Start the Datum MCP server
Synopsis
Start a local MCP server exposing tools to:
• list & inspect CRDs
• validate manifests via server-side dry run
• generic CRUD (create/get/update/delete) for any served CRD
• switch context at runtime via datum/change_context
MCP clients (e.g., Claude) connect over STDIO.
Use —port to also expose a local HTTP debug API on 127.0.0.1:<port>.
Select a Datum context with exactly one of —organization or —project.
Options
| Flag | Type | Description |
|---|
-h, --help | — | Help for mcp. |
--namespace | string | Default namespace for CRUD/validation (if YAML or tool args omit it). |
--organization | string | Organization ID to target (mutually exclusive with --project). |
--port | int | Run HTTP debug API on 127.0.0.1:<port> (MCP still uses STDIO). |
--project | string | Project ID to target (mutually exclusive with --organization). |
Options inherited from parent commands
| Flag | Type | Description |
|---|
--as | string | Username to impersonate for the operation. User could be a regular user or a service account in a namespace. |
--as-group | stringArray | Group to impersonate for the operation. Can be repeated to specify multiple groups. |
--as-uid | string | UID to impersonate for the operation. |
--as-user-extra | stringArray | User extras to impersonate for the operation. Can be repeated to specify multiple values for the same key. |
--certificate-authority | string | Path to a cert file for the certificate authority. |
--disable-compression | — | If true, opt-out of response compression for all requests to the server. |
--insecure-skip-tls-verify | — | If true, the server’s certificate will not be checked for validity. This will make your HTTPS connections insecure. |
--log-flush-frequency | duration | Maximum number of seconds between log flushes. (default 5s) |
--platform-wide | — | Access the platform root instead of a project or organization control plane. |
--request-timeout | string | The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don’t timeout requests. (default "0") |
-s, --server | string | The address and port of the Kubernetes API server. |
--tls-server-name | string | Server name to use for server certificate validation. If not provided, the hostname used to contact the server is used. |
--token | string | Bearer token for authentication to the API server. |
--user | string | The name of the kubeconfig user to use. |
-v, --v | Level | Number for the log level verbosity. |
--vmodule | moduleSpec | Comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format). |
See also
- datumctl - A CLI for interacting with the Datum platform
Auto generated by spf13/cobra on 24-Feb-2026
Last modified on March 25, 2026
