Available Tools
Complete reference for all MCP tools provided by the Traefik MCP Server. Tools are organized by category.
Edge Routing & Traffic Splitting
Tools for creating, updating, and deleting weighted and simple routes.
| Tool | Description |
|---|---|
traefik_manage_weighted_routing | Create, update, or delete weighted canary routes with optional path, header/cookie, TLS, and middleware support |
traefik_manage_simple_route | Create or delete direct IngressRoutes to K8s Services (upserts on create) |
traefik_manage_weighted_routing
The primary tool for canary traffic management. Supports action: create, update, delete. On create, generates both a TraefikService (weighted round-robin) and an IngressRoute pointing to it.
Create a route:
"Create a weighted canary route 'api-service-route' in 'production' for hostname 'api.example.com' — 100% stable, 0% canary."
"Create route 'frontend-route' in 'staging' at 'app.example.com' with path prefix '/api' — route only /api/* traffic."
"Create a TLS-enabled route 'checkout-route' at 'checkout.example.com' with secret 'checkout-tls' and attach 'rate-limit' middleware."
Update weights:
"Shift traffic to 95% stable, 5% canary for 'api-service-route' in 'production'."
"Update 'api-service-route' to 50/50 split between stable and canary."
Delete a route:
"Delete the 'api-service-route' in 'production' — the deployment is complete."
"Clean up the Traefik canary route 'frontend-route' in 'staging'."
Supported parameters:
| Parameter | Description | Example |
|---|---|---|
path_prefix | Path match | /api |
path_match_type | PathPrefix, Path, or PathRegexp | PathPrefix |
header_name / header_value | HTTP header match (create only) | X-Canary: true |
cookie_name / cookie_regex | Cookie match (create only) | canary, .*yes.* |
tls_enabled | Enable TLS on the route | Uses websecure entrypoint |
tls_secret_name | TLS secret for termination | api-tls |
middlewares | Middleware names to attach | ["rate-limit", "auth"] |
traefik_manage_simple_route
For standard direct routing without weighted round-robin. Use action: create (upserts) or delete.
"Deploy a simple IngressRoute 'api-route' at 'api.example.com' in 'production' that routes '/' to service 'api-service' on port 80."
"Delete the simple IngressRoute 'api-route' in 'production'."
Middleware & Resiliency
Tools for creating and managing Traefik Middleware CRDs.
| Tool | Description |
|---|---|
traefik_manage_middleware | Create, update, or delete Middleware CRDs (rate limit, circuit breaker, strip prefix, and 10+ more types) |
traefik_manage_route_middlewares | Attach or detach middlewares on a live IngressRoute |
traefik_manage_middleware
Supports action: create (upserts), update, delete. The middleware_type parameter determines which middleware to configure.
Supported middleware types: rate_limit, circuit_breaker, strip_prefix, redirect_scheme, inflight_req, headers, ip_allowlist, ip_denylist, forward_auth, buffering, replace_path, replace_path_regex, add_prefix.
Rate limiting:
"Add a rate limiting middleware 'api-limit' to average 100 requests per 1s with a burst of 200."
Circuit breaker:
"Create a circuit breaker 'api-cb' in 'production' that triggers if error-rate exceeds 0.3. Set response_code=429."
Strip prefix:
"Add a strip prefix middleware 'api-strip' in 'production' that strips '/api' from incoming request paths."
traefik_manage_route_middlewares
Attach or detach middlewares on a live IngressRoute. Use action: attach or detach.
"Attach the 'rate-limit' middleware to 'api-service-route' in 'production'."
"Detach the 'circuit-breaker' middleware from 'frontend-route' in 'staging'."
Traffic Mirroring (Shadow Launch)
Tools for shadow testing new versions against real production traffic without user impact.
| Tool | Description |
|---|---|
traefik_manage_traffic_mirroring | Enable, disable, or update traffic mirroring (shadow launch) |
traefik_manage_traffic_mirroring
Copy a percentage of production traffic to a canary service. User responses always come from stable. Use action: enable, disable, update.
"Mirror 20% of production traffic to the canary service via route 'api-service-route' in 'production'."
"Ramp mirroring to 50% for 'api-service-route' — shadow is performing well."
"Disable traffic mirroring for 'api-service-route' — shadow testing is complete."
Backend Transport & Affinity
Tools for configuring backend TLS, timeouts, and sticky sessions.
| Tool | Description |
|---|---|
traefik_manage_servers_transport | Create/update or delete Traefik ServersTransport CRDs for backend dial/response timeouts and TLS |
traefik_configure_service_affinity | Enable or disable sticky cookie annotations on Kubernetes Services |
traefik_manage_servers_transport
Configure backend timeouts and TLS settings. Use action: create or delete.
"Create a ServersTransport 'api-backend-transport' in production with dial timeout 5s and response header timeout 60s."
"Add a ServersTransport for HTTPS backends with insecure skip verify — name 'grpc-transport', namespace default."
"Delete ServersTransport 'old-transport' in staging."
traefik_configure_service_affinity
Manage Traefik sticky-cookie annotations on Kubernetes Services. Use action: enable or disable.
"Enable Traefik sticky cookies on Service 'api-svc' in production with cookie name SESSIONID and max age 3600."
"Turn off sticky session annotations on Service 'api-svc' in production."
TCP Routing
Tools for routing non-HTTP protocols (PostgreSQL, Redis, MQTT) through Traefik.
| Tool | Description |
|---|---|
traefik_manage_tcp_routing | Create or delete IngressRouteTCP resources |
traefik_configure_tcp_middleware | Create MiddlewareTCP with IP allowlist |
traefik_manage_tcp_routing
Route TCP traffic through Traefik. Use action: create or delete.
"Create a TCP route 'postgres-route' in 'default' for service 'postgres' on port 5432."
"Create IngressRouteTCP 'redis-route' for 'redis' on port 6379 with SNI 'redis.example.com'."
"Delete the TCP route 'postgres-route' in 'default'."
traefik_configure_tcp_middleware
Create TCP-specific IP allowlist middleware.
"Create a TCP IP allowlist middleware 'db-allowlist' in 'default' allowing 192.168.1.0/24 and 10.0.0.1."
NGINX Migration
Tools for migrating from NGINX Ingress Controller to Traefik.
| Tool | Description |
|---|---|
traefik_nginx_migration | Migrate, generate, or revert NGINX-to-Traefik bundles with optional agentic overrides |
traefik_nginx_migration
Full NGINX Ingress → Traefik translation pipeline. Use action: apply, generate, or revert.
apply— Creates Traefik CRDs and patches Ingresses in-cluster (requiresMCP_ALLOW_WRITE=true)generate— Produces the migration bundle as YAML without modifying the clusterrevert— Undoes a single Ingress migration
"Generate the NGINX→Traefik migration bundle for namespace 'production' without applying it."
"Run the full NGINX to Traefik migration for 'staging'."
"Revert the migration for Ingress 'api' in 'production'."
Agentic Override (migration_plan):
For breaking annotations (e.g., auth-url), pass a migration_plan with per-Ingress overrides:
"Apply the NGINX migration for 'ecommerce' but ignore the 'auth-url' annotation and inject 'agent-custom-auth' middleware for the 'ecommerce-shop' ingress."
Manifest Generators
Tools for producing YAML manifests for review or GitOps workflows.
| Tool | Description |
|---|---|
traefik_generate_routing_manifest | Generate TraefikService, IngressRoute, TCP, or mirroring YAML manifests |
traefik_generate_routing_manifest
Use manifest_type: traefik_service, ingress_for_traefik_service, ingress_for_services, mirroring, ingress_route_tcp, middleware_tcp.
"Generate a TraefikService YAML for 'api-service' with 90% stable, 10% canary."
"Generate an IngressRoute for 'api-service-ts' TraefikService at 'api.example.com'."
"Generate IngressRouteTCP for 'postgres-route' on port 5432."
"Generate a mirroring TraefikService YAML — main 'api-stable', mirror 'api-canary' at 20%."
Tool Availability Summary
| Category | Total Tools |
|---|---|
| Edge Routing & Traffic Splitting | 2 |
| Middleware & Resiliency | 2 |
| Traffic Mirroring | 1 |
| Backend Transport & Affinity | 2 |
| TCP Routing | 2 |
| NGINX Migration | 1 |
| Manifest Generators | 1 |
| Total | 11 |
Next Steps
- Resources — MCP resources for monitoring
- Common Workflows — Step-by-step workflow guides
- Examples — Quick reference and prompts