x=hub

your toolset

    build deployment
    sign in

    no-crd

    mcpkey · package
    io.github.nogoo9/no-crd · v0.18.0
    deploy just this

    Dynamic pod spawner & proxy for ephemeral AI agent workspaces on Kubernetes without CRDs

    run it

    on your own machines, one way per deploy method
    generated from the record, not tested yet
    #!/usr/bin/env bash
# no-crd (io.github.nogoo9/no-crd), recipe baremetal (generated).
# Generated by Hub for toolset "my-agent"; started by mcp-my-agent-no-crd.service.
set -euo pipefail
export HOST=127.0.0.1 PORT=8101
exec npx -y supergateway@4 --stdio 'npx -y @nogoo9/[email protected]' --outputTransport streamableHttp --stateful --host 127.0.0.1 --port 8101 --streamableHttpPath /mcp --healthEndpoint /healthz

[Unit]
Description=MCP server no-crd (toolset my-agent), generated by Hub
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=mcp
Group=mcp
EnvironmentFile=/etc/mcp/my-agent.env
Environment=HOME=/var/lib/mcp/no-crd
WorkingDirectory=/var/lib/mcp/no-crd
ExecStart=/opt/mcp/my-agent/bin/no-crd.sh
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/var/lib/mcp/no-crd

