{"id":654547,"date":"2025-06-17T15:06:00","date_gmt":"2025-06-17T13:06:00","guid":{"rendered":"https:\/\/www.devoteam.com\/expert-view\/deploy-a-secure-mcp-server\/"},"modified":"2025-10-30T16:40:21","modified_gmt":"2025-10-30T15:40:21","slug":"deploy-a-secure-mcp-server","status":"publish","type":"expert-view","link":"https:\/\/devoteam.info\/lu\/expert-view\/deploy-a-secure-mcp-server\/","title":{"rendered":"Deploy a secure MCP Server to manage EKS clusters using natural language"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/devoteam.info\/lu\/expert-view\/ai-agents-for-project-managers\/\" target=\"_blank\" rel=\"noreferrer noopener\">AI agents<\/a> today open up fascinating prospects, especially when they are given access to external tools via APIs. This is where their full potential lies. Indeed, we can now move from simple text generation to the execution of concrete actions on systems such as Cloud infrastructures. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, there is still a gap between demonstrations of LLM agents and their production implementation in corporate information systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So I asked myself the following question:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>How can we deploy and administer Cloud infrastructures, such as Kubernetes clusters, in natural language, while guaranteeing security and industrialisation?<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is the question I wanted to answer by working on a demonstration: deploying an MCP server capable of administering an AWS EKS cluster in natural language, while respecting the security and architecture constraints of a company information system.<\/p>\n\n\n\n<div class=\"wp-block-yoast-seo-table-of-contents yoast-table-of-contents\"><h2>Table of contents<\/h2><ul><li><a href=\"#h-what-is-the-model-context-protocol-mcp\" data-level=\"2\">What Is The Model Context Protocol (MCP)?<\/a><\/li><li><a href=\"#h-why-a-secure-mcp-server\" data-level=\"2\">Why A Secure MCP Server?<\/a><\/li><li><a href=\"#h-secure-mcp-server-solution-architecture\" data-level=\"2\">Secure MCP Server &#8211; Solution Architecture<\/a><\/li><li><a href=\"#h-setting-up-oauth-2-0-authentication\" data-level=\"2\">Setting Up OAuth 2.0 Authentication<\/a><\/li><li><a href=\"#h-managing-permissions-to-administer-an-eks-cluster\" data-level=\"2\">Managing Permissions To Administer An EKS Cluster<\/a><\/li><li><a href=\"#h-secure-mcp-server-ready-let-s-play\" data-level=\"2\">Secure MCP Server Ready, Let\u2019s Play !<\/a><ul><li><a href=\"#h-example-1-deploying-a-video-game-sonic\" data-level=\"3\">Example 1: Deploying a video game &#8211; Sonic<\/a><\/li><li><a href=\"#h-example-2-cluster-status-analysis-and-recommendations\" data-level=\"3\">Example 2: Cluster status analysis and recommendations<\/a><\/li><\/ul><\/li><li><a href=\"#h-conclusion\" data-level=\"2\">Conclusion<\/a><\/li><li><a href=\"#h-let-us-guide-you-on-your-aws-ai-journey\" data-level=\"2\">Let us guide you on your AWS AI journey!<\/a><\/li><\/ul><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-what-is-the-model-context-protocol-mcp\">What Is The Model Context Protocol (MCP)?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The <a href=\"https:\/\/modelcontextprotocol.io\/\" target=\"_blank\" rel=\"noreferrer noopener\">Model Context Protocol (MCP)<\/a> is a protocol proposed by <a href=\"https:\/\/www.anthropic.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Anthropic<\/a>. It defines a standardised way for LLMs to interact with tools or environments.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In other words, this protocol bridges the conversational capabilities of LLMs and systems of action on systems such as APIs, databases, or here, Kubernetes clusters.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"960\" height=\"540\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-5.png\" alt=\"serveur MCP\" class=\"wp-image-641997\" style=\"width:800px\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-5.png 960w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-5-300x169.png 300w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-5-768x432.png 768w\" sizes=\"auto, (max-width: 960px) 100vw, 960px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Source: <\/em><a href=\"http:\/\/descope.com\" target=\"_blank\" rel=\"noreferrer noopener\"><em>descope.com<\/em><\/a><em> (<\/em><a href=\"https:\/\/www.descope.com\/learn\/post\/mcp\" target=\"_blank\" rel=\"noreferrer noopener\"><em>https:\/\/www.descope.com\/learn\/post\/mcp<\/em><\/a><em>)<\/em><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-why-a-secure-mcp-server\">Why A Secure MCP Server?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In this project, I wanted to explore how an MCP server could be deployed remotely, securely and in an enterprise environment. So I set out to deploy a secure MCP server capable of administering an EKS (Elastic Kubernetes Service) cluster on demand, via an MCP client (Claude Desktop).