# Red Hat Lightspeed MCP

Gives an AI agent a natural-language path into Red Hat Lightspeed: inventory, Advisor, vulnerabilities, images and planning.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 25
- Author: RedHatInsights
- License: Apache-2.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/RedHatInsights/insights-mcp
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/mcp/red-hat-lightspeed-mcp

## What it does

The server is self-hosted and ships as the container `ghcr.io/redhatinsights/red-hat-lightspeed-mcp`. It carries tools for each Lightspeed service: Advisor, Inventory, OCP Advisor, Vulnerability, Remediations, Hosted image builder, RHSM, Content sources and Planning. Your agent queries them in plain language instead of calling APIs by hand.

Read operations are on by default. Write tools such as blueprint creation and compose runs stay off until the server is started with `--all-tools`, and RBAC still caps what the account may do.

Before any of that you need a service account: take `LIGHTSPEED_CLIENT_ID` and `LIGHTSPEED_CLIENT_SECRET` from console.redhat.com. An organization administrator has to grant roles first, and each toolset wants its own — `Inventory Hosts viewer`, `Remediations user` and so on. An account with no roles sees nothing. Running the container locally with `docker` or `podman` keeps credentials on your machine, so leave that container off the public internet; for a remote deployment your secrets travel to the server and it must be trusted not to leak them.

## Requirements
- Needs: Docker
- Environment variables: `LIGHTSPEED_CLIENT_ID`, `LIGHTSPEED_CLIENT_SECRET` — keys and tokens: ask the human for the values, never commit them or put them in shared files.

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add --env LIGHTSPEED_CLIENT_ID=<LIGHTSPEED_CLIENT_ID> --env LIGHTSPEED_CLIENT_SECRET=<LIGHTSPEED_CLIENT_SECRET> --transport stdio red-hat-lightspeed-mcp -- docker run -i --rm -e LIGHTSPEED_CLIENT_ID -e LIGHTSPEED_CLIENT_SECRET ghcr.io/redhatinsights/red-hat-lightspeed-mcp
```
Replace <…> with your own values

### Codex

**Platform CLI**
```bash
codex mcp add red-hat-lightspeed-mcp --env LIGHTSPEED_CLIENT_ID=<LIGHTSPEED_CLIENT_ID> --env LIGHTSPEED_CLIENT_SECRET=<LIGHTSPEED_CLIENT_SECRET> -- docker run -i --rm -e LIGHTSPEED_CLIENT_ID -e LIGHTSPEED_CLIENT_SECRET ghcr.io/redhatinsights/red-hat-lightspeed-mcp
```
Replace <…> with your own values

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "red-hat-lightspeed-mcp": {
            "command": "docker",
            "args": [
                "run",
                "-i",
                "--rm",
                "-e",
                "LIGHTSPEED_CLIENT_ID",
                "-e",
                "LIGHTSPEED_CLIENT_SECRET",
                "ghcr.io/redhatinsights/red-hat-lightspeed-mcp"
            ],
            "env": {
                "LIGHTSPEED_CLIENT_ID": "<LIGHTSPEED_CLIENT_ID>",
                "LIGHTSPEED_CLIENT_SECRET": "<LIGHTSPEED_CLIENT_SECRET>"
            }
        }
    }
}
```
Replace <…> with your own values

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "red-hat-lightspeed-mcp": {
            "type": "stdio",
            "command": "docker",
            "args": [
                "run",
                "-i",
                "--rm",
                "-e",
                "LIGHTSPEED_CLIENT_ID",
                "-e",
                "LIGHTSPEED_CLIENT_SECRET",
                "ghcr.io/redhatinsights/red-hat-lightspeed-mcp"
            ],
            "env": {
                "LIGHTSPEED_CLIENT_ID": "<LIGHTSPEED_CLIENT_ID>",
                "LIGHTSPEED_CLIENT_SECRET": "<LIGHTSPEED_CLIENT_SECRET>"
            }
        }
    }
}
```
Replace <…> with your own values

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add -e LIGHTSPEED_CLIENT_ID=<LIGHTSPEED_CLIENT_ID> -e LIGHTSPEED_CLIENT_SECRET=<LIGHTSPEED_CLIENT_SECRET> red-hat-lightspeed-mcp docker run -i --rm -e LIGHTSPEED_CLIENT_ID -e LIGHTSPEED_CLIENT_SECRET ghcr.io/redhatinsights/red-hat-lightspeed-mcp
```
Replace <…> with your own values

## When to use it
- list inventory hosts and check their state
- surface vulnerabilities across RHEL systems
- build an image with Hosted image builder
- check OpenShift cluster health through OCP Advisor
- create and inspect activation keys in RHSM

## Example prompts
- Show the inventory hosts that have open vulnerabilities
- Create a blueprint for a RHEL image and run the compose
- What does Advisor report about configuration issues on my systems?

## Similar
- [GitHub](https://affpapa.org/en/nevibecode/mcp/github.md) — MCP server · ★ 33918
- [Netdata](https://affpapa.org/en/nevibecode/mcp/netdata.md) — MCP server · ★ 81115
- [Oh My Posh Validator](https://affpapa.org/en/nevibecode/mcp/oh-my-posh-validator.md) — MCP server · ★ 23643
- [Keploy](https://affpapa.org/en/nevibecode/mcp/keploy.md) — MCP server · ★ 18727
- [Coder](https://affpapa.org/en/nevibecode/mcp/coder.md) — MCP server · ★ 17160
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12109

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md