# Mcp Nats

> A Model Context Protocol (MCP) server for NATS messaging system integration

- **Type:** MCP server
- **Install:** `agentstack add mcp-sinadarbouy-mcp-nats`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [sinadarbouy](https://agentstack.voostack.com/s/sinadarbouy)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [sinadarbouy](https://github.com/sinadarbouy)
- **Source:** https://github.com/sinadarbouy/mcp-nats

## Install

```sh
agentstack add mcp-sinadarbouy-mcp-nats
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# mcp-nats
[](https://cursor.com/en/install-mcp?name=NATS&config=eyJjb21tYW5kIjoiZG9ja2VyIHJ1biAtaSAtLXJtIC0taW5pdCAtZSBOQVRTX1VSTCAtZSBOQVRTX05PX0FVVEhFTlRJQ0FUSU9OIGdoY3IuaW8vc2luYWRhcmJvdXkvbWNwLW5hdHM6MC4xLjQgLS10cmFuc3BvcnQgc3RkaW8iLCJlbnYiOnsiTkFUU19VUkwiOiJuYXRzOi8vbG9jYWxob3N0OjQyMjIiLCJOQVRTX05PX0FVVEhFTlRJQ0FUSU9OIjoidHJ1ZSJ9fQ%3D%3D)
[](https://insiders.vscode.dev/redirect?url=vscode%3Amcp%2Finstall%3F%7B%22name%22%3A%22NATS%22%2C%22command%22%3A%22docker%22%2C%22args%22%3A%5B%22run%22%2C%22-i%22%2C%22--rm%22%2C%22--init%22%2C%22-e%22%2C%22NATS_URL%22%2C%22-e%22%2C%22NATS_NO_AUTHENTICATION%22%2C%22ghcr.io%2Fsinadarbouy%2Fmcp-nats%3A0.1.4%22%2C%22--transport%22%2C%22stdio%22%5D%2C%22env%22%3A%7B%22NATS_URL%22%3A%22nats%3A%2F%2Flocalhost%3A4222%22%2C%22NATS_NO_AUTHENTICATION%22%3A%22true%22%7D%7D)

A [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server for [NATS](https://nats.io/) messaging system integration

[](https://mcpreview.com/mcp-servers/sinadarbouy/mcp-nats)

**This MCP server is certified by [MCP Review](https://mcpreview.com/mcp-servers/sinadarbouy/mcp-nats).**

## Overview

This project provides a Model Context Protocol (MCP) server for NATS, enabling AI models and applications to interact with NATS messaging systems through a standardized interface. It exposes a comprehensive set of tools for interacting with NATS servers, making it ideal for AI-powered applications that need to work with messaging systems.

## What is MCP?

The Model Context Protocol (MCP) is an open protocol that standardizes how applications provide context to Large Language Models (LLMs). This server implements the MCP specification to provide NATS messaging capabilities to LLMs and AI applications, allowing them to:

- Interact with NATS messaging systems in a standardized way
- Safely inspect and monitor NATS servers and streams
- Perform read-only operations through a secure interface
- Integrate with other MCP-compatible clients and hosts

## Features
- Server Management (Read-only Operations)
  - List and inspect NATS servers
  - Server health monitoring and ping
  - Server information retrieval
  - Round-trip time (RTT) measurement
- Stream Operations (Read-only Operations)
  - View and inspect NATS streams
  - Stream state and information queries
  - Message viewing and retrieval
  - Subject inspection
- Object Store Operations
  - Create and manage object store buckets
  - Put and get files from object stores
  - List buckets and their contents
  - Delete objects and buckets
  - Watch buckets for changes
  - Seal buckets to prevent updates
- Key-Value Operations
  - Create and manage KV buckets
  - Store and retrieve key-value pairs
  - Watch for KV updates
  - Delete keys and buckets
- Publish Operations
  - Publish messages to NATS subjects
  - Support for different message formats
  - Asynchronous message publishing
- Account Operations
  - View account information and metrics
  - Generate account reports (connections and statistics)
  - Create and restore account backups
  - Inspect TLS chain for connected servers
- Multi-Account Support
  - Handle multiple NATS accounts simultaneously
  - Secure credential management
- MCP Integration
  - Implements MCP server specification
  - Compatible with MCP clients like Claude Desktop
  - Standardized tool definitions for LLM interaction
  - Safe, read-only operations for AI interaction with NATS

## Requirements
- Go 1.25 or later
- NATS server (accessible via URL)
- NATS credentials for authentication
- MCP-compatible client (e.g., Claude Desktop, or other MCP clients)

## Installation

### Using Go
```sh
go install github.com/sinadarbouy/mcp-nats/cmd/mcp-nats@latest
```

### Building from Source
```sh
git clone https://github.com/sinadarbouy/mcp-nats.git
cd mcp-nats
go build -o mcp-nats ./cmd/mcp-nats
```

### Helm chart (Kubernetes)

The chart is in [`deploy/charts/mcp-nats`](deploy/charts/mcp-nats). Install guides (including **OCI / GHCR** and umbrella-chart `dependencies`), values overview, probes, and the **HashiCorp Vault Agent Injector** example are in **[deploy/charts/mcp-nats/README.md](deploy/charts/mcp-nats/README.md)**.

Quick start from the repository root:

```sh
helm install mcp-nats ./deploy/charts/mcp-nats --namespace mcp-nats --create-namespace
```

Published releases are also installable from OCI, for example:

```sh
helm install mcp-nats oci://ghcr.io/sinadarbouy/charts/mcp-nats --version "0.1.4" --namespace mcp-nats --create-namespace
```

See the chart README for `Chart.yaml` dependency snippets and registry login.

### Tilt Integration Test (Docker Desktop Kubernetes)
Use Tilt to deploy both official NATS and the local `mcp-nats` chart for end-to-end auth testing.

Prerequisites:
- Tilt installed
- Helm installed
- Docker Desktop Kubernetes enabled
- Current kube context set to `docker-desktop`

Start the integration stack:
```sh
tilt up
```

This uses:
- `Tiltfile`
- `deploy/tilt/nats-values.yaml`
- `deploy/tilt/mcp-nats-values.yaml`
- a local image build with `deploy/tilt/Dockerfile.tilt` before Helm deploy

Stop and clean up:
```sh
tilt down
helm uninstall -n mcp-nats-tilt nats mcp-nats
kubectl delete namespace mcp-nats-tilt --ignore-not-found
```

Quick verification commands:
```sh
kubectl get pods,svc -n mcp-nats-tilt
kubectl logs -n mcp-nats-tilt deploy/mcp-nats-mcp-nats
kubectl logs -n mcp-nats-tilt statefulset/nats
kubectl port-forward -n mcp-nats-tilt svc/mcp-nats-mcp-nats 8000:8000
```

Auth smoke test:
- NATS is configured with `mcpuser` / `mcppassword` in `deploy/tilt/nats-values.yaml`.
- `mcp-nats` uses the same credentials via chart-managed secret in `deploy/tilt/mcp-nats-values.yaml`.
- If credentials mismatch, `mcp-nats` logs will show connection/authentication failures.

## Configuration

### Environment Variables
- `NATS_URL`: The URL of your NATS server (e.g., `localhost:4222`)
- `NATS__CREDS`: Base64 encoded NATS credentials for each account
  - Example: `NATS_SYS_CREDS`, `NATS_A_CREDS`
- `NATS_NO_AUTHENTICATION`: Set to "true" to enable anonymous connections (no credentials required)
- `NATS_USER`: Username or token for user/password authentication
- `NATS_PASSWORD`: Password for user/password authentication

### Command Line Flags
- `--transport`: Transport type (stdio, sse, or streamable-http), default: streamable-http
- `--address`: Address for HTTP transport to listen on, default: 0.0.0.0:8000
- `--endpoint-path`: Endpoint path for streamable-http transport, default: /mcp
- `--sse-address`: Deprecated alias of `--address`
- `--log-level`: Log level (debug, info, warn, error), default: info
- `--json-logs`: Output logs in JSON format, default: false
- `--no-authentication`: Allow anonymous connections without credentials
- `--user`: NATS username or token (can also be set via NATS_USER env var)
- `--password`: NATS password (can also be set via NATS_PASSWORD env var)

### Health Endpoints (HTTP transports)
- `GET /livez`: process liveness check (does not validate NATS dependency)
- `GET /readyz`: readiness check (validates TCP connectivity to `NATS_URL`)
- `GET /healthz`: compatibility alias for liveness

These endpoints are available when running with `sse` or `streamable-http` transport.

### Helm chart probes

Default probes and `lifecycle.preStop` are documented in [deploy/charts/mcp-nats/README.md](deploy/charts/mcp-nats/README.md).

### Authentication Methods

The MCP NATS server supports three authentication methods:

1. **Credentials-based Authentication** (default): Uses NATS credentials files
   - Set `NATS__CREDS` environment variables
   - Requires `account_name` parameter in all tools

2. **User/Password Authentication**: Uses username and password
   - Set `NATS_USER` and `NATS_PASSWORD` environment variables or use `--user` and `--password` flags

3. **Anonymous Authentication**: No authentication required
   - Set `NATS_NO_AUTHENTICATION=true` environment variable or use `--no-authentication` flag

### Example Usage
```sh
# Run with Streamable HTTP transport (default) and debug logging
./mcp-nats --log-level debug