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A few weeks ago, I discovered that AWS had released a new MCP server: <a href=\"https:\/\/aws.amazon.com\/fr\/blogs\/containers\/accelerating-application-development-with-the-amazon-eks-model-context-protocol-server\/\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon EKS MCP Server<\/a>. This server offers an MCP interface with tools for direct administration of EKS (Elastic Kubernetes Service) clusters via an LLM.<br>However, in its original version, this server was designed for local use, in <a href=\"https:\/\/modelcontextprotocol.io\/docs\/concepts\/transports#standard-input%2Foutput-stdio\"><em>stdio<\/em><\/a> mode, and does not integrate any authentication mechanism.&nbsp; As a result, it is difficult to use in enterprise cloud environments, where security and traceability are essential.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So I set about modifying the server&#8217;s source code to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Enable remote execution by activating the HTTP Server-Side Events (<em>sse<\/em>) communication mode<\/li>\n\n\n\n<li>Define health checks so that it can be exposed via an ALB<\/li>\n\n\n\n<li>Add an authentication layer based on OAuth 2.0, to restrict and secure access to the server.<\/li>\n\n\n\n<li>Add additional functions, notably to manage DNS records on Route53<\/li>\n\n\n\n<li>Maintain compatibility with standard MCP clients, such as Claude Desktop.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The ultimate goal is simple: to manage EKS clusters in natural language, securely.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In concrete terms, this means being able to send an instruction such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><em>\u201cDeploy a new service X on my high-availability cluster and expose it\u201d<\/em><\/li>\n\n\n\n<li><em>&#8220;What&#8217;s the status of my cluster? What optimisations could be made?\u201c<\/em><\/li>\n\n\n\n<li><em>\u201dWhy isn&#8217;t my deployment Y working?&#8221;<\/em><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">&#8230;from a client like Claude Desktop, and see these actions executed on an AWS infrastructure, without writing a single line of <em>yaml<\/em> or touching <em>kubectl<\/em>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-secure-mcp-server-solution-architecture\">Secure MCP Server &#8211; Solution Architecture<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">While chatting with my colleague <strong>Pierre-Ange<\/strong>, I learned that AWS <strong>has published a best practice guide<\/strong> for deploying secure MCP servers on their infrastructure<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This guide can be accessed on the following GitHub repo: <a href=\"https:\/\/github.com\/aws-solutions-library-samples\/guidance-for-deploying-model-context-protocol-servers-on-aws\">aws-solutions-library-samples\/guidance-for-deploying-model-context-protocol-servers-on-aws<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Rather than reinventing the wheel, I took i<strong>nspiration from the architecture proposed by AWS<\/strong>, adapting it to my own needs for the deployment of my <strong>modified EKS MCP Server.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Use of ECS Fargate <\/strong>to easily deploy MCP servers and provide horizontal scalability, enabling multiple MCP clients to connect to the service.<\/li>\n\n\n\n<li><strong>OAuth 2.0 authentication<\/strong> via Cognito and an authentication server (MAS) to offload and mutualise MCP server authentication mechanisms. And a DynamoDB table to store tokens.<\/li>\n\n\n\n<li><strong>Cloudfront distribution with a WAF (Web Application Firewall) in front of an ALB<\/strong> to securely expose MCP servers and make them reachable from MCP clients.<\/li>\n\n\n\n<li><strong>Least privilege IAM permissions in <\/strong>to restrict what the server can do on the AWS account.<\/li>\n\n\n\n<li><strong>An EKS Auto Mode cluster,<\/strong> for direct access to network, storage and node management controllers. To find out more, I wrote an article a few months ago on <a href=\"https:\/\/devoteam.info\/lu\/expert-view\/eks-auto-mode-what-you-need-to-know-before-making-the-move\/\" target=\"_blank\" rel=\"noreferrer noopener\">this new EKS cluster management mode<\/a>.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Architecture diagram of the implemented solution, <a href=\"https:\/\/github.com\/aws-solutions-library-samples\/guidance-for-deploying-model-context-protocol-servers-on-aws\/tree\/main\" target=\"_blank\" rel=\"noreferrer noopener\">inspired by the one proposed by AWS<\/a><\/em><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"398\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-6-1024x398.jpg\" alt=\"\" class=\"wp-image-642014\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-6-1024x398.jpg 1024w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-6-300x117.jpg 300w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-6-768x298.jpg 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-6-1536x597.jpg 1536w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-6.jpg 1854w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-setting-up-oauth-2-0-authentication\">Setting Up OAuth 2.0 Authentication<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Once the architecture described above had been implemented with Terraform, I had to iterate several times on the configuration of the modified MCP server, in particular on the <strong>management of OAuth 2.0 authentication.