[Install]
WantedBy=multi-user.target
    generated from the record, not tested yet
    docker run --rm -p 127.0.0.1:8101:8000 -e KUBECONFIG -e BASE_URL -e STATELESS -e TLS_CERT -e TLS_KEY -e TLS_CA -e NODE_TLS_REJECT_UNAUTHORIZED -e REGISTRY_URL -e TEMPLATES_DIR -e BUILTIN_TEMPLATES -e AUTH_ENABLED -e JWT_VERIFICATION_REQUIRED -e JWT_SECRET -e JWT_PUBLIC_KEY -e JWKS_URI -e INTROSPECTION_ENDPOINT -e OAUTH_CLIENT_ID -e OAUTH_CLIENT_SECRET -e JWT_AUDIENCE -e AUTH_ISSUER -e AUTH_SUB_JSONPATH -e AUTH_ADMIN_ROLE -e AUTH_ADMIN_USERS -e PROXY_SESSION_TTL -e PROXY_SESSION_SECRET -e UI_ENABLED -e THEMES_DIR -e THEMES_CONFIGMAP -e DOCS_DIR -e OAUTH_DISCOVERY_URL -e OAUTH_LOGIN_METHOD -e UI_TITLE -e UI_SUBTITLE node:22-alpine sh -c 'npx -y supergateway@4 --stdio '"'"'npx -y @nogoo9/[email protected]'"'"' --outputTransport streamableHttp --stateful --host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint /healthz'
    generated from the record, not tested yet
    # Generated by Hub for toolset "my-agent" (2026-10-17T23:58:22+00:00).
# Each package server runs behind a stdio->HTTP bridge and listens on localhost only.
#   cp .env.example .env    # fill the ${VAR}s
#   docker compose up -d && bash smoke.sh
# Remote servers are not here: clients reach them directly (see clients/).
name: mcp-my-agent
services:
  no-crd:
    image: node:22-alpine
    command:
    - sh
    - -c
    - npx -y supergateway@4 --stdio 'npx -y @nogoo9/[email protected]' --outputTransport streamableHttp --stateful
      --host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint /healthz
    ports:
    - 127.0.0.1:8101:8000
    volumes:
    - npm-cache:/root/.npm
    healthcheck:
      test:
      - CMD-SHELL
      - wget -qO- http://127.0.0.1:8000/healthz || exit 1
      interval: 30s
      timeout: 5s
      retries: 5
      start_period: 2m
    restart: unless-stopped
    environment:
      KUBECONFIG: ${KUBECONFIG}
      BASE_URL: ${BASE_URL}
      STATELESS: ${STATELESS}
      TLS_CERT: ${TLS_CERT}
      TLS_KEY: ${TLS_KEY}
      TLS_CA: ${TLS_CA}
      NODE_TLS_REJECT_UNAUTHORIZED: ${NODE_TLS_REJECT_UNAUTHORIZED}
      REGISTRY_URL: ${REGISTRY_URL}
      TEMPLATES_DIR: ${TEMPLATES_DIR}
      BUILTIN_TEMPLATES: ${BUILTIN_TEMPLATES}
      AUTH_ENABLED: ${AUTH_ENABLED}
      JWT_VERIFICATION_REQUIRED: ${JWT_VERIFICATION_REQUIRED}
      JWT_SECRET: ${JWT_SECRET}
      JWT_PUBLIC_KEY: ${JWT_PUBLIC_KEY}
      JWKS_URI: ${JWKS_URI}
      INTROSPECTION_ENDPOINT: ${INTROSPECTION_ENDPOINT}
      OAUTH_CLIENT_ID: ${OAUTH_CLIENT_ID}
      OAUTH_CLIENT_SECRET: ${OAUTH_CLIENT_SECRET}
      JWT_AUDIENCE: ${JWT_AUDIENCE}
      AUTH_ISSUER: ${AUTH_ISSUER}
      AUTH_SUB_JSONPATH: ${AUTH_SUB_JSONPATH}
      AUTH_ADMIN_ROLE: ${AUTH_ADMIN_ROLE}
      AUTH_ADMIN_USERS: ${AUTH_ADMIN_USERS}
      PROXY_SESSION_TTL: ${PROXY_SESSION_TTL}
      PROXY_SESSION_SECRET: ${PROXY_SESSION_SECRET}
      UI_ENABLED: ${UI_ENABLED}
      THEMES_DIR: ${THEMES_DIR}
      THEMES_CONFIGMAP: ${THEMES_CONFIGMAP}
      DOCS_DIR: ${DOCS_DIR}
      OAUTH_DISCOVERY_URL: ${OAUTH_DISCOVERY_URL}
      OAUTH_LOGIN_METHOD: ${OAUTH_LOGIN_METHOD}
      UI_TITLE: ${UI_TITLE}
      UI_SUBTITLE: ${UI_SUBTITLE}
volumes:
  npm-cache: {}
  uv-cache: {}
    generated from the record, not tested yet
    # Generated by Hub for toolset "my-agent" (2026-10-17T23:58:22+00:00).
#   kubectl create namespace mcp
#   kubectl -n mcp create secret generic mcp-credentials --from-env-file=.env
#   kubectl apply -f kubernetes.yaml
# Services are cluster-internal: <name>.mcp.svc.cluster.local:8000/mcp. Put an ingress
# with auth in front before exposing any of them.
apiVersion: v1
kind: Namespace
metadata:
  name: mcp
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: no-crd
  namespace: mcp
  labels: &id001
    app: no-crd
spec:
  replicas: 1
  selector:
    matchLabels: *id001
  template:
    metadata:
      labels: *id001
    spec:
      containers:
      - name: no-crd
        image: node:22-alpine
        ports:
        - containerPort: 8000
          name: http
        env:
        - name: KUBECONFIG
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: KUBECONFIG
        - name: BASE_URL
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: BASE_URL
        - name: STATELESS
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: STATELESS
        - name: TLS_CERT
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: TLS_CERT
        - name: TLS_KEY
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: TLS_KEY
        - name: TLS_CA
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: TLS_CA
        - name: NODE_TLS_REJECT_UNAUTHORIZED
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: NODE_TLS_REJECT_UNAUTHORIZED
        - name: REGISTRY_URL
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: REGISTRY_URL
        - name: TEMPLATES_DIR
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: TEMPLATES_DIR
        - name: BUILTIN_TEMPLATES
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: BUILTIN_TEMPLATES
        - name: AUTH_ENABLED
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: AUTH_ENABLED
        - name: JWT_VERIFICATION_REQUIRED
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: JWT_VERIFICATION_REQUIRED
        - name: JWT_SECRET
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: JWT_SECRET
        - name: JWT_PUBLIC_KEY
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: JWT_PUBLIC_KEY
        - name: JWKS_URI
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: JWKS_URI
        - name: INTROSPECTION_ENDPOINT
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: INTROSPECTION_ENDPOINT
        - name: OAUTH_CLIENT_ID
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: OAUTH_CLIENT_ID
        - name: OAUTH_CLIENT_SECRET
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: OAUTH_CLIENT_SECRET
        - name: JWT_AUDIENCE
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: JWT_AUDIENCE
        - name: AUTH_ISSUER
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: AUTH_ISSUER
        - name: AUTH_SUB_JSONPATH
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: AUTH_SUB_JSONPATH
        - name: AUTH_ADMIN_ROLE
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: AUTH_ADMIN_ROLE
        - name: AUTH_ADMIN_USERS
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: AUTH_ADMIN_USERS
        - name: PROXY_SESSION_TTL
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: PROXY_SESSION_TTL
        - name: PROXY_SESSION_SECRET
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: PROXY_SESSION_SECRET
        - name: UI_ENABLED
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: UI_ENABLED
        - name: THEMES_DIR
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: THEMES_DIR
        - name: THEMES_CONFIGMAP
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: THEMES_CONFIGMAP
        - name: DOCS_DIR
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: DOCS_DIR
        - name: OAUTH_DISCOVERY_URL
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: OAUTH_DISCOVERY_URL
        - name: OAUTH_LOGIN_METHOD
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: OAUTH_LOGIN_METHOD
        - name: UI_TITLE
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: UI_TITLE
        - name: UI_SUBTITLE
          valueFrom:
            secretKeyRef:
              name: mcp-credentials
              key: UI_SUBTITLE
        command:
        - sh
        - -c
        - npx -y supergateway@4 --stdio 'npx -y @nogoo9/[email protected]' --outputTransport streamableHttp
          --stateful --host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint /healthz
        readinessProbe:
          httpGet:
            path: /healthz
            port: http
          initialDelaySeconds: 10
---
apiVersion: v1
kind: Service
metadata:
  name: no-crd
  namespace: mcp
spec:
  selector:
    app: no-crd
  ports:
  - port: 8000
    targetPort: http
    name: http
    generated from the record, not tested yet
    # Generated by Hub for toolset "my-agent" (2026-10-17T23:58:22+00:00).
