Dynamic pod spawner & proxy for ephemeral AI agent workspaces on Kubernetes without CRDs
No-crd is an MCP integration. Dynamic pod spawner & proxy for ephemeral AI agent workspaces on Kubernetes without CRDs.
The published npm package is @nogoo9/no-crd, version 0.18.0. Its declared MCP transport is stdio.
The package declares KUBECONFIG: Path to the Kubernetes API credentials configuration file; BASE_URL: Hosting URL subpath prefix for gateways and reverse proxies; STATELESS: Disable in-memory session tracking for stateless execution; TLS_CERT: Local file path containing TLS public certificate (HTTPS); TLS_KEY: Local file path containing TLS private key (HTTPS); TLS_CA: Local file path containing trusted client Certificate Authority; NODE_TLS_REJECT_UNAUTHORIZED: Set to '0' to allow connection to unverified TLS endpoints; REGISTRY_URL: Default container registry for workspace image resolution; TEMPLATES_DIR: Local filesystem directory containing custom YAML/JSON templates; BUILTIN_TEMPLATES: Enable loading of standard pre-configured templates (default: true); AUTH_ENABLED: Enforce JWT verification and user tenant isolation (default: false); JWT_VERIFICATION_REQUIRED: Set to 'false' to skip OIDC cryptographic signature checks; JWT_SECRET: HMAC-SHA symmetric secret key to sign/verify JWT tokens; JWT_PUBLIC_KEY: PEM public key to verify asymmetric OIDC signatures; JWKS_URI: Discovery URI to fetch keys from OIDC provider dynamically; INTROSPECTION_ENDPOINT: RFC 7662 compliant token introspection validation endpoint; OAUTH_CLIENT_ID: Client identifier for OAuth2 authentication flows; OAUTH_CLIENT_SECRET: Client secret credentials used for token introspection; JWT_AUDIENCE: Target audience check value for incoming OIDC tokens; AUTH_ISSUER: Expected token issuer authority check value (e.g. Keycloak); AUTH_SUB_JSONPATH: JSONPath pattern to extract user identity subject from token; AUTH_ADMIN_ROLE: Bypass role name that grants admin access (default: nogoo9-admin); AUTH_ADMIN_USERS: Comma-separated list of user subject IDs (sub) granted admin privileges without OIDC scope/role claims; PROXY_SESSION_TTL: Active lifetime in seconds for signed proxy session cookies; PROXY_SESSION_SECRET: Secret key for session cookie signing; UI_ENABLED: Serve the built-in HTML dashboard (default: true); THEMES_DIR: Filesystem directory to scan for custom CSS themes; THEMES_CONFIGMAP: ConfigMap name storing dynamic CSS theme overrides; DOCS_DIR: Directory containing static documentation web files to serve; OAUTH_DISCOVERY_URL: Standard OIDC .well-known configuration discovery endpoint; OAUTH_LOGIN_METHOD: UI SSO flow login method: 'redirect' or silent 'iframe'; UI_TITLE: Custom dashboard header title for white-label branding; UI_SUBTITLE: Custom dashboard subtitle text below the header title.
This package has launch arguments in its registry record. Use the maintainer’s configuration for those arguments rather than launching it with only the package name.
Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.
View the publisher’s registry entry · Project repository. This profile uses version 0.18.0 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.
Browse related developer tools MCP servers for tools that cover the same kind of work.
| Variable | Description | Required |
|---|---|---|
| KUBECONFIG | Path to the Kubernetes API credentials configuration file | Optional |
| BASE_URL | Hosting URL subpath prefix for gateways and reverse proxies | Optional |
| STATELESS | Disable in-memory session tracking for stateless execution | Optional |
| TLS_CERT | Local file path containing TLS public certificate (HTTPS) | Optional |
| TLS_KEY | Local file path containing TLS private key (HTTPS) | Optional |
| TLS_CA | Local file path containing trusted client Certificate Authority | Optional |
| NODE_TLS_REJECT_UNAUTHORIZED | Set to '0' to allow connection to unverified TLS endpoints | Optional |
| REGISTRY_URL | Default container registry for workspace image resolution | Optional |
| TEMPLATES_DIR | Local filesystem directory containing custom YAML/JSON templates | Optional |
| BUILTIN_TEMPLATES | Enable loading of standard pre-configured templates (default: true) | Optional |
| AUTH_ENABLED | Enforce JWT verification and user tenant isolation (default: false) | Optional |
| JWT_VERIFICATION_REQUIRED | Set to 'false' to skip OIDC cryptographic signature checks | Optional |
| JWT_SECRET | HMAC-SHA symmetric secret key to sign/verify JWT tokens | Optional |
| JWT_PUBLIC_KEY | PEM public key to verify asymmetric OIDC signatures | Optional |
| JWKS_URI | Discovery URI to fetch keys from OIDC provider dynamically | Optional |
| INTROSPECTION_ENDPOINT | RFC 7662 compliant token introspection validation endpoint | Optional |
| OAUTH_CLIENT_ID | Client identifier for OAuth2 authentication flows | Optional |
| OAUTH_CLIENT_SECRET | Client secret credentials used for token introspection | Optional |
| JWT_AUDIENCE | Target audience check value for incoming OIDC tokens | Optional |
| AUTH_ISSUER | Expected token issuer authority check value (e.g. Keycloak) | Optional |
| AUTH_SUB_JSONPATH | JSONPath pattern to extract user identity subject from token | Optional |
| AUTH_ADMIN_ROLE | Bypass role name that grants admin access (default: nogoo9-admin) | Optional |
| AUTH_ADMIN_USERS | Comma-separated list of user subject IDs (sub) granted admin privileges without OIDC scope/role claims | Optional |
| PROXY_SESSION_TTL | Active lifetime in seconds for signed proxy session cookies | Optional |
| PROXY_SESSION_SECRET | Secret key for session cookie signing | Optional |
| UI_ENABLED | Serve the built-in HTML dashboard (default: true) | Optional |
| THEMES_DIR | Filesystem directory to scan for custom CSS themes | Optional |
| THEMES_CONFIGMAP | ConfigMap name storing dynamic CSS theme overrides | Optional |
| DOCS_DIR | Directory containing static documentation web files to serve | Optional |
| OAUTH_DISCOVERY_URL | Standard OIDC .well-known configuration discovery endpoint | Optional |
| OAUTH_LOGIN_METHOD | UI SSO flow login method: 'redirect' or silent 'iframe' | Optional |
| UI_TITLE | Custom dashboard header title for white-label branding | Optional |
| UI_SUBTITLE | Custom dashboard subtitle text below the header title | Optional |
Stop letting your assistant hallucinate n8n node parameters — this server hands it the real schemas, templates and validation.
AWS Labs' official server suite — current AWS docs, CDK guidance, cost analysis and service tools.
Cloud browsers for AI agents — automation sessions that run in Browserbase's fleet, not on your machine.
Workers, KV, R2 and D1 by conversation — Cloudflare's official remote servers for building and observability.
Dashboards, Prometheus and Loki queries, incidents and alerts — observability by conversation.
kubectl with a conversational interface — inspect pods, read logs, diagnose clusters and manage workloads.