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">First of all, to enable the Claude Desktop MCP client to connect to my remote MCP server, <strong>an MCP server configuration must be defined in its configuration file<\/strong> (<em>claude_desktop_config.json<\/em> for Claude Desktop). In particular, to specify the MCP server&#8217;s address and the fact that it can be accessed remotely (<em>mcp-remote)<\/em>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here&#8217;s what my configuration file looks like:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n  \"mcpServers\": {\n    \"eks\": {\n      \"command\": \"npx\",\n      \"args\": &#91;\n        \"-y\",\n        \"mcp-remote\", \n        \"https:\/\/eks-mcp-server.exemple.com\/sse\"\n      ]\n    }\n  }\n}\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">When the Claude Desktop MCP client is launched, <strong>the MCP server returns an HTTP 401 code<\/strong>. This indicates that authentication is required for access.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The default web browser automatically opens.<\/li>\n\n\n\n<li>The user is <strong>redirected to the OAuth authorisation URL<\/strong> defined on the server.<\/li>\n\n\n\n<li>And redirects to <strong>a login page managed by AWS Cognito.<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This follows the MCP protocol specifications defined on <a href=\"https:\/\/modelcontextprotocol.io\/specification\/2025-03-26\/basic\/authorization\" target=\"_blank\" rel=\"noreferrer noopener\">this page<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For this demonstration, I used <strong>AWS Cognito as IdP (Identity Provider)<\/strong>, with <strong>a User Pool containing my user (mail\/password).<\/strong> However, it is perfectly possible (and even recommended) to <strong>connect to the company&#8217;s IdP<\/strong>, such as an Entra ID, for example&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Once authenticated, <strong>the token is automatically sent back to the MCP client.<\/strong> The client can then <strong>exchange data with the MCP server,<\/strong> and take advantage of the server&#8217;s functionalities&#8230;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For a more detailed understanding, here&#8217;s a diagram to illustrate the various stages in the authentication process:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"921\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-4-1024x921.jpg\" alt=\"\" class=\"wp-image-641979\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-4-1024x921.jpg 1024w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-4-300x270.jpg 300w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-4-768x690.jpg 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-4-1536x1381.jpg 1536w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-4.jpg 1920w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Concretely, on the user side:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>I open Claude Desktop, my browser opens and redirects me to a login page managed with AWS Cognito:<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"588\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP_EKS-1024x588.jpg\" alt=\"\" class=\"wp-image-644117\" style=\"width:800px\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP_EKS-1024x588.jpg 1024w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP_EKS-300x172.jpg 300w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP_EKS-768x441.jpg 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP_EKS-1536x882.jpg 1536w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP_EKS.jpg 1920w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol start=\"2\" class=\"wp-block-list\">\n<li>I log in with my login mail address and password:<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"289\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-14-1024x289.png\" alt=\"\" class=\"wp-image-642133\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-14-1024x289.png 1024w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-14-300x85.png 300w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-14-768x217.png 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-14-1536x433.png 1536w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-14.png 1999w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol start=\"3\" class=\"wp-block-list\">\n<li>I return to Claude Desktop and confirm that the connection to my MCP EKS server is functional:<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"554\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-1-1024x554.png\" alt=\"serveur MCP\" class=\"wp-image-642201\" style=\"width:800px\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-1-1024x554.png 