No Crd
Gives Claude the ability to spawn ephemeral Kubernetes pods on demand and proxy traffic to them without needing CRDs or cluster operators. It wraps the Kubernetes API with MCP tools for creating pods from ConfigMap templates, managing workspace lifecycles, and routing HTTP requests to running containers. Built with a reverse proxy that handles session cookies and token validation, plus a web UI for browsing workspace files. The main use case is letting AI agents provision isolated sandbox environments for code execution, data processing, or interactive sessions. Works across Node, Bun, and Deno runtimes. Handles the certificate plumbing so Bun and Deno can authenticate against Kubernetes clusters without manual TLS configuration.
- GitHub stars
- 2
- tools
- 18
- auth
- Secret needed
- transport
- STDIO
- env vars
- 24
- last updated
- Aug 12, 2026
Tools
18 toolsPublic tool metadata for what this MCP can expose to an agent.
list_podsRetrieve a summary of pods in the namespace. Filters by labelSelector, fieldSelector, and limit.
Retrieve a summary of pods in the namespace. Filters by labelSelector, fieldSelector, and limit.
No parameter schema in public metadata yet.
get_podFetch full Kubernetes API JSON payload for a target pod name.
Fetch full Kubernetes API JSON payload for a target pod name.
No parameter schema in public metadata yet.
create_podCreate a custom pod with direct container/volume specifications.
Create a custom pod with direct container/volume specifications.
No parameter schema in public metadata yet.
patch_podApply a Strategic Merge Patch to modify labels, annotations, or container resource limits dynamically.
Apply a Strategic Merge Patch to modify labels, annotations, or container resource limits dynamically.
No parameter schema in public metadata yet.
delete_podTerminate a pod with optional gracePeriodSeconds.
Terminate a pod with optional gracePeriodSeconds.
No parameter schema in public metadata yet.
get_pod_logsFetch logs for a container with options like tailLines, sinceSeconds, timestamps, limitBytes, and previous.
Fetch logs for a container with options like tailLines, sinceSeconds, timestamps, limitBytes, and previous.
No parameter schema in public metadata yet.
list_namespacesList all namespaces accessible with current credentials.
List all namespaces accessible with current credentials.
No parameter schema in public metadata yet.
list_registry_imagesList catalog images from the configured REGISTRY_URL.
List catalog images from the configured REGISTRY_URL.
No parameter schema in public metadata yet.
list_templatesShow available templates.
Show available templates.
No parameter schema in public metadata yet.
get_templateGet the raw pod template spec.
Get the raw pod template spec.
No parameter schema in public metadata yet.
create_templateStore a new pod template spec.
Store a new pod template spec.
No parameter schema in public metadata yet.
update_templateUpdate labels, annotations, or specs on an existing template.
Update labels, annotations, or specs on an existing template.
No parameter schema in public metadata yet.
delete_templateDelete a template.
Delete a template.
No parameter schema in public metadata yet.
create_pod_from_templateSpawn a pod using a template, applying container overrides (environment variables, commands, resources) and top-level overrides.
Spawn a pod using a template, applying container overrides (environment variables, commands, resources) and top-level overrides.
No parameter schema in public metadata yet.
list_workspacesList active agent workspaces (with JWT/owner mapping support).
List active agent workspaces (with JWT/owner mapping support).
No parameter schema in public metadata yet.
spawn_workspaceSpawn a workspace sandbox pod with context validation, init containers, pre-stop hooks, and IAM role mapping.
Spawn a workspace sandbox pod with context validation, init containers, pre-stop hooks, and IAM role mapping.
No parameter schema in public metadata yet.
stop_workspaceClean up and terminate the workspace pod.
Clean up and terminate the workspace pod.
No parameter schema in public metadata yet.
current_namespaceReturns active namespace and access mode.
Returns active namespace and access mode.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
KUBECONFIGPath to the Kubernetes API credentials configuration file
BASE_URLHosting URL subpath prefix for gateways and reverse proxies
STATELESSDisable in-memory session tracking for stateless execution
TLS_CERTLocal file path containing TLS public certificate (HTTPS)
TLS_KEYsecretLocal file path containing TLS private key (HTTPS)
TLS_CALocal file path containing trusted client Certificate Authority
NODE_TLS_REJECT_UNAUTHORIZEDSet to '0' to allow connection to unverified TLS endpoints
REGISTRY_URLDefault container registry for workspace image resolution
TEMPLATES_DIRLocal filesystem directory containing custom YAML/JSON templates
BUILTIN_TEMPLATESEnable loading of standard pre-configured templates (default: true)
AUTH_ENABLEDEnforce JWT verification and user tenant isolation (default: false)
JWT_VERIFICATION_REQUIREDSet to 'false' to skip OIDC cryptographic signature checks
JWT_SECRETsecretHMAC-SHA symmetric secret key to sign/verify JWT tokens
JWT_PUBLIC_KEYsecretPEM public key to verify asymmetric OIDC signatures
JWKS_URIDiscovery URI to fetch keys from OIDC provider dynamically
INTROSPECTION_ENDPOINTRFC 7662 compliant token introspection validation endpoint
OAUTH_CLIENT_IDClient identifier for OAuth2 authentication flows
OAUTH_CLIENT_SECRETsecretClient secret credentials used for token introspection
JWT_AUDIENCETarget audience check value for incoming OIDC tokens
AUTH_ISSUERExpected token issuer authority check value (e.g. Keycloak)
AUTH_SUB_JSONPATHJSONPath pattern to extract user identity subject from token
AUTH_ADMIN_ROLEBypass role name that grants admin access (default: nogoo9-admin)
AUTH_ADMIN_USERSComma-separated list of user subject IDs (sub) granted admin privileges without OIDC scope/role claims
PROXY_SESSION_TTLActive lifetime in seconds for signed proxy session cookies
Readme
@nogoo9/no-crd
nogoo9 logo
no-crd Dashboard
Agent-Driven, On-Demand Pod Orchestration in Kubernetes — Without Custom Resource Definitions.
Details
- Repository
- github.com/nogoo9/no-crd
- Categories
- AI & LLM Tools, Cloud & Infrastructure
- Package
@nogoo9/no-crd- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active
More from nogoo9
Related AI & LLM Tools MCP servers
View all
Pqs Mcp Serveronchainaiintel/pqs-mcp-serverPQS scores any prompt before the model runs. 8 dimensions. 5 frameworks. Pre-flight, not post-hoc.2stars
Spec Score Mcpopenpoem/spec-score-mcpScore your specs before feeding them to an LLM. MCP server with radar chart visualization.2stars
Bolor Brain Mcpphotoxpedia/bolor-brain-mcpCognitive architecture MCP server with memory, learning, and contextual understanding2stars
Hindsight MCPrbfinch/hindsight-mcpMCP server for AI-assisted coding with development history: git, tests, Copilot.2stars
Resemble AIresemble-ai/resemble-mcpResemble AI: deepfake, AI-text, and site agent detection, Detect Agents, intelligence, watermarks.2stars
Power Automate Mcp Serversapientsai/power-automate-mcp-serverInspect, operate, and author Microsoft Power Automate cloud flows from an agent context.2stars