# Credentials come from the Secret 'mcp-credentials' (kubectl create secret generic ... --from-env-file=.env).
# Each server under `servers` is one Deployment + Service; the keys after it configure
# upstream charts a worker verified.
servers:
  no-crd:
    enabled: true
    replicas: 1
    port: 8000
    path: /mcp
    container:
      name: no-crd
      image: node:22-alpine
      ports:
      - containerPort: 8000
        name: http
      env:
      - name: KUBECONFIG
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: KUBECONFIG
      - name: BASE_URL
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: BASE_URL
      - name: STATELESS
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: STATELESS
      - name: TLS_CERT
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: TLS_CERT
      - name: TLS_KEY
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: TLS_KEY
      - name: TLS_CA
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: TLS_CA
      - name: NODE_TLS_REJECT_UNAUTHORIZED
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: NODE_TLS_REJECT_UNAUTHORIZED
      - name: REGISTRY_URL
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: REGISTRY_URL
      - name: TEMPLATES_DIR
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: TEMPLATES_DIR
      - name: BUILTIN_TEMPLATES
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: BUILTIN_TEMPLATES
      - name: AUTH_ENABLED
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: AUTH_ENABLED
      - name: JWT_VERIFICATION_REQUIRED
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: JWT_VERIFICATION_REQUIRED
      - name: JWT_SECRET
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: JWT_SECRET
      - name: JWT_PUBLIC_KEY
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: JWT_PUBLIC_KEY
      - name: JWKS_URI
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: JWKS_URI
      - name: INTROSPECTION_ENDPOINT
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: INTROSPECTION_ENDPOINT
      - name: OAUTH_CLIENT_ID
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: OAUTH_CLIENT_ID
      - name: OAUTH_CLIENT_SECRET
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: OAUTH_CLIENT_SECRET
      - name: JWT_AUDIENCE
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: JWT_AUDIENCE
      - name: AUTH_ISSUER
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: AUTH_ISSUER
      - name: AUTH_SUB_JSONPATH
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: AUTH_SUB_JSONPATH
      - name: AUTH_ADMIN_ROLE
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: AUTH_ADMIN_ROLE
      - name: AUTH_ADMIN_USERS
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: AUTH_ADMIN_USERS
      - name: PROXY_SESSION_TTL
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: PROXY_SESSION_TTL
      - name: PROXY_SESSION_SECRET
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: PROXY_SESSION_SECRET
      - name: UI_ENABLED
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: UI_ENABLED
      - name: THEMES_DIR
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: THEMES_DIR
      - name: THEMES_CONFIGMAP
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: THEMES_CONFIGMAP
      - name: DOCS_DIR
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: DOCS_DIR
      - name: OAUTH_DISCOVERY_URL
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: OAUTH_DISCOVERY_URL
      - name: OAUTH_LOGIN_METHOD
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: OAUTH_LOGIN_METHOD
      - name: UI_TITLE
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: UI_TITLE
      - name: UI_SUBTITLE
        valueFrom:
          secretKeyRef:
            name: mcp-credentials
            key: UI_SUBTITLE
      command:
      - sh
      - -c
      - npx -y supergateway@4 --stdio 'npx -y @nogoo9/[email protected]' --outputTransport streamableHttp
        --stateful --host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint /healthz
      readinessProbe:
        httpGet:
          path: /healthz
          port: http
        initialDelaySeconds: 10

