PlugWiki
Scaleway MCP server logo

Scaleway MCP Server: Setup for Claude, Cursor and Other Apps

OfficialLocal
GetDockerscaleway/cliscaleway/scaleway-cli
Tools
8
5 read · 3 change
Works in
12
apps
Risk
High
can delete
Auth
API key
Version
2.65.1
last commit Oct 2026

Lets Claude, Cursor and other assistants run Scaleway CLI commands to look at and manage your Scaleway cloud account.

The Scaleway MCP server is built into Scaleway's own command line tool. It turns the CLI commands into tools, so the assistant can list, create, change and delete resources such as servers, IAM users and buckets.

It runs on your computer and uses your Scaleway access key and secret key. Every command is available by default, including ones that delete things, so start with the read-only option unless you want the assistant to make changes.

Good for

  • Scaleway customers who want an assistant to check servers, volumes and users
  • DevOps engineers who already use the scw command line
  • Teams that want a read-only view of their cloud by filtering to list and get commands

Works in

12 should work

Tap an app to see how to set it up and any known problems.

Install Scaleway MCP

Claude Code

  1. 1

    Copy this prompt.

    Add the Scaleway MCP server to Claude Code. Run this command:

claude mcp add scaleway -e SCW_ACCESS_KEY=<SCW_ACCESS_KEY> -e SCW_SECRET_KEY=<SCW_SECRET_KEY> -- docker run -i --rm -e SCW_ACCESS_KEY -e SCW_SECRET_KEY scaleway/cli mcp server serve

Ask me for SCW_ACCESS_KEY, SCW_SECRET_KEY and only put the values in that config, nowhere else.

Then check that it loaded and tell me if I need to sign in or restart.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires Docker.

Read-only mode: Add --read-only after the word serve in the arguments.

Adapted from the README, which runs scw mcp server serve; this config runs the same command inside the scaleway/cli Docker image, whose entrypoint is scw. For a read-only server, add read-only=true after serve (the command docs also show scw mcp server serve --read-only); only get, list and wait commands are then registered. If you have scw installed, you can use scw as the command with the arguments mcp, server, serve. Keep the default stdio transport: the streamable-http transport listens on :8080 on every interface without authentication.

Built from the package data we hold. Not yet tested by us.

Tools

  • Lists your Compute instances

    Lists the Compute instances (virtual servers) in your Scaleway account.

    Try: “List my Scaleway instances.”

    Network · instance_server_list

  • Lists IAM users

    Lists the IAM users in your Scaleway organization.

    Try: “Which IAM users do we have on Scaleway?”

    Network · iam_user_list

  • Lists your projects

    Lists the projects of a Scaleway organization.

    Try: “List my Scaleway projects.”

    Network · account_project_list

  • Lists Kubernetes clusters

    Lists the Kubernetes Kapsule clusters in your account.

    Try: “Show my Kubernetes clusters on Scaleway.”

    Network · k8s_cluster_list

  • Gets a cluster kubeconfig

    Retrieves the kubeconfig of a cluster. The result contains cluster credentials, so it ends up in the chat.

    Try: “Get the kubeconfig for my staging cluster.”

    Network · k8s_kubeconfig_get

  • Reboots a cluster node

    Reboots one node in a cluster, which interrupts the workloads on it.

    Try: “Reboot node abc in my staging cluster.”

    Write · k8s_node_reboot

  • Deletes a cluster

    Deletes a Kubernetes cluster.

    Try: “Delete the test cluster I created yesterday.”

    Delete · k8s_cluster_delete

  • Deletes a project

    Deletes an existing project of an organization.

    Try: “Delete the empty project called sandbox.”

    Delete · account_project_delete

Read from the source code

Permissions

high risk · 4 things to watch

High risk

The assistant can create, change and delete anything your Scaleway keys allow, because all CLI commands become tools. Turn on the read-only option and use a key limited to the projects you need.

What it can do

Watch out for

  • Every CLI command is a tool, including deletes

    By default the server registers all CLI commands except a few shell-focused namespaces. Use the read-only option, or limit it to chosen namespaces, resources or verbs. github.com

  • HTTP mode opens a port with no sign-in

    If you start it with the streamable-http transport, the default address :8080 listens on every network interface and the handler has no authentication. Keep stdio, the default. github.com

  • Your keys decide how much it can reach

    It acts with the access key and secret key you give it. Use a key from an IAM policy limited to the projects and services you want the assistant to touch. github.com

  • Some read tools return secrets

    k8s_kubeconfig_get returns a cluster kubeconfig, which holds cluster credentials, so even read-only mode can put them in the chat. github.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details
Turning on read-onlyAdd read-only=true after `scw mcp server serve` (the command docs also show --read-only) so only get, list and wait commands are registered. You can also limit it with namespaces=, resources= and verbs=.
Talks toScaleway APIs
Sign-in and keysUses your Scaleway CLI config file or the SCW_ACCESS_KEY and SCW_SECRET_KEY environment variables. The keys stay on your computer and are sent only to Scaleway.

Questions

Is the Scaleway MCP server official?

Yes. It is part of the Scaleway CLI, which Scaleway publishes in its own scaleway-cli repository.

Do I need a Scaleway API key?

Yes. The server reads your CLI config file or the SCW_ACCESS_KEY and SCW_SECRET_KEY environment variables. The Docker setup above passes both variables in.

Can it run read-only?

Yes. Add read-only=true after scw mcp server serve and only get, list and wait commands are registered. You can also limit it to chosen namespaces, resources or verbs. Read-only mode still allows reads that return secrets, such as k8s_kubeconfig_get.

Can it delete my servers or data?

Yes, unless you use read-only mode. Commands such as delete are registered like any other, and the server marks them as destructive for the client.

Does it run locally or in the cloud?

It runs on your computer, either as the scw binary or in the scaleway/cli Docker image. It then calls the Scaleway APIs with your keys.

How do I add it to Claude or Cursor?

Use the install box above. It starts the Docker image with the mcp server serve command and your Scaleway keys.

Information

updated Nov 2, 2026

Publisher
Official
Package
scaleway/cli
Registry
Docker
Transport
stdio
Auth
API key
Version
2.65.1
License
Apache-2.0
Last commit
Oct 30, 2026
Open issues
217
Listed in
Official MCP registry

WebsiteGitHubDockerOfficial MCP RegistryChangelogIssues

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 6
  1. github.com · github.com
  2. github.com · github.com
  3. github.com · github.com
  4. github.com · github.com
  5. github.com · github.com
  6. github.com · github.com

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 2, 2026.