cloud
DigitalOcean MCP Integration for Codex
Connect DigitalOcean to Codex through the local KosmoKrator MCP gateway with scoped tools, credentials, and write policy.
Connect DigitalOcean to Codex
Use KosmoKrator as a local MCP proxy for Codex so coding sessions can reach selected integrations with explicit write policy.
Register kosmo mcp:serve as a local stdio server and choose the integration allowlist. The gateway is local, scoped to this integration, and starts with
--write=deny so Codex can inspect read-capable tools without receiving write access by default.
DigitalOcean MCP Config for Codex
Keep write access denied or ask-based unless the workspace is trusted.
{
"mcpServers": {
"kosmokrator-digitalocean": {
"type": "stdio",
"command": "kosmo",
"args": [
"mcp:serve",
"--integration=digitalocean",
"--write=deny"
]
}
}
} Run the Gateway Manually
kosmokrator mcp:serve --integration=digitalocean --write=deny Why Use KosmoKrator Here
Expose only DigitalOcean instead of a broad multi-service tool list.
Reuse credentials already configured for the KosmoKrator CLI and Lua runtime.
Start read-only, then opt into ask or allow for trusted workspaces.
DigitalOcean Tools Visible to Codex
Codex sees stable MCP tool names generated from the DigitalOcean integration catalog.
| MCP tool | Source function | Type | Description |
|---|---|---|---|
integration__digitalocean__digitalocean_list_droplets | digitalocean.digitalocean_list_droplets | Read | List all droplets (virtual machines) in the DigitalOcean account. Returns IDs, names, status, size, region, and IP addresses. |
integration__digitalocean__digitalocean_get_droplet | digitalocean.digitalocean_get_droplet | Read | Get details for a specific DigitalOcean droplet by ID. Returns full droplet information including networks, image, and region. |
integration__digitalocean__digitalocean_create_droplet | digitalocean.digitalocean_create_droplet | Write | Create a new DigitalOcean droplet (virtual machine). Requires a name, region, size, and image. |
integration__digitalocean__digitalocean_delete_droplet | digitalocean.digitalocean_delete_droplet | Write | Permanently delete a DigitalOcean droplet. This action is irreversible and will destroy all data on the droplet. |
integration__digitalocean__digitalocean_reboot_droplet | digitalocean.digitalocean_reboot_droplet | Write | Reboot a DigitalOcean droplet. The droplet will be power-cycled and will be temporarily unavailable. |
integration__digitalocean__digitalocean_list_domains | digitalocean.digitalocean_list_domains | Read | List all DNS domains managed in the DigitalOcean account. |
integration__digitalocean__digitalocean_get_domain | digitalocean.digitalocean_get_domain | Read | Get details for a specific DNS domain in DigitalOcean, including zone file and TTL information. |
integration__digitalocean__digitalocean_list_spaces | digitalocean.digitalocean_list_spaces | Read | List Spaces (S3-compatible object storage buckets) in the DigitalOcean account. |
integration__digitalocean__digitalocean_list_kubernetes | digitalocean.digitalocean_list_kubernetes | Read | List Kubernetes (DOKS) clusters in the DigitalOcean account. |
integration__digitalocean__digitalocean_get_current_user | digitalocean.digitalocean_get_current_user | Read | Get information about the current authenticated DigitalOcean account, including email, UUID, and status. |