MCP Teleport exposes a standardized interface for AI assistants to interact with Teleport infrastructure. It provides tools to authenticate to Teleport clusters, manage SSH sessions, discover and access Kubernetes clusters, and (coming soon) access web applications through Teleport. The server supports multiple transports (stdio by default, plus web-friendly options like SSE and streamable HTTP) and offers dry-run and debug modes to help you test operations safely. Typical interactions involve listing available SSH nodes, logging into Teleport clusters, retrieving kubeconfig for clusters, and running commands on remote nodes via SSH. Integration with Claude Desktop or other MCP clients is demonstrated in the example configuration, showing how to point a client at the mcp-teleport server and issue commands like login, list, and SSH actions.

Prerequisites:

• Go 1.24+ (for building from source)
• Teleport CLI (tsh) installed and configured
• Access to an active Teleport cluster

Install Teleport CLI (examples):

macOS: brew install teleport

Linux (Ubuntu/Debian): curl -O https://get.gravitational.com/teleport-v15.1.0-linux-amd64-bin.tar.gz tar -xzf teleport-v15.1.0-linux-amd64-bin.tar.gz sudo mv teleport/tsh /usr/local/bin/

Verify installation: tsh version

Install the MCP Teleport server from source:

Clone the repository

git clone https://github.com/giantswarm/mcp-teleport.git cd mcp-teleport

Build

go build -o mcp-teleport

Optional: Install to PATH

sudo mv mcp-teleport /usr/local/bin/

Alternatively, install via Go

go install github.com/giantswarm/mcp-teleport@latest

Tips and considerations:

• Ensure tsh is configured to access your Teleport clusters before starting the MCP server.
• The server supports multiple transports; use --transport to choose between stdio, SSE, or streamable-http modes.
• Use --debug for verbose logging and --dry-run to simulate operations without affecting real state.
• For Claude Desktop integration, provide the mcpServers configuration with the command and arguments to start the server (see examples in the README).
• If you plan to run the server as a background service, consider using the Go build output or a pre-built binary and ensure the Teleport environment (tsh config, environment variables) is accessible to the process.
• The Application Access tools are listed as coming soon; keep an eye on releases for implementation and endpoints.