No-crd MCP Server

Dynamic pod spawner & proxy for ephemeral AI agent workspaces on Kubernetes without CRDs

Local serverstdio

What is the No-crd MCP Server?

No-crd is an MCP integration. Dynamic pod spawner & proxy for ephemeral AI agent workspaces on Kubernetes without CRDs.

Packages and local setup

The published npm package is @nogoo9/no-crd, version 0.18.0. Its declared MCP transport is stdio.

The package declares KUBECONFIG: Path to the Kubernetes API credentials configuration file; BASE_URL: Hosting URL subpath prefix for gateways and reverse proxies; STATELESS: Disable in-memory session tracking for stateless execution; TLS_CERT: Local file path containing TLS public certificate (HTTPS); TLS_KEY: Local file path containing TLS private key (HTTPS); TLS_CA: Local file path containing trusted client Certificate Authority; NODE_TLS_REJECT_UNAUTHORIZED: Set to '0' to allow connection to unverified TLS endpoints; REGISTRY_URL: Default container registry for workspace image resolution; TEMPLATES_DIR: Local filesystem directory containing custom YAML/JSON templates; BUILTIN_TEMPLATES: Enable loading of standard pre-configured templates (default: true); AUTH_ENABLED: Enforce JWT verification and user tenant isolation (default: false); JWT_VERIFICATION_REQUIRED: Set to 'false' to skip OIDC cryptographic signature checks; JWT_SECRET: HMAC-SHA symmetric secret key to sign/verify JWT tokens; JWT_PUBLIC_KEY: PEM public key to verify asymmetric OIDC signatures; JWKS_URI: Discovery URI to fetch keys from OIDC provider dynamically; INTROSPECTION_ENDPOINT: RFC 7662 compliant token introspection validation endpoint; OAUTH_CLIENT_ID: Client identifier for OAuth2 authentication flows; OAUTH_CLIENT_SECRET: Client secret credentials used for token introspection; JWT_AUDIENCE: Target audience check value for incoming OIDC tokens; AUTH_ISSUER: Expected token issuer authority check value (e.g. Keycloak); AUTH_SUB_JSONPATH: JSONPath pattern to extract user identity subject from token; AUTH_ADMIN_ROLE: Bypass role name that grants admin access (default: nogoo9-admin); AUTH_ADMIN_USERS: Comma-separated list of user subject IDs (sub) granted admin privileges without OIDC scope/role claims; PROXY_SESSION_TTL: Active lifetime in seconds for signed proxy session cookies; PROXY_SESSION_SECRET: Secret key for session cookie signing; UI_ENABLED: Serve the built-in HTML dashboard (default: true); THEMES_DIR: Filesystem directory to scan for custom CSS themes; THEMES_CONFIGMAP: ConfigMap name storing dynamic CSS theme overrides; DOCS_DIR: Directory containing static documentation web files to serve; OAUTH_DISCOVERY_URL: Standard OIDC .well-known configuration discovery endpoint; OAUTH_LOGIN_METHOD: UI SSO flow login method: 'redirect' or silent 'iframe'; UI_TITLE: Custom dashboard header title for white-label branding; UI_SUBTITLE: Custom dashboard subtitle text below the header title.

This package has launch arguments in its registry record. Use the maintainer’s configuration for those arguments rather than launching it with only the package name.

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository. This profile uses version 0.18.0 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related developer tools MCP servers for tools that cover the same kind of work.

Configuration

VariableDescriptionRