Flink MCP Enterprise

A production Java Model Context Protocol server for Apache Flink: secure-by-default tools over REST & SQL Gateway, with approvals, policy, DLP, audit, and Prometheus metrics.

Start the developer tutorial From cluster health to governed stop_job — click to open
Getting started Docs GitHub Sister: Kafka MCP

Fail-closed by design

Every tools/call walks ordered gates. The first denial wins. Flink ACLs stay authoritative when present.

01Expose
02Scope
03Policy
04Approval
05Rate
06Breaker
07Execute
08DLP

What ships

Java 17 · MCP SDK 1.1.3 · Jetty 12 HTTP · 12 default read tools · gated writes · stderr-only logs with MDC trace=.

Flink MCP features: governance, tools, observability

For SREs

Inspect jobs, TaskManagers, checkpoints, and exceptions without a god principal.

For platform teams

Change-window approvals, policy deny files, jar path allow-lists, Bearer HTTP.

For security

Output DLP, hash-chained audit, rate limits, circuit breakers, path-injection defense.

Run it

mvn clean package
FLINK_REST_URL=http://localhost:8081 \
java -jar target/flink-mcp-server-0.2.0-all.jar

Then walk the examples/ against a real Flink cluster.