db_instance_account, allocate_instance_public_connection, and allowlist management including attach_whitelist_template_to_instance and describe_all_whitelist_template
  • Diagnostics — performance data, slow log records and error logs, which is what you actually reach for when a database is misbehaving
  • Parameters — read and modify instance parameters rather than opening the console
  • Tags — add_tags_to_db_instance and the rest of the tagging surface
  • Read-only SQL executed inside an instance, so a question about the data does not need a separate connection
  • --toolsets selects which groups are registered — rds on its own, or rds together with the MSSQL custom group — so the tool list matches the databases you actually run
Requirements

An Alibaba Cloud account and an access key: ALIBABA_CLOUD_ACCESS_KEY_ID and ALIBABA_CLOUD_ACCESS_KEY_SECRET, with ALIBABA_CLOUD_SECURITY_TOKEN as well when you authenticate through STS. Run it with uvx alibabacloud-rds-openapi-mcp-server. The key's RAM permissions are what decide what any tool can do, so scope it rather than using an account-wide key. --toolsets keeps the registered surface to the groups you need.

Setup effort

One command plus a key — uvx alibabacloud-rds-openapi-mcp-server@latest, then supply credentials