muster
projectother official scannedio.github.giantswarm/muster · v
Aggregating MCP server: one authenticated endpoint for every MCP server a platform runs, with meta-tool discovery, toolsets, OAuth 2.1 and SSO through Dex, and Kubernetes custom resources
run it
on your own machines, one way per deploy methodgenerated from the record, not tested yet
CHANGE_ME: built from the repository's Dockerfile, assuming it serves streamable HTTP at :8000/mcp. Nothing has run this yet; the worker replaces it with a tested recipe.
# once, as root:
docker build -t mcp-local/muster:main https://github.com/giantswarm/muster.git#main
#!/usr/bin/env bash
# muster (io.github.giantswarm/muster), recipe docker (generated).
# Generated by Hub for toolset "my-agent"; started by mcp-my-agent-muster.service.
set -euo pipefail
export HOST=127.0.0.1 PORT=8101
exec docker run --rm --name mcp-my-agent-muster -p 127.0.0.1:${PORT}:8000 --env-file /etc/mcp/my-agent.env mcp-local/muster:main
[Unit]
Description=MCP server muster (toolset my-agent), generated by Hub
After=network-online.target docker.service
Wants=network-online.target
[Service]
Type=simple
User=mcp
Group=mcp
SupplementaryGroups=docker
EnvironmentFile=/etc/mcp/my-agent.env
Environment=HOME=/var/lib/mcp/muster
WorkingDirectory=/var/lib/mcp/muster
ExecStart=/opt/mcp/my-agent/bin/muster.sh
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/var/lib/mcp/muster
[Install]
WantedBy=multi-user.target
generated from the record, not tested yet
CHANGE_ME: built from the repository's Dockerfile, assuming it serves streamable HTTP at :8000/mcp. Nothing has run this yet; the worker replaces it with a tested recipe.
docker build -t muster https://github.com/giantswarm/muster.git#main docker run --rm -p 127.0.0.1:8101:8000 muster
generated from the record, not tested yet
CHANGE_ME: built from the repository's Dockerfile, assuming it serves streamable HTTP at :8000/mcp. Nothing has run this yet; the worker replaces it with a tested recipe.
# Generated by Hub for toolset "my-agent" (2026-10-17T23:25:48+00:00).
# Each package server runs behind a stdio->HTTP bridge and listens on localhost only.
# cp .env.example .env # fill the ${VAR}s
# docker compose up -d && bash smoke.sh
# Remote servers are not here: clients reach them directly (see clients/).
name: mcp-my-agent
services:
muster:
build:
context: https://github.com/giantswarm/muster.git#main
ports:
- 127.0.0.1:8101:8000
restart: unless-stopped
x-note: 'CHANGE_ME: built from the repository''s Dockerfile, assuming it serves streamable HTTP at
:8000/mcp. Nothing has run this yet; the worker replaces it with a tested recipe.'
volumes:
npm-cache: {}
uv-cache: {}
generated from the record, not tested yet
CHANGE_ME: built from the repository's Dockerfile, assuming it serves streamable HTTP at :8000/mcp. Nothing has run this yet; the worker replaces it with a tested recipe.
# Generated by Hub for toolset "my-agent" (2026-10-17T23:25:48+00:00).
# kubectl create namespace mcp
# kubectl -n mcp create secret generic mcp-credentials --from-env-file=.env
# kubectl apply -f kubernetes.yaml
# Services are cluster-internal: <name>.mcp.svc.cluster.local:8000/mcp. Put an ingress
# with auth in front before exposing any of them.
apiVersion: v1
kind: Namespace
metadata:
name: mcp
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: muster
namespace: mcp
labels: &id001
app: muster
spec:
replicas: 1
selector:
matchLabels: *id001
template:
metadata:
labels: *id001
spec:
containers:
- name: muster
image: CHANGE_ME
ports:
- containerPort: 8000
name: http
env: []
---
apiVersion: v1
kind: Service
metadata:
name: muster
namespace: mcp
spec:
selector:
app: muster
ports:
- port: 8000
targetPort: http
name: http
generated from the record, not tested yet
CHANGE_ME: built from the repository's Dockerfile, assuming it serves streamable HTTP at :8000/mcp. Nothing has run this yet; the worker replaces it with a tested recipe.
# Generated by Hub for toolset "my-agent" (2026-10-17T23:25:48+00:00).
# Credentials come from the Secret 'mcp-credentials' (kubectl create secret generic ... --from-env-file=.env).
# Each server under `servers` is one Deployment + Service; the keys after it configure
# upstream charts a worker verified.
servers:
muster:
enabled: true
replicas: 1
port: 8000
path: /mcp
container:
name: muster
image: CHANGE_ME
ports:
- containerPort: 8000
name: http
env: []
# helm install my-agent helm/my-agent -n mcp
Scanned github.com/giantswarm/muster at 8278cc654f7e with [email protected][email protected] on 2026-10-17 before the build: 2 dependencies, 3 known vulnerabilities (1 medium, 2 unknown), nothing in the code that looks malicious.
in the cloud
one click: the provider's deploy form opens filled in, in your own account- koyeb
-
Clients connect to the service's https://…koyeb.app address plus /mcp.
- cloud run
-
Cloud Shell clones the repository, builds its Dockerfile and deploys it to Cloud Run.
Cloud Run sends requests to $PORT (8080); the recipe expects :8000, so the server has to read PORT, or set the container port on the service afterwards.
connect to it
copy what your client needs{
"mcpServers": {
"muster": {
"command": "CHANGE_ME",
"args": []
}
}
}
#!/usr/bin/env bash # Registers every server with Claude Code (run once; `claude mcp list` to check). set -euo pipefail set -a; [ -f .env ] && source .env; set +a claude mcp add muster -- CHANGE_ME
{
"mcpServers": {
"muster": {
"command": "CHANGE_ME",
"args": []
}
}
}
{
"servers": {
"muster": {
"type": "stdio",
"command": "CHANGE_ME",
"args": []
}
}
}
name: my-agent target: local servers: - hub: io.github.giantswarm/muster
- not probed yet: tools unpinned, ingest lists them
- no tested recipe for target 'local' yet: build it from https://github.com/giantswarm/muster by hand, or wait for the worker
tools
Probe result: faileddocker: no MCP server found (nothing listens on 8090) arted aggregator manager on http://<host>/mcp" subsystem=Aggregator-Manager time=2026-10-17T21:05:24.445Z level=INFO msg="Started MCP aggregator service" subsystem=Aggregator-Service time=2026-10-17T21:05:24.445Z level=INFO msg="Started static service: mcp-aggregator" subsystem=Orchestrator
runs · 2
the latest tests of this entry by the hub and its workers, newest first| date | worker | method | status | sandbox | reason |
|---|---|---|---|---|---|
| 2026-10-17 21:08 | local-mac-vm | docker | failed | gvisor | docker: no MCP server found (nothing listens on 8090) arted aggregator manager on http://<host>/mcp" subsystem=Aggregator-Manager time=2026-10-17T21:05:24.445Z … |
| 2026-10-17 19:40 | local-mac-vm | docker | failed | gvisor | docker: sandbox: docker build: Dockerfile:10 -------------------- 8 | ARG TARGETOS 9 | ARG TARGETARCH 10 | >>> COPY muster-${TARGETOS}-${TARGETARCH} /muster 11 … |