# noust mcp

Let clients inspect, deploy and control applications through MCP.

```bash
noust mcp [OPTIONS] COMMAND [ARGS]...
```

Subcommands: [`disable`](#noust-mcp-disable), [`enable`](#noust-mcp-enable), [`groups`](#noust-mcp-groups), [`status`](#noust-mcp-status), [`token`](#noust-mcp-token), [`tools`](#noust-mcp-tools)

## noust mcp disable

Turn the MCP endpoint off: it answers nothing until it is turned on again.

```bash
noust mcp disable [OPTIONS]
```

| Option | What it does | Default |
|---|---|---|
| `--reason` | Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on. |  |

## noust mcp enable

Turn the MCP endpoint on.

```bash
noust mcp enable [OPTIONS]
```

| Option | What it does | Default |
|---|---|---|
| `--reason` | Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on. |  |

## noust mcp groups

Choose which groups of tools are offered: inspect, deploy, control.

```bash
noust mcp groups [OPTIONS] {inspect|deploy|control}...
```

Arguments: `groups`

| Option | What it does | Default |
|---|---|---|
| `--reason` | Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on. |  |

## noust mcp status

Say whether MCP is on and which groups of tools it offers.

```bash
noust mcp status [OPTIONS]
```

| Option | What it does | Default |
|---|---|---|
| `--json` | Print the setting as JSON. |  |
| `--reason` | Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on. |  |

## noust mcp token

Issue an API token with the permissions a client needs and no more.

```bash
noust mcp token [OPTIONS] NAME
```

Arguments: `name`

| Option | What it does | Default |
|---|---|---|
| `--preset` | What the client needs: inspect (read), deploy (also update, roll back, back up) or control (also start, stop, restart). | `inspect` |
| `--owner` | The account the token acts for. |  |
| `--team` | Bind it to this team: it sees nothing else. |  |
| `--project` | Bind it to this project of the team. |  |
| `--env` | Bind it to this environment. |  |
| `--expires-hours` | Lifetime in hours. A client's credential should not live forever. | `720` |
| `--reason` | Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on. |  |

## noust mcp tools

List every tool, the permission its route needs and what it asks to be confirmed.

```bash
noust mcp tools [OPTIONS]
```

| Option | What it does | Default |
|---|---|---|
| `--json` | Print the tools as JSON. |  |
| `--reason` | Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on. |  |