This is an upstream-maintained MCP service that exposes Ansible Automation Platform capabilities (controller, galaxy, gateway, eda) as MCP tools via OpenAPI specifications, with role-based toolset filtering, YAML configuration, session token authentication, and optional Prometheus metrics. It is useful for automation teams that already have an AAP instance and token, but token permissions and the write-operations switch need careful management, and security-relevant defaults such as certificate validation should be reviewed.
AAP MCP Service is a Model Context Protocol service that provides access to Ansible Automation Platform (AAP) APIs through OpenAPI specifications. It supports the controller, galaxy, gateway, and eda AAP services, can load OpenAPI specs from remote URLs or local files, and generates tools according to configured toolsets and user permissions. It uses session-based authentication with an AAP token supplied via the Authorization header or the BEARER_TOKEN_OAUTH2_AUTHENTICATION environment variable, and can optionally expose Prometheus metrics. Configuration priority is environment variables over the YAML file (aap-mcp.yaml) over built-in defaults.
{"mcpServers":{"aap-mcp":{"type":"http","url":"http://localhost:3000/mcp","headers":{"Authorization":"Bearer your_aap_token_here"}}}}