# Run with custom Streamable HTTP endpoint path
./mcp-nats --transport streamable-http --address localhost:9000 --endpoint-path /mcp

# Run with JSON logging
./mcp-nats --json-logs

# Run with SSE transport
./mcp-nats --transport sse --address localhost:9000

# Run with anonymous authentication
./mcp-nats --no-authentication

# Run with user/password authentication
./mcp-nats --user myuser --password mypass

# Run with environment variables for authentication
NATS_NO_AUTHENTICATION=true ./mcp-nats
NATS_USER=myuser NATS_PASSWORD=mypass ./mcp-nats
```

### Using VSCode with remote MCP server
Make sure your .vscode/settings.json includes:
```json
"mcp": {
  "servers": {
    "nats": {
      "type": "streamable-http",
      "url": "http://localhost:8000/mcp"
    }
  }
}
```

**Cursor** (`mcpServers`):

```json
{
  "mcpServers": {
    "nats": {
      "env": {
        "NATS_URL": "nats://localhost:4222",
        "NATS_SYS_CREDS": "",
        "NATS_A_CREDS": ""
      },
      "url": "http://localhost:8000/mcp"
    }
  }
}
```

**Anonymous Authentication:**
```json
{
  "mcpServers": {
    "nats": {
      "env": {
        "NATS_URL": "nats://localhost:4222",
        "NATS_NO_AUTHENTICATION": "true"
      },
      "url": "http://localhost:8000/mcp"
    }
  }
}
```

**User/Password Authentication:**
```json
{
  "mcpServers": {
    "nats": {
      "env": {
        "NATS_URL": "nats://localhost:4222",
        "NATS_USER": "myuser",
        "NATS_PASSWORD": "mypass"
      },
      "url": "http://localhost:8000/mcp"
    }
  }
}
```

If using the binary:
```json
{
  "mcpServers": {
    "nats": {
      "command": "mcp-nats",
      "args": [
        "--transport",
        "stdio"
      ],
      "env": {
        "NATS_URL": "nats://localhost:4222",
        "NATS_SYS_CREDS": "",
        "NATS_A_CREDS": ""
      }
    }
  }
}
```

**Anonymous Authentication with Binary:**
```json
{
  "mcpServers": {
    "nats": {
      "command": "mcp-nats",
      "args": [
        "--transport",
        "stdio",
        "--no-authentication"
      ],
      "env": {
        "NATS_URL": "nats://localhost:4222"
      }
    }
  }
}
```

**User/Password Authentication with Binary:**
```json
{
  "mcpServers": {
    "nats": {
      "command": "mcp-nats",
      "args": [
        "--transport",
        "stdio",
        "--user",
        "myuser"
      ],
      "env": {
        "NATS_URL": "nats://localhost:4222",
        "NATS_PASSWORD": "mypass"
      }
    }
  }
}
```

**Docker Configuration:**
```json
{
  "mcpServers": {
    "nats": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--init",
        "-e",
        "NATS_URL",
        "-e",
        "NATS_SYS_CREDS",
        "ghcr.io/sinadarbouy/mcp-nats:0.1.4",
        "--transport",
        "stdio"
      ],
      "env": {
        "NATS_SYS_CREDS": "",
        "NATS_URL": ""
      }
    }
  }
}
```

## Development

### Prerequisites
- Go 1.25+
- Docker (optional)
- NATS CLI
- Understanding of MCP specification

### Available Make Commands
```sh
make help      # Print help message
make build     # Build the binary
make run       # Run in stdio mode
make run-sse   # Run with SSE transport
make lint      # Run linters
```

## Testing with stdio Transport

For detailed instructions on how to test the MCP server using stdio transport, please refer to our [Stdio Example Guide](docs/stdio/stdio_example.md).

## Resources
- [Model Context Protocol Documentation](https://modelcontextprotocol.io/introduction)
- [MCP Specification](https://modelcontextprotocol.io)
- [Example MCP Servers](https://modelcontextprotocol.io/example-servers)

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [sinadarbouy](https://github.com/sinadarbouy)
- **Source:** [sinadarbouy/mcp-nats](https://github.com/sinadarbouy/mcp-nats)
- **License:** Apache-2.0

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-sinadarbouy-mcp-nats
- Seller: https://agentstack.voostack.com/s/sinadarbouy
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.