# helm install my-agent helm/my-agent -n mcp

    in the cloud

    one click: the provider's deploy form opens filled in, in your own account
    koyeb
    deploy to koyeb

    The form opens with CHANGE_ME for each value you supply: KUBECONFIG, BASE_URL, STATELESS, TLS_CERT, TLS_KEY, TLS_CA, NODE_TLS_REJECT_UNAUTHORIZED, REGISTRY_URL, TEMPLATES_DIR, BUILTIN_TEMPLATES, AUTH_ENABLED, JWT_VERIFICATION_REQUIRED, JWT_SECRET, JWT_PUBLIC_KEY, JWKS_URI, INTROSPECTION_ENDPOINT, OAUTH_CLIENT_ID, OAUTH_CLIENT_SECRET, JWT_AUDIENCE, AUTH_ISSUER, AUTH_SUB_JSONPATH, AUTH_ADMIN_ROLE, AUTH_ADMIN_USERS, PROXY_SESSION_TTL, PROXY_SESSION_SECRET, UI_ENABLED, THEMES_DIR, THEMES_CONFIGMAP, DOCS_DIR, OAUTH_DISCOVERY_URL, OAUTH_LOGIN_METHOD, UI_TITLE, UI_SUBTITLE. Fill them in before you deploy.

    Clients connect to the service's https://…koyeb.app address plus /mcp.

    azure
    deploy to azuretemplate

    A Container Apps environment with one app per server, each with HTTPS ingress and one replica. The portal asks for each value you supply as a secure parameter; the deployment's outputs list the endpoints.