1024w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-1-300x162.png 300w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-1-768x416.png 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-1-1536x831.png 1536w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-1.png 1999w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"609\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-2-1024x609.png\" alt=\"serveur MCP\" class=\"wp-image-641945\" style=\"width:800px\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-2-1024x609.png 1024w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-2-300x178.png 300w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-2-768x457.png 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-2-1536x914.png 1536w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-2.png 1920w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-managing-permissions-to-administer-an-eks-cluster\">Managing Permissions To Administer An EKS Cluster<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Now that Claude Desktop is securely connected to my MCP server, there&#8217;s one more important step: Give the MCP server the necessary permissions to administer the EKS cluster.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The MCP server is deployed on a Fargate task (ECS). To enable it to interact with the AWS API, this task is assigned an IAM role with all the permissions required to administer an EKS cluster.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At the same time, I configured an EKS Access Entry that gives the IAM role of my ECS task administrator rights on the Kubernetes cluster. Of course, it&#8217;s important to set the permissions of this role to least privilege, but for the purposes of this demonstration, I&#8217;ve enabled EKS administrator rights for simplicity&#8217;s sake.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"305\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Capture-decran-2025-06-15-a-17.12.03-1024x305.png\" alt=\"Secure MCP Server\" class=\"wp-image-642302\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Capture-decran-2025-06-15-a-17.12.03-1024x305.png 1024w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Capture-decran-2025-06-15-a-17.12.03-300x89.png 300w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Capture-decran-2025-06-15-a-17.12.03-768x229.png 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Capture-decran-2025-06-15-a-17.12.03-1536x458.png 1536w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Capture-decran-2025-06-15-a-17.12.03-2048x610.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-secure-mcp-server-ready-let-s-play\">Secure MCP Server Ready, Let\u2019s Play !<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><br>Once these prerequisites are in place, my secure MCP server is authorised to interact with the EKS cluster. Upstream, I can configure the context to facilitate my LLM&#8217;s decision-making. I can now formulate natural language instructions with Claude.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\" id=\"h-example-1-deploying-a-video-game-sonic\">Example 1: Deploying a video game &#8211; Sonic<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u201c<em>Deploy Sonic game based on this docker image: dazdaz\/sonic. Container is listening on port 8080<\/em>\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This action is translated by the LLM into a sequence of Kubernetes API calls, executed by the MCP EKS server:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"513\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-11-1024x513.png\" alt=\"serveur MCP\" class=\"wp-image-642082\" style=\"width:800px\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-11-1024x513.png 1024w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-11-300x150.png 300w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-11-768x385.png 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-11-1536x769.png 1536w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-11.png 1999w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">And after a few minutes:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"894\" height=\"1024\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-10-894x1024.jpg\" alt=\"Secure MCP Server\" class=\"wp-image-642065\" style=\"width:800px\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-10-894x1024.jpg 894w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-10-262x300.jpg 262w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-10-768x879.jpg 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-10-1341x1536.jpg 1341w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-10.jpg 1420w\" sizes=\"auto, (max-width: 894px) 100vw, 894px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"618\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-17-1024x618.png\" alt=\"Secure MCP Server\" class=\"wp-image-642184\" style=\"width:800px\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-17-1024x618.png 1024w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-17-300x181.png 300w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-17-768x464.png 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-17-1536x927.png 1536w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-17.png 1920w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\" id=\"h-example-2-cluster-status-analysis-and-recommendations\">Example 2: Cluster status analysis and recommendations<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Another example:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>&#8220;What&#8217;s the status of my cluster? What optimisations could be made?&#8221;<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I&#8217;ll leave you to admire the result. I confess, it blew me away with its veracity and speed of analysis the first time.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"1014\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-3-1024x1014.png\" alt=\"Secure MCP Server\" class=\"wp-image-641962\" style=\"width:800px\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-3-1024x1014.png 1024w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-3-300x297.png 300w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-3-150x150.png 150w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-3-768x761.png 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-3.png 1456w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"917\" height=\"1024\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-9-917x1024.jpg\" alt=\"Secure MCP Server\" class=\"wp-image-642048\" style=\"width:800px\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-9-917x1024.jpg 917w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-9-269x300.jpg 269w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-9-768x857.jpg 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-9-1376x1536.jpg 1376w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-9.jpg 1442w\" sizes=\"auto, (max-width: 917px) 100vw, 917px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"840\" height=\"1024\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-16-840x1024.jpg\" alt=\"Secure MCP Server\" class=\"wp-image-642167\" style=\"width:800px\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-16-840x1024.jpg 840w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-16-246x300.jpg 246w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-16-768x936.jpg 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-16-1260x1536.jpg 1260w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-16.jpg 1426w\" sizes=\"auto, (max-width: 840px) 100vw, 840px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"760\" height=\"1024\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-13-760x1024.jpg\" alt=\"Secure MCP Server\" class=\"wp-image-642116\" style=\"width:800px\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-13-760x1024.jpg 760w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-13-223x300.jpg 223w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-13-768x1035.jpg 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-13-1140x1536.jpg 1140w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-13.jpg 1314w\" sizes=\"auto, (max-width: 760px) 100vw, 760px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"923\" height=\"1024\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-8-923x1024.jpg\" alt=\"Secure MCP Server\" class=\"wp-image-642031\" style=\"width:800px\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-8-923x1024.jpg 923w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-8-270x300.jpg 270w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-8-768x852.jpg 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-8-1385x1536.jpg 1385w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-8.jpg 1426w\" sizes=\"auto, (max-width: 923px) 100vw, 923px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"917\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-15-1024x917.png\" alt=\"Secure MCP Server\" class=\"wp-image-642150\" style=\"width:800px\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-15-1024x917.png 1024w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-15-300x269.png 300w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-15-768x688.png 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2025\/06\/Devoteam_Expert-view_MCP-serveur-EKS-15.png 1376w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Please note that I&#8217;m only using a foundation model (Claude 4 Sonnet). Which means that the result could be even better if we used a custom model, a fine-tuned model, or RAG to have an EKS expert model and better knowledge of its environment.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-conclusion\">Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To conclude this article, we have shown that it is possible today to industrialise agentic solutions based on MCP servers to manage Cloud infrastructures, in this case on AWS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Using the example of an EKS MCP server and integrating it into a secure and resilient AWS architecture, we have shown that it is not only feasible to manage Kubernetes clusters in a conversational way, but also to do so while respecting the security, operability and scalability standards required by enterprises.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The automation and simplified interaction offered by this type of solution via natural language and AI agents pave the way for a new era of infrastructure management, where complexity is abstracted and performance is enhanced.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To go a step further and get closer to business practices, areas for improvement would include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Deploying specialised MCP servers to interact with tools like <strong>Terraform (IaC), ArgoCD (GitOps) or an SCM like GitHub or GitLab. <\/strong>To keep track of the various codes and configurations generated and applied by AI agents.<br><\/li>\n\n\n\n<li><strong>Trace, audit and version <\/strong>operations carried out by AI agents to guarantee ongoing compliance.<br><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Enhance agent performance via specialised models<\/strong>, using approaches such as <strong>fine-tuning<\/strong>, integration of <strong>customised proprietary models<\/strong>, or <strong>Retrieval-Augmented Generation (RAG) <\/strong>to provide an LLM, capable of making precise decisions based on the actual state of the global infrastructure and its history.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Before deployment, ensure you have a solid grasp of the foundational technology by reading our expert explanation of the <strong><a href=\"https:\/\/devoteam.info\/lu\/expert-view\/model-context-protocol-mcp-explained\/\" target=\"_blank\" rel=\"noreferrer noopener\">Model Context Protocol (MCP) itself<\/a><\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<div class=\"wp-block-cover alignfull is-style-blur-image is-style-blur-image-less\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\"><span aria-hidden=\"true\" class=\"wp-block-cover__background has-black-background-color has-background-dim-70 has-background-dim\"><\/span><img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"1190\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited.jpg\" class=\"wp-block-cover__image-background wp-post-image\" alt=\"\" data-object-fit=\"cover\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited.jpg 1920w, https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited-300x186.jpg 300w, https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited-1024x635.jpg 1024w, https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited-768x476.jpg 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited-1536x952.jpg 1536w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\" \/><div class=\"wp-block-cover__inner-container is-layout-flow wp-block-cover-is-layout-flow\">\n<div class=\"wp-block-group alignfull has-base-color has-text-color has-global-padding is-layout-constrained wp-container-core-group-is-layout-46b67d08 wp-block-group-is-layout-constrained\" style=\"margin-top:0px;margin-bottom:0px;padding-top:var(--wp--preset--spacing--xxx-large);padding-right:var(--wp--preset--spacing--medium);padding-bottom:var(--wp--preset--spacing--xxx-large);padding-left:var(--wp--preset--spacing--medium)\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-5f9de3d0 wp-block-group-is-layout-constrained\">\n<h2 class=\"wp-block-heading has-text-align-left has-secondary-font-family has-large-font-size\" id=\"h-let-us-guide-you-on-your-aws-ai-journey\">Let us guide you on your AWS AI journey!<\/h2>\n<\/div>\n\n\n\n<p class=\"has-text-align-left has-main-accent-color has-text-color wp-block-paragraph\">Discover how you can deploy and administer Cloud infrastructures in natural language, guaranteeing security and industrialisation!<\/p>\n\n\n\n<div class=\"wp-block-buttons is-content-justification-left is-layout-flex wp-container-core-buttons-is-layout-3c38c079 wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/devoteam.info\/lu\/amazon-web-services\/aws-generative-ai\/#contact\">Begin your AI Journey<\/a><\/div>\n\n\n\n<div class=\"wp-block-button is-style-outline-white-button\"><a class=\"wp-block-button__link has-base-color has-text-color has-background wp-element-button\" href=\"https:\/\/devoteam.info\/success-story\/?topic_name=aws\" style=\"background-color:#64648254\">AI References<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>AI agents today open up fascinating prospects, especially when they are given access to external tools via APIs. This is where their full potential lies. Indeed, we can now move from simple text generation to the execution of concrete actions on systems such as Cloud infrastructures. However, there is still a gap between demonstrations of [&hellip;]<\/p>\n","protected":false},"featured_media":148100,"template":"","categories":[905,1628],"tags":[],"industry":[],"class_list":["post-654547","expert-view","type-expert-view","status-publish","has-post-thumbnail","hentry","category-ai","category-aws"],"acf":[],"cards":"\n\t<div class=\"single-post-card\">\n\n\t\t<figure class=\"wp-block-post-featured-image\"><a