AgentHubAgentHub

no-crd

MCP ServerMCP Registry官方收录

io.github.nogoo9/no-crd · v0.9.0

Dynamic pod spawner & proxy for ephemeral AI agent workspaces on Kubernetes without CRDs

概览

no-crd 是一个MCP Server,收录自 官方 MCP Registry。支持 stdio 传输。本页提供 Cursor、Claude Code 等客户端的安装配置片段。

安装

选择你的平台查看安装方式

{
  "mcpServers": {
    "no-crd": {
      "command": "bunx",
      "args": [
        "-y",
        "@nogoo9/no-crd"
      ]
    }
  }
}

环境变量

KUBECONFIG可选

Path to the Kubernetes API credentials configuration file

BASE_URL可选

Hosting URL subpath prefix for gateways and reverse proxies

STATELESS可选

Disable in-memory session tracking for stateless execution

TLS_CERT可选

Local file path containing TLS public certificate (HTTPS)

TLS_KEY可选secret

Local file path containing TLS private key (HTTPS)

TLS_CA可选

Local file path containing trusted client Certificate Authority

NODE_TLS_REJECT_UNAUTHORIZED可选

Set to '0' to allow connection to unverified TLS endpoints

REGISTRY_URL可选

Default container registry for workspace image resolution

TEMPLATES_DIR可选

Local filesystem directory containing custom YAML/JSON templates

BUILTIN_TEMPLATES可选

Enable loading of standard pre-configured templates (default: true)

AUTH_ENABLED可选

Enforce JWT verification and user tenant isolation (default: false)

JWT_VERIFICATION_REQUIRED可选

Set to 'false' to skip OIDC cryptographic signature checks

JWT_SECRET可选secret

HMAC-SHA symmetric secret key to sign/verify JWT tokens

JWT_PUBLIC_KEY可选secret

PEM public key to verify asymmetric OIDC signatures

JWKS_URI可选

Discovery URI to fetch keys from OIDC provider dynamically

INTROSPECTION_ENDPOINT可选

RFC 7662 compliant token introspection validation endpoint

OAUTH_CLIENT_ID可选

Client identifier for OAuth2 authentication flows

OAUTH_CLIENT_SECRET可选secret

Client secret credentials used for token introspection

JWT_AUDIENCE可选

Target audience check value for incoming OIDC tokens

AUTH_ISSUER可选

Expected token issuer authority check value (e.g. Keycloak)

AUTH_SUB_JSONPATH可选

JSONPath pattern to extract user identity subject from token

AUTH_ADMIN_ROLE可选

Bypass role name that grants admin access (default: nogoo9-admin)

PROXY_SESSION_TTL可选

Active lifetime in seconds for signed proxy session cookies

PROXY_SESSION_SECRET可选secret

Secret key for session cookie signing

UI_ENABLED可选

Serve the built-in HTML dashboard (default: true)

THEMES_DIR可选

Filesystem directory to scan for custom CSS themes

THEMES_CONFIGMAP可选

ConfigMap name storing dynamic CSS theme overrides

DOCS_DIR可选

Directory containing static documentation web files to serve

OAUTH_DISCOVERY_URL可选

Standard OIDC .well-known configuration discovery endpoint

OAUTH_LOGIN_METHOD可选

UI SSO flow login method: 'redirect' or silent 'iframe'

UI_TITLE可选

Custom dashboard header title for white-label branding

UI_SUBTITLE可选

Custom dashboard subtitle text below the header title

相关资源

统一 Manifest

{
  "id": "io.github.nogoo9/no-crd",
  "type": "mcp-server",
  "version": "0.9.0",
  "displayName": "no-crd",
  "description": "Dynamic pod spawner & proxy for ephemeral AI agent workspaces on Kubernetes without CRDs",
  "repository": {
    "url": "https://github.com/nogoo9/no-crd",
    "source": "github"
  },
  "distribution": {
    "packages": [
      {
        "registryType": "npm",
        "identifier": "@nogoo9/no-crd",
        "version": "0.9.0",
        "runtimeHint": "bunx",
        "transport": "stdio",
        "environmentVariables": [
          {
            "name": "KUBECONFIG",
            "description": "Path to the Kubernetes API credentials configuration file"
          },
          {
            "name": "BASE_URL",
            "description": "Hosting URL subpath prefix for gateways and reverse proxies"
          },
          {
            "name": "STATELESS",
            "description": "Disable in-memory session tracking for stateless execution"
          },
          {
            "name": "TLS_CERT",
            "description": "Local file path containing TLS public certificate (HTTPS)"
          },
          {
            "name": "TLS_KEY",
            "description": "Local file path containing TLS private key (HTTPS)",
            "isSecret": true
          },
          {
            "name": "TLS_CA",
            "description": "Local file path containing trusted client Certificate Authority"
          },
          {
            "name": "NODE_TLS_REJECT_UNAUTHORIZED",
            "description": "Set to '0' to allow connection to unverified TLS endpoints"
          },
          {
            "name": "REGISTRY_URL",
            "description": "Default container registry for workspace image resolution"
          },
          {
            "name": "TEMPLATES_DIR",
            "description": "Local filesystem directory containing custom YAML/JSON templates"
          },
          {
            "name": "BUILTIN_TEMPLATES",
            "description": "Enable loading of standard pre-configured templates (default: true)"
          },
          {
            "name": "AUTH_ENABLED",
            "description": "Enforce JWT verification and user tenant isolation (default: false)"
          },
          {
            "name": "JWT_VERIFICATION_REQUIRED",
            "description": "Set to 'false' to skip OIDC cryptographic signature checks"
          },
          {
            "name": "JWT_SECRET",
            "description": "HMAC-SHA symmetric secret key to sign/verify JWT tokens",
            "isSecret": true
          },
          {
            "name": "JWT_PUBLIC_KEY",
            "description": "PEM public key to verify asymmetric OIDC signatures",
            "isSecret": true
          },
          {
            "name": "JWKS_URI",
            "description": "Discovery URI to fetch keys from OIDC provider dynamically"
          },
          {
            "name": "INTROSPECTION_ENDPOINT",
            "description": "RFC 7662 compliant token introspection validation endpoint"
          },
          {
            "name": "OAUTH_CLIENT_ID",
            "description": "Client identifier for OAuth2 authentication flows"
          },
          {
            "name": "OAUTH_CLIENT_SECRET",
            "description": "Client secret credentials used for token introspection",
            "isSecret": true
          },
          {
            "name": "JWT_AUDIENCE",
            "description": "Target audience check value for incoming OIDC tokens"
          },
          {
            "name": "AUTH_ISSUER",
            "description": "Expected token issuer authority check value (e.g. Keycloak)"
          },
          {
            "name": "AUTH_SUB_JSONPATH",
            "description": "JSONPath pattern to extract user identity subject from token"
          },
          {
            "name": "AUTH_ADMIN_ROLE",
            "description": "Bypass role name that grants admin access (default: nogoo9-admin)"
          },
          {
            "name": "PROXY_SESSION_TTL",
            "description": "Active lifetime in seconds for signed proxy session cookies"
          },
          {
            "name": "PROXY_SESSION_SECRET",
            "description": "Secret key for session cookie signing",
            "isSecret": true
          },
          {
            "name": "UI_ENABLED",
            "description": "Serve the built-in HTML dashboard (default: true)"
          },
          {
            "name": "THEMES_DIR",
            "description": "Filesystem directory to scan for custom CSS themes"
          },
          {
            "name": "THEMES_CONFIGMAP",
            "description": "ConfigMap name storing dynamic CSS theme overrides"
          },
          {
            "name": "DOCS_DIR",
            "description": "Directory containing static documentation web files to serve"
          },
          {
            "name": "OAUTH_DISCOVERY_URL",
            "description": "Standard OIDC .well-known configuration discovery endpoint"
          },
          {
            "name": "OAUTH_LOGIN_METHOD",
            "description": "UI SSO flow login method: 'redirect' or silent 'iframe'"
          },
          {
            "name": "UI_TITLE",
            "description": "Custom dashboard header title for white-label branding"
          },
          {
            "name": "UI_SUBTITLE",
            "description": "Custom dashboard subtitle text below the header title"
          }
        ]
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "vscode"
  ],
  "keywords": [],
  "provenance": {
    "origin": "official-mcp-registry",
    "originalId": "io.github.nogoo9/no-crd",
    "originalUrl": "https://registry.modelcontextprotocol.io/v0.1/servers/io.github.nogoo9%2Fno-crd/versions/latest",
    "isOfficial": true,
    "status": "active"
  }
}
no-crd — MCP Server 安装与配置 · AgentHub