    connect to it

    copy what your client needs
    npx -y @nogoo9/[email protected]
# env: KUBECONFIG, BASE_URL, STATELESS, TLS_CERT, TLS_KEY, TLS_CA, NODE_TLS_REJECT_UNAUTHORIZED, REGISTRY_URL, TEMPLATES_DIR, BUILTIN_TEMPLATES, AUTH_ENABLED, JWT_VERIFICATION_REQUIRED, JWT_SECRET, JWT_PUBLIC_KEY, JWKS_URI, INTROSPECTION_ENDPOINT, OAUTH_CLIENT_ID, OAUTH_CLIENT_SECRET, JWT_AUDIENCE, AUTH_ISSUER, AUTH_SUB_JSONPATH, AUTH_ADMIN_ROLE, AUTH_ADMIN_USERS, PROXY_SESSION_TTL, PROXY_SESSION_SECRET, UI_ENABLED, THEMES_DIR, THEMES_CONFIGMAP, DOCS_DIR, OAUTH_DISCOVERY_URL, OAUTH_LOGIN_METHOD, UI_TITLE, UI_SUBTITLE
    {
  "mcpServers": {
    "no-crd": {
      "command": "npx",
      "args": [
        "-y",
        "@nogoo9/[email protected]"
      ],
      "env": {
        "KUBECONFIG": "${KUBECONFIG}",
        "BASE_URL": "${BASE_URL}",
        "STATELESS": "${STATELESS}",
        "TLS_CERT": "${TLS_CERT}",
        "TLS_KEY": "${TLS_KEY}",
        "TLS_CA": "${TLS_CA}",
        "NODE_TLS_REJECT_UNAUTHORIZED": "${NODE_TLS_REJECT_UNAUTHORIZED}",
        "REGISTRY_URL": "${REGISTRY_URL}",
        "TEMPLATES_DIR": "${TEMPLATES_DIR}",
        "BUILTIN_TEMPLATES": "${BUILTIN_TEMPLATES}",
        "AUTH_ENABLED": "${AUTH_ENABLED}",
        "JWT_VERIFICATION_REQUIRED": "${JWT_VERIFICATION_REQUIRED}",
        "JWT_SECRET": "${JWT_SECRET}",
        "JWT_PUBLIC_KEY": "${JWT_PUBLIC_KEY}",
        "JWKS_URI": "${JWKS_URI}",
        "INTROSPECTION_ENDPOINT": "${INTROSPECTION_ENDPOINT}",
        "OAUTH_CLIENT_ID": "${OAUTH_CLIENT_ID}",
        "OAUTH_CLIENT_SECRET": "${OAUTH_CLIENT_SECRET}",
        "JWT_AUDIENCE": "${JWT_AUDIENCE}",
        "AUTH_ISSUER": "${AUTH_ISSUER}",
        "AUTH_SUB_JSONPATH": "${AUTH_SUB_JSONPATH}",
        "AUTH_ADMIN_ROLE": "${AUTH_ADMIN_ROLE}",
        "AUTH_ADMIN_USERS": "${AUTH_ADMIN_USERS}",
        "PROXY_SESSION_TTL": "${PROXY_SESSION_TTL}",
        "PROXY_SESSION_SECRET": "${PROXY_SESSION_SECRET}",
        "UI_ENABLED": "${UI_ENABLED}",
        "THEMES_DIR": "${THEMES_DIR}",
        "THEMES_CONFIGMAP": "${THEMES_CONFIGMAP}",
        "DOCS_DIR": "${DOCS_DIR}",
        "OAUTH_DISCOVERY_URL": "${OAUTH_DISCOVERY_URL}",
        "OAUTH_LOGIN_METHOD": "${OAUTH_LOGIN_METHOD}",
        "UI_TITLE": "${UI_TITLE}",
        "UI_SUBTITLE": "${UI_SUBTITLE}"
      }
    }
  }
}
    #!/usr/bin/env bash
# Registers every server with Claude Code (run once; `claude mcp list` to check).
set -euo pipefail
set -a; [ -f .env ] && source .env; set +a
claude mcp add no-crd -e "KUBECONFIG=${KUBECONFIG}" -e "BASE_URL=${BASE_URL}" -e "STATELESS=${STATELESS}" -e "TLS_CERT=${TLS_CERT}" -e "TLS_KEY=${TLS_KEY}" -e "TLS_CA=${TLS_CA}" -e "NODE_TLS_REJECT_UNAUTHORIZED=${NODE_TLS_REJECT_UNAUTHORIZED}" -e "REGISTRY_URL=${REGISTRY_URL}" -e "TEMPLATES_DIR=${TEMPLATES_DIR}" -e "BUILTIN_TEMPLATES=${BUILTIN_TEMPLATES}" -e "AUTH_ENABLED=${AUTH_ENABLED}" -e "JWT_VERIFICATION_REQUIRED=${JWT_VERIFICATION_REQUIRED}" -e "JWT_SECRET=${JWT_SECRET}" -e "JWT_PUBLIC_KEY=${JWT_PUBLIC_KEY}" -e "JWKS_URI=${JWKS_URI}" -e "INTROSPECTION_ENDPOINT=${INTROSPECTION_ENDPOINT}" -e "OAUTH_CLIENT_ID=${OAUTH_CLIENT_ID}" -e "OAUTH_CLIENT_SECRET=${OAUTH_CLIENT_SECRET}" -e "JWT_AUDIENCE=${JWT_AUDIENCE}" -e "AUTH_ISSUER=${AUTH_ISSUER}" -e "AUTH_SUB_JSONPATH=${AUTH_SUB_JSONPATH}" -e "AUTH_ADMIN_ROLE=${AUTH_ADMIN_ROLE}" -e "AUTH_ADMIN_USERS=${AUTH_ADMIN_USERS}" -e "PROXY_SESSION_TTL=${PROXY_SESSION_TTL}" -e "PROXY_SESSION_SECRET=${PROXY_SESSION_SECRET}" -e "UI_ENABLED=${UI_ENABLED}" -e "THEMES_DIR=${THEMES_DIR}" -e "THEMES_CONFIGMAP=${THEMES_CONFIGMAP}" -e "DOCS_DIR=${DOCS_DIR}" -e "OAUTH_DISCOVERY_URL=${OAUTH_DISCOVERY_URL}" -e "OAUTH_LOGIN_METHOD=${OAUTH_LOGIN_METHOD}" -e "UI_TITLE=${UI_TITLE}" -e "UI_SUBTITLE=${UI_SUBTITLE}" -- npx -y @nogoo9/[email protected]