href=\"https:\/\/devoteam.info\/lu\/expert-view\/deploy-a-secure-mcp-server\/\" target=\"_self\" ><img width=\"1920\" height=\"1190\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited.jpg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"Deploy a secure MCP Server to manage EKS clusters using natural language\" style=\"aspect-ratio:4\/3;width:100%;object-fit:cover;\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited.jpg 1920w, https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited-300x186.jpg 300w, https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited-1024x635.jpg 1024w, https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited-768x476.jpg 768w, https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited-1536x952.jpg 1536w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\" \/><\/a><\/figure>\n\n\t\t\n\t\t<div class=\"wp-block-group is-vertical is-layout-flex wp-container-core-group-is-layout-43282307 wp-block-group-is-layout-flex\">\n\t<p style=\"font-style:normal;font-weight:700\" class=\"has-link-color wp-elements-1 wp-block-lp-post-type has-text-color has-primary-color has-small-font-size\">Expert View<\/p>\n\n\t\t\n\t\t<h3 style=\"font-style:normal;font-weight:400\" class=\"wp-block-post-title has-base-font-size\"><a href=\"https:\/\/devoteam.info\/lu\/expert-view\/deploy-a-secure-mcp-server\/\" target=\"_self\" >Deploy a secure MCP Server to manage EKS clusters using natural language<\/a><\/h3><\/div>\n\t\t\n\t<\/div>\n\n","yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.4 (Yoast SEO v28.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Deploy a secure MCP Server to manage EKS clusters using natural language | Devoteam<\/title>\n<meta name=\"description\" content=\"Deploy a secure MCP server on AWS to administer your EKS clusters in natural language with OAuth 2.0 authentication.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/devoteam.info\/lu\/expert-view\/deploy-a-secure-mcp-server\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Deploy a secure MCP Server to manage EKS clusters using natural language\" \/>\n<meta property=\"og:description\" content=\"Deploy a secure MCP server on AWS to administer your EKS clusters in natural language with OAuth 2.0 authentication.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/devoteam.info\/lu\/expert-view\/deploy-a-secure-mcp-server\/\" \/>\n<meta property=\"og:site_name\" content=\"Devoteam\" \/>\n<meta property=\"article:modified_time\" content=\"2025-10-30T15:40:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1190\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/devoteam.info\\\/lu\\\/expert-view\\\/deploy-a-secure-mcp-server\\\/\",\"url\":\"https:\\\/\\\/devoteam.info\\\/lu\\\/expert-view\\\/deploy-a-secure-mcp-server\\\/\",\"name\":\"Deploy a secure MCP Server to manage EKS clusters using natural language | Devoteam\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/devoteam.info\\\/lu\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/devoteam.info\\\/lu\\\/expert-view\\\/deploy-a-secure-mcp-server\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/devoteam.info\\\/lu\\\/expert-view\\\/deploy-a-secure-mcp-server\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/devoteam.info\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/GettyImages-886684958_edited.jpg\",\"datePublished\":\"2025-06-17T13:06:00+00:00\",\"dateModified\":\"2025-10-30T15:40:21+00:00\",\"description\":\"Deploy a secure MCP server on AWS to administer your EKS clusters in natural language with OAuth 2.0 authentication.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/devoteam.info\\\/lu\\\/expert-view\\\/deploy-a-secure-mcp-server\\\/#breadcrumb\"},\"inLanguage\":\"en-LU\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/devoteam.info\\\/lu\\\/expert-view\\\/deploy-a-secure-mcp-server\\\/\"]}],\"accessibilityFeature\":[\"tableOfContents\"]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-LU\",\"@id\":\"https:\\\/\\\/devoteam.info\\\/lu\\\/expert-view\\\/deploy-a-secure-mcp-server\\\/#primaryimage\",\"url\":\"https:\\\/\\\/devoteam.info\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/GettyImages-886684958_edited.jpg\",\"contentUrl\":\"https:\\\/\\\/devoteam.info\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/GettyImages-886684958_edited.jpg\",\"width\":1920,\"height\":1190},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/devoteam.info\\\/lu\\\/expert-view\\\/deploy-a-secure-mcp-server\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/devoteam.info\\\/lu\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Expert View\",\"item\":\"https:\\\/\\\/devoteam.info\\\/lu\\\/expert-view\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Deploy a secure MCP Server to manage EKS clusters using natural language\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/devoteam.info\\\/lu\\\/#website\",\"url\":\"https:\\\/\\\/devoteam.info\\\/lu\\\/\",\"name\":\"Devoteam\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/devoteam.info\\\/lu\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-LU\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Deploy a secure MCP Server to manage EKS clusters using natural language | Devoteam","description":"Deploy a secure MCP server on AWS to administer your EKS clusters in natural language with OAuth 2.0 authentication.