MCP Directory

How to add Alibaba Cloud Ops MCP Server to Windsurf

Operate Alibaba Cloud resources (ECS, VPC, RDS, OSS, CloudMonitor, OOS) from AI assistants via MCP. Paste the config into ~/.codeium/windsurf/mcp_config.json and restart Windsurf.

Last updated June 14, 2026 · 119★ · stdio · apikey · official

Windsurf config for Alibaba Cloud Ops MCP Server

uvx alibaba-cloud-ops-mcp-server@latest
{
  "mcpServers": {
    "alibaba-cloud-ops-mcp-server": {
      "command": "uvx",
      "args": [
        "alibaba-cloud-ops-mcp-server@latest"
      ],
      "env": {
        "ALIBABA_CLOUD_ACCESS_KEY_ID": "Your Access Key ID",
        "ALIBABA_CLOUD_ACCESS_KEY_SECRET": "Your Access Key SECRET"
      }
    }
  }
}

Requires `uv` (the Python package runner). Install it from https://docs.astral.sh/uv/ if `uvx` is not found.

Setup steps

  1. 1Open Windsurf → Cascade → the hammer/MCP icon → Configure (or edit ~/.codeium/windsurf/mcp_config.json).
  2. 2Paste the Alibaba Cloud Ops MCP Server config below.
  3. 3Fill in placeholder secrets, then save.
  4. 4Click Refresh in the MCP panel.
  5. 5Alibaba Cloud Ops MCP Server's tools become available to Cascade.

Before you start

  • uv installed (curl -LsSf https://astral.sh/uv/install.sh | sh)
  • An Alibaba Cloud account with an AccessKey ID and AccessKey Secret
  • An MCP client (e.g. Cline, Cursor, Qoder)

What Alibaba Cloud Ops MCP Server can do in Windsurf

RunCommand

ECS: Run a command on instances (implemented via OOS).

StartInstances

ECS: Start instances (via OOS).

StopInstances

ECS: Stop instances (via OOS).

RebootInstances

ECS: Reboot instances (via OOS).

DescribeInstances

ECS: View instances (via API).

DescribeRegions

ECS: View regions (via API).

DescribeZones

ECS: View zones (via API).

DescribeAvailableResource

ECS: View resource inventory (via API).

Security

Requires an Alibaba Cloud AccessKey ID and AccessKey Secret supplied via the ALIBABA_CLOUD_ACCESS_KEY_ID and ALIBABA_CLOUD_ACCESS_KEY_SECRET environment variables. These credentials grant access to operate (create, stop, delete) live cloud resources, so scope the AccessKey's RAM permissions to the minimum required and keep the secret out of source control.

Alibaba Cloud Ops MCP Server + Windsurf FAQ

Where is the Windsurf config file?

Windsurf reads MCP servers from ~/.codeium/windsurf/mcp_config.json. Paste the Alibaba Cloud Ops MCP Server config there under the "mcpServers" key and restart the client.

Is Alibaba Cloud Ops MCP Server safe to use with Windsurf?

Requires an Alibaba Cloud AccessKey ID and AccessKey Secret supplied via the ALIBABA_CLOUD_ACCESS_KEY_ID and ALIBABA_CLOUD_ACCESS_KEY_SECRET environment variables. These credentials grant access to operate (create, stop, delete) live cloud resources, so scope the AccessKey's RAM permissions to the minimum required and keep the secret out of source control.

Is this an official Alibaba Cloud project?

Yes. It is published under the aliyun GitHub organization and licensed Apache-2.0.

How do I authenticate?

Provide your Alibaba Cloud AccessKey via the ALIBABA_CLOUD_ACCESS_KEY_ID and ALIBABA_CLOUD_ACCESS_KEY_SECRET environment variables in the MCP server config.

How is the server launched?

It runs over stdio using uvx, e.g. uvx alibaba-cloud-ops-mcp-server@latest. Install uv first.

View repo Full Alibaba Cloud Ops MCP Server page