    {
  "mcpServers": {
    "no-crd": {
      "command": "npx",
      "args": [
        "-y",
        "@nogoo9/[email protected]"
      ],
      "env": {
        "KUBECONFIG": "${KUBECONFIG}",
        "BASE_URL": "${BASE_URL}",
        "STATELESS": "${STATELESS}",
        "TLS_CERT": "${TLS_CERT}",
        "TLS_KEY": "${TLS_KEY}",
        "TLS_CA": "${TLS_CA}",
        "NODE_TLS_REJECT_UNAUTHORIZED": "${NODE_TLS_REJECT_UNAUTHORIZED}",
        "REGISTRY_URL": "${REGISTRY_URL}",
        "TEMPLATES_DIR": "${TEMPLATES_DIR}",
        "BUILTIN_TEMPLATES": "${BUILTIN_TEMPLATES}",
        "AUTH_ENABLED": "${AUTH_ENABLED}",
        "JWT_VERIFICATION_REQUIRED": "${JWT_VERIFICATION_REQUIRED}",
        "JWT_SECRET": "${JWT_SECRET}",
        "JWT_PUBLIC_KEY": "${JWT_PUBLIC_KEY}",
        "JWKS_URI": "${JWKS_URI}",
        "INTROSPECTION_ENDPOINT": "${INTROSPECTION_ENDPOINT}",
        "OAUTH_CLIENT_ID": "${OAUTH_CLIENT_ID}",
        "OAUTH_CLIENT_SECRET": "${OAUTH_CLIENT_SECRET}",
        "JWT_AUDIENCE": "${JWT_AUDIENCE}",
        "AUTH_ISSUER": "${AUTH_ISSUER}",
        "AUTH_SUB_JSONPATH": "${AUTH_SUB_JSONPATH}",
        "AUTH_ADMIN_ROLE": "${AUTH_ADMIN_ROLE}",
        "AUTH_ADMIN_USERS": "${AUTH_ADMIN_USERS}",
        "PROXY_SESSION_TTL": "${PROXY_SESSION_TTL}",
        "PROXY_SESSION_SECRET": "${PROXY_SESSION_SECRET}",
        "UI_ENABLED": "${UI_ENABLED}",
        "THEMES_DIR": "${THEMES_DIR}",
        "THEMES_CONFIGMAP": "${THEMES_CONFIGMAP}",
        "DOCS_DIR": "${DOCS_DIR}",
        "OAUTH_DISCOVERY_URL": "${OAUTH_DISCOVERY_URL}",
        "OAUTH_LOGIN_METHOD": "${OAUTH_LOGIN_METHOD}",
        "UI_TITLE": "${UI_TITLE}",
        "UI_SUBTITLE": "${UI_SUBTITLE}"
      }
    }
  }
}
    {
  "servers": {
    "no-crd": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@nogoo9/[email protected]"
      ],
      "env": {
        "KUBECONFIG": "${KUBECONFIG}",
        "BASE_URL": "${BASE_URL}",
        "STATELESS": "${STATELESS}",
        "TLS_CERT": "${TLS_CERT}",
        "TLS_KEY": "${TLS_KEY}",
        "TLS_CA": "${TLS_CA}",
        "NODE_TLS_REJECT_UNAUTHORIZED": "${NODE_TLS_REJECT_UNAUTHORIZED}",
        "REGISTRY_URL": "${REGISTRY_URL}",
        "TEMPLATES_DIR": "${TEMPLATES_DIR}",
        "BUILTIN_TEMPLATES": "${BUILTIN_TEMPLATES}",
        "AUTH_ENABLED": "${AUTH_ENABLED}",
        "JWT_VERIFICATION_REQUIRED": "${JWT_VERIFICATION_REQUIRED}",
        "JWT_SECRET": "${JWT_SECRET}",
        "JWT_PUBLIC_KEY": "${JWT_PUBLIC_KEY}",
        "JWKS_URI": "${JWKS_URI}",
        "INTROSPECTION_ENDPOINT": "${INTROSPECTION_ENDPOINT}",
        "OAUTH_CLIENT_ID": "${OAUTH_CLIENT_ID}",
        "OAUTH_CLIENT_SECRET": "${OAUTH_CLIENT_SECRET}",
        "JWT_AUDIENCE": "${JWT_AUDIENCE}",
        "AUTH_ISSUER": "${AUTH_ISSUER}",
        "AUTH_SUB_JSONPATH": "${AUTH_SUB_JSONPATH}",
        "AUTH_ADMIN_ROLE": "${AUTH_ADMIN_ROLE}",
        "AUTH_ADMIN_USERS": "${AUTH_ADMIN_USERS}",
        "PROXY_SESSION_TTL": "${PROXY_SESSION_TTL}",
        "PROXY_SESSION_SECRET": "${PROXY_SESSION_SECRET}",
        "UI_ENABLED": "${UI_ENABLED}",
        "THEMES_DIR": "${THEMES_DIR}",
        "THEMES_CONFIGMAP": "${THEMES_CONFIGMAP}",
        "DOCS_DIR": "${DOCS_DIR}",
        "OAUTH_DISCOVERY_URL": "${OAUTH_DISCOVERY_URL}",
        "OAUTH_LOGIN_METHOD": "${OAUTH_LOGIN_METHOD}",
        "UI_TITLE": "${UI_TITLE}",
        "UI_SUBTITLE": "${UI_SUBTITLE}"
      }
    }
  }
}
    name: my-agent
target: local
servers:
- hub: io.github.nogoo9/no-crd
    • not probed yet: tools unpinned, ingest lists them

    tools

    Not probed yetThe tools appear once the hub or its worker has listed this entry. Running it still works: your client lists them on first start.