Skip to main content
Watch: I Built an AI App Without Leaving Databricks

Cloud and hosting - official Red Hat server

Red Hat Lightspeed MCP server

Self-hosted MCP server that connects agents to Red Hat Lightspeed services (advisor, inventory, vulnerability, remediations, planning, hosted image builder) to query RHEL fleet data, CVEs and recommendations. It runs locally from ghcr.io/redhatinsights/red-hat-lightspeed-mcp (oci) with OAuth or API key auth.

Last verified 9 tools5 sources

Install

Claude Code

About Claude Code
Terminal
claude mcp add red-hat-lightspeed-mcp -- podman run --env LIGHTSPEED_CLIENT_ID=<YOUR_CLIENT_ID> --env LIGHTSPEED_CLIENT_SECRET=<YOUR_CLIENT_SECRET> --interactive --rm ghcr.io/redhatinsights/red-hat-lightspeed-mcp:latest

Cursor

About Cursor
JSON
{
  "mcpServers": {
    "lightspeed-mcp": {
        "type": "stdio",
        "command": "podman",
        "args": [
            "run",
            "--env",
            "LIGHTSPEED_CLIENT_ID",
            "--env",
            "LIGHTSPEED_CLIENT_SECRET",
            "--interactive",
            "--rm",
            "ghcr.io/redhatinsights/red-hat-lightspeed-mcp:latest"
        ],
        "env": {
            "LIGHTSPEED_CLIENT_ID": "",
            "LIGHTSPEED_CLIENT_SECRET": ""
        }
    }
  }
}

VS Code

JSON
{
    "inputs": [
        {
            "id": "lightspeed_client_id",
            "type": "promptString",
            "description": "Enter the Red Hat Lightspeed Client ID",
            "default": "",
            "password": true
        },
        {
            "id": "lightspeed_client_secret",
            "type": "promptString",
            "description": "Enter the Red Hat Lightspeed Client Secret",
            "default": "",
            "password": true
        }
    ],
    "servers": {
        "lightspeed-mcp": {
            "type": "stdio",
            "command": "podman",
            "args": [
                "run",
                "--env",
                "LIGHTSPEED_CLIENT_ID",
                "--env",
                "LIGHTSPEED_CLIENT_SECRET",
                "--interactive",
                "--rm",
                "ghcr.io/redhatinsights/red-hat-lightspeed-mcp:latest"
            ],
            "env": {
                "LIGHTSPEED_CLIENT_ID": "${input:lightspeed_client_id}",
                "LIGHTSPEED_CLIENT_SECRET": "${input:lightspeed_client_secret}"
            }
        }
    }
}

Generic

Terminal
export LIGHTSPEED_CLIENT_ID=<YOUR_CLIENT_ID>
export LIGHTSPEED_CLIENT_SECRET=<YOUR_CLIENT_SECRET>
podman run --env LIGHTSPEED_CLIENT_ID --env LIGHTSPEED_CLIENT_SECRET --interactive --rm ghcr.io/redhatinsights/red-hat-lightspeed-mcp:latest

Tools

get_active_rules
Gets active Advisor recommendations for the account.
get_hosts_hitting_a_rule
Gets systems affected by an Advisor recommendation.
get_cves
Lists CVEs affecting the account.
get_cve_systems
Lists systems affected by a given CVE.
explain_cves
Explains why CVEs affect the environment.
create_vuln_playbook
Creates a remediation playbook for CVEs on systems (write tool).
get_blueprints
Lists image builder blueprints.
create_blueprint
Creates an image builder blueprint (write tool).
get_activation_keys
Lists available activation keys.

As documented on October 17, 2026. A running server reports its current list through tools/list.

Notes and caveats

  • Developer preview per Red Hat Developer.
  • Read-only by default; --all-tools enables write tools.
  • Authenticates to Lightspeed APIs with a console.redhat.com service account (client ID and secret, plus RBAC roles per toolset) or a JWT bearer token over HTTP/SSE.
  • Insights-branded images are deprecated.
  • Cursor may reject long server names (60-character tool name limit).

More MCP servers for cloud and hosting

Related reading

FAQ

What does the Red Hat Lightspeed MCP server do?

Self-hosted MCP server that connects agents to Red Hat Lightspeed services (advisor, inventory, vulnerability, remediations, planning, hosted image builder) to query RHEL fleet data, CVEs and recommendations. The vendor documents 9 tools, including get_active_rules, get_hosts_hitting_a_rule, get_cves and get_cve_systems.

How do I add the Red Hat Lightspeed MCP server to Claude Code?

Run claude mcp add red-hat-lightspeed-mcp -- podman run --env LIGHTSPEED_CLIENT_ID=<YOUR_CLIENT_ID> --env LIGHTSPEED_CLIENT_SECRET=<YOUR_CLIENT_SECRET> --interactive --rm ghcr.io/redhatinsights/red-hat-lightspeed-mcp:latest, copied from Red Hat's docs. This page also has snippets for Cursor, VS Code and Generic.

Does the Red Hat Lightspeed MCP server need authentication?

Yes, OAuth or API key. Transport: stdio, Streamable HTTP, SSE. Status: Preview, last checked October 17, 2026.

Sources

Last verified against 5 Red Hat pages, then re-checked independently.

Newsletter

New MCP servers, the week they ship

One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.