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/devoteam.info\/lu\/expert-view\/deploy-a-secure-mcp-server\/","og_locale":"en_US","og_type":"article","og_title":"Deploy a secure MCP Server to manage EKS clusters using natural language","og_description":"Deploy a secure MCP server on AWS to administer your EKS clusters in natural language with OAuth 2.0 authentication.","og_url":"https:\/\/devoteam.info\/lu\/expert-view\/deploy-a-secure-mcp-server\/","og_site_name":"Devoteam","article_modified_time":"2025-10-30T15:40:21+00:00","og_image":[{"width":1920,"height":1190,"url":"https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/devoteam.info\/lu\/expert-view\/deploy-a-secure-mcp-server\/","url":"https:\/\/devoteam.info\/lu\/expert-view\/deploy-a-secure-mcp-server\/","name":"Deploy a secure MCP Server to manage EKS clusters using natural language | Devoteam","isPartOf":{"@id":"https:\/\/devoteam.info\/lu\/#website"},"primaryImageOfPage":{"@id":"https:\/\/devoteam.info\/lu\/expert-view\/deploy-a-secure-mcp-server\/#primaryimage"},"image":{"@id":"https:\/\/devoteam.info\/lu\/expert-view\/deploy-a-secure-mcp-server\/#primaryimage"},"thumbnailUrl":"https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited.jpg","datePublished":"2025-06-17T13:06:00+00:00","dateModified":"2025-10-30T15:40:21+00:00","description":"Deploy a secure MCP server on AWS to administer your EKS clusters in natural language with OAuth 2.0 authentication.","breadcrumb":{"@id":"https:\/\/devoteam.info\/lu\/expert-view\/deploy-a-secure-mcp-server\/#breadcrumb"},"inLanguage":"en-LU","potentialAction":[{"@type":"ReadAction","target":["https:\/\/devoteam.info\/lu\/expert-view\/deploy-a-secure-mcp-server\/"]}],"accessibilityFeature":["tableOfContents"]},{"@type":"ImageObject","inLanguage":"en-LU","@id":"https:\/\/devoteam.info\/lu\/expert-view\/deploy-a-secure-mcp-server\/#primaryimage","url":"https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited.jpg","contentUrl":"https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited.jpg","width":1920,"height":1190},{"@type":"BreadcrumbList","@id":"https:\/\/devoteam.info\/lu\/expert-view\/deploy-a-secure-mcp-server\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/devoteam.info\/lu\/"},{"@type":"ListItem","position":2,"name":"Expert View","item":"https:\/\/devoteam.info\/lu\/expert-view\/"},{"@type":"ListItem","position":3,"name":"Deploy a secure MCP Server to manage EKS clusters using natural language"}]},{"@type":"WebSite","@id":"https:\/\/devoteam.info\/lu\/#website","url":"https:\/\/devoteam.info\/lu\/","name":"Devoteam","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/devoteam.info\/lu\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-LU"}]}},"uagb_featured_image_src":{"full":["https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited.jpg",1920,1190,false],"thumbnail":["https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited-150x150.jpg",150,150,true],"medium":["https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited-300x186.jpg",300,186,true],"medium_large":["https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited-768x476.jpg",768,476,true],"large":["https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited-1024x635.jpg",1024,635,true],"1536x1536":["https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited-1536x952.jpg",1536,952,true],"2048x2048":["https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/GettyImages-886684958_edited.jpg",1920,1190,false]},"uagb_author_info":{"display_name":"Audrey Yau","author_link":"https:\/\/devoteam.info\/lu\/author\/"},"uagb_comment_info":0,"uagb_excerpt":"AI agents today open up fascinating prospects, especially when they are given access to external tools via APIs. This is where their full potential lies. Indeed, we can now move from simple text generation to the execution of concrete actions on systems such as Cloud infrastructures. However, there is still a gap between demonstrations of&hellip;","_links":{"self":[{"href":"https:\/\/devoteam.info\/lu\/wp-json\/wp\/v2\/expert-view\/654547","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devoteam.info\/lu\/wp-json\/wp\/v2\/expert-view"}],"about":[{"href":"https:\/\/devoteam.info\/lu\/wp-json\/wp\/v2\/types\/expert-view"}],"version-history":[{"count":0,"href":"https:\/\/devoteam.info\/lu\/wp-json\/wp\/v2\/expert-view\/654547\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devoteam.info\/lu\/wp-json\/wp\/v2\/media\/148100"}],"wp:attachment":[{"href":"https:\/\/devoteam.info\/lu\/wp-json\/wp\/v2\/media?parent=654547"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devoteam.info\/lu\/wp-json\/wp\/v2\/categories?post=654547"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devoteam.info\/lu\/wp-json\/wp\/v2\/tags?post=654547"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/devoteam.info\/lu\/wp-json\/wp\/v2\/industry?post=654547"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}