Skip to content
Agentmart
Submit a tool

Red Hat Lightspeed MCP

Model Context Protocol server for Red Hat Lightspeed - advisor, image builder, inventory, and more

Connector by RedHatInsights · GitHub account verified by the MCP Registry

IndexedApache-2.0Local (stdio)★ 25
Write a review

Chalk Labs

Need help deploying Red Hat Lightspeed MCP?

Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.

Book a call

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/redhatinsights-insights-mcp

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Model Context Protocol server for Red Hat Lightspeed - advisor, image builder, inventory, and more

Use cases: security-scanning, cloud-management

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools
27 read · 1 write · 0 delete · 1 not yet classified
Secrets
2 (API keys, tokens or passwords)
Install scripts
None found
Runs as
Docker image

Tools by what they do 29

Read from the source code; the running server may list different tools.

Read 27 · Look things up without changing anything.

  • explain_access_denied
  • explain_cves
  • find_host_by_name
  • get_activation_key
  • get_activation_keys
  • get_caller_access
  • get_caller_access_all
  • get_cve
  • get_cve_systems
  • get_cves
  • get_host_details
  • get_host_system_profile
Show 15 more tools
  • get_host_tags
  • get_info
  • get_openapi
  • get_system_cves
  • get_systems
  • get_with_auth
  • get_without_auth
  • get_workspace
  • list_clusters
  • list_hosts
  • list_workspace_hosts
  • list_workspaces
  • load_cve_dashboard
  • load_inventory_dashboard
  • lookup_tool_requirements

Write 1 · Create, change, send or run things.

  • create_vuln_playbook

Not yet classified 1 · We could not tell from the name and description.

  • example_tool

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

  • LIGHTSPEED_CLIENT_ID
  • LIGHTSPEED_CLIENT_SECRET

Network hosts it talks to 9

  • access.redhat.com · found in code
  • api.github.com · found in code
  • catalog.redhat.com · found in code
  • console.redhat.com · found in code
  • github.com · found in code
  • raw.githubusercontent.com · found in code
  • redhat.atlassian.net · found in code
  • sso.redhat.com · found in code
  • unpkg.com · found in code

Tools (29)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • create_vuln_playbook

    Create remediation playbook for given CVEs on given systems to mitigate vulnerabilities. Don't process the playbook. You MUST return the YAML as is. Args: playbook_name: Name of the playbook. Example: "Remediation Playbook" cves: CVE identifiers. Example: ["CVE-2016-0800", "CVE-2016-0801"] uuids: Systems Inventory UUIDs. Example: [123e4567-e89b-12d3-a456-426614174000]

  • example_tool

    Example tool.

  • explain_access_deniedread-only

    Diagnose a 403 access denial for a specific MCP tool call. Returns only the console role names the caller is missing. Use this instead of guessing permission or role names. The authenticated principal is usually the MCP service account when using client ID/secret in the environment—not the console user in chat.

  • explain_cvesread-only

    Explain why CVEs are affecting my environment. This endpoint returns a detailed explanation of why CVEs are affecting my environment. It uses VMAAS to explain the CVEs, what packages are affected and why. Alongside with the information how this CVE can be fixed. To get the explanation, we need to get the system UUID from the inventory and list of CVEs. 'affected_packages' in 'vmaas' response is a list of packages that are affected by the CVE. To update affected packages, suggest to use Ansible Remediation Playbook via Remediations MCP tool. Args: cves: CVE identifiers. Example: CVE-2016…

  • find_host_by_nameread-only

    Find a host by its hostname/display name. Args: hostname: The hostname or display name to search for.

  • get_activation_keyread-only

    Get a specific activation key by name. 🟢 CALL IMMEDIATELY - No information gathering required. This endpoint returns details for a specific activation key including its name, description, service level, role, usage, release version, and additional repositories. Returns: Activation key details including configuration and subscription information.

  • get_activation_keysread-only

    Get the list of activation keys available to the authenticated user. 🟢 CALL IMMEDIATELY - No information gathering required. This endpoint returns activation keys that can be used for RHEL system registration. Activation keys contain subscription and configuration information needed to register systems with Red Hat Subscription Management. If the user has more questions about the activation keys, ask the user to go to https://console.redhat.com/insights/connector/activation-keys Returns: List of activation keys with their details including names, descriptions, and associated subsc…

  • get_caller_accessread-only

    Get RBAC access for the authenticated caller for one application. Returns permissions for the identity used by this MCP server (service account or Bearer token)—not necessarily the human user.

  • get_caller_access_allread-only

    List all RBAC permissions for the authenticated MCP caller (paginated fetch). Permissions apply to the service account or Bearer identity used by MCP—not your console user unless that identity is what MCP uses.

  • get_cveread-only

    Get details about specific CVE. This endpoint returns the CVE identification number, description, scores and other metadata. The metadata includes the description, CVSS 2/3 Score, CVSS 2/3 attack vector, severity, public date, modified date, business risk, status, a URL to Red Hat web pages, a list of advisories remediating the CVE, and information regarding known exploits for the CVE. For more info refer to OpenAPI spec Args: cve: CVE identifier. Example : CVE-2016-0800 advisory_available: String of booleans (array of booleans), where true shows CVE-system pairs …

  • get_cve_systemsread-only

    Get list of systems affected by a given CVE. This is a report of affected systems for a given CVE. Use this tool to obtain list of all affected systems for a given CVE. For more info refer to OpenAPI spec Args: cve: CVE identifier. Example : CVE-2016-0800 (Required) filter_: Full text filter for the display name of system. limit: Pagination - Maximum number of records per page. offset: Pagination - Offset of first record of paginated response. sort: Attribute sorting. Use `-` prefix to sort in descending order. system_uuid: Filter based on Systems Inventory UUID.

  • get_cvesread-only

    Get list of CVEs affecting the account. This provides an overview of vulnerabilities across your entire system inventory. Use this endpoint to get an overview of which CVEs are affecting your account, including some CVE metadata, how many systems are affected by each CVE, and more. For more info refer to OpenAPI spec Args: filter: Full text filter/search for CVE and it's description text. limit: Pagination - Maximum number of records per page. offset: Pagination - Offset of first record of paginated response. sort: Attribute sorting. Use `-` prefix to sort in descending order…

  • get_host_detailsread-only

    Get detailed information for specific hosts by their IDs. Returns comprehensive host data including identifiers (insights_id, satellite_id, bios_uuid), display names, network info (IP/MAC addresses), cloud provider details, account/org metadata, timestamps (created, updated, stale_timestamp), reporter info, groups, facts, and basic system_profile data. Args: host_ids: Comma-separated list of host IDs (UUIDs) to retrieve.

  • get_host_system_profileread-only

    Get detailed system profile information for specific hosts. Returns comprehensive hardware and software configuration data including CPU details (model, count, cores per socket), memory info (system_memory_bytes), infrastructure details (type, vendor), network interfaces, disk devices, BIOS information, and various system state data. For RHEL hosts, also includes software information such as enabled repositories, installed packages, and enabled services. This provides the most detailed technical specifications for each host.

  • get_host_tagsread-only

    Get tags for specific hosts. Args: host_ids: Comma-separated list of host IDs (UUIDs) to get tags for.

Show 14 more tools
  • get_inforead-only

    Get OCP Advisor backend health, deployed OCP rules version, and release metadata. 🟢 CALL IMMEDIATELY - No information gathering required. Returns internal Smart Proxy, Insights Results Aggregator, and Content Service status/build/version metadata from the unauthenticated /info endpoint. This is primarily useful for service diagnostics, release verification, and backend health checks; it does not return Advisor recommendations or cluster findings.

  • get_openapiread-only

    Get $container_brand_long Vulnerability OpenAPI specification in JSON format.

  • get_system_cvesread-only

    Get list of CVEs affecting a given system. IMPORTANT: Prefer `get_cves` as `get_cves` can filter for CVEs with available advisories. This is a report of CVEs affecting a given system. Use this tool to obtain list of all CVEs affecting a given system. For more info refer to OpenAPI spec Args: system_uuid: Systems Inventory UUID. Example : 123e4567-e89b-12d3-a456-426614174000 (Required) filter_: Full text filter for the CVE name. limit: Pagination - Maximum number of records per page. offset: Pagination - Offset of first record of paginated response. sort: Attribute sortin…

  • get_systemsread-only

    Get list of systems in $container_brand_long Vulnerability inventory. List all systems registered in $container_brand_long Vulnerability service, including information about their last check-in, system name, workspace name, RHEL version, and number of CVEs affecting them. This tool shows both affected and not affected systems. For more info refer to OpenAPI spec Args: filter_: Full text filter for the display name of system. limit: Pagination - Maximum number of records per page. offset: Pagination - Offset of first record of paginated response. sort: Attribute sorting. Use `…

  • get_with_auth

    Send GET request to Insights API with authentication.

  • get_without_auth

    Send GET request to Insights API without authentication.

  • get_workspaceread-only

    Get details for one or more workspaces by ID. Returns id, name, ungrouped, host_count, and timestamps for each workspace. Required permission: inventory:groups:read (Workspace viewer).

  • list_clustersread-only

    List clusters available to the authenticated user. 🟢 CALL IMMEDIATELY - No information gathering required. Uses the Insights Results Aggregator v2 ``/clusters`` endpoint, which returns clusters visible to the authenticated account along with recommendation hit counts and risk summaries.

  • list_hostsread-only

    List hosts with filtering and sorting options. CRITICAL: For the 'per_page' parameter, you MUST use a value of 10 on the first call to avoid performance degradation and context overflow. Only use a larger value if the user explicitly requests to see more systems at once.

  • list_workspace_hostsread-only

    List hosts that belong to a workspace. Use list_workspaces first to obtain the workspace ID. Required permission: inventory:hosts:read (Inventory Hosts viewer).

  • list_workspacesread-only

    List Inventory workspaces (console UI name for Inventory groups). Call this tool whenever the user asks to list, show, or get workspaces. Do not invent workspace names such as Ungrouped Hosts without calling this API. Each result includes id, name, ungrouped, and host_count. Prefer workspace IDs in later calls; names can be duplicated. Required permission: inventory:groups:read (Workspace viewer).

  • load_cve_dashboardread-only

    Show, list, or display CVEs — account-level or for a specific system — in an interactive dashboard. PREFER this tool over get_cves and get_system_cves whenever the user wants to see, show, list, or display CVEs, whether for the entire account or for a specific system. Use get_cves or get_system_cves only when you need the raw data for analysis or processing. The dashboard fetches data directly from the server. If system_uuid is provided, it fetches system-level CVEs. Otherwise, it fetches account-level CVEs. All filter parameters are optional. Args: system_uuid: System UUID for system-le…

  • load_inventory_dashboardread-only

    Show, list, or display fleet inventory in an interactive dashboard. PREFER this tool over list_hosts whenever the user wants to see, show, list, or display hosts or fleet inventory. Use list_hosts only when you need the raw data for analysis or processing. The dashboard fetches data directly from the server. All filter parameters are optional.

  • lookup_tool_requirementsread-only

    Return the console role names required for an MCP tool. This reports required roles without checking the authenticated caller's current access. Use ``explain_access_denied`` after a 403 response.

Signals

Stars
25
Forks
42
Open issues
3
Contributors
29
Last commit
Oct 22, 2026 (8 days ago)
Last release
Oct 22, 2026 (8 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name
io.github.RedHatInsights/insights-mcp
Version
1.0.92+6d558022
Auth
API key
Packages
oci ghcr.io/redhatinsights/red-hat-lightspeed-mcp
License
Apache-2.0
Repository
github.com/RedHatInsights/insights-mcp
First seen
Oct 24, 2026
Last checked
Oct 24, 2026
Source
Official MCP Registrygithub-graphql

Done for you

Rather not set it up yourself?

Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.

See how we build AI agents →Read the case studies

Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.

launches shipped
50+
launches shipped
media placements
500+
media placements
founders on every account
2
founders on every account

Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block

Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.

Get Red Hat Lightspeed MCP running in your business

Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.

Goes to the Chalk Labs founders, not the newsletter. Privacy

Need help deploying Red Hat Lightspeed MCP?

CallGet help
Cite this page

Red Hat Lightspeed MCP. Agent Mart. https://agentmart.dev/connectors/redhatinsights-insights-mcp (last updated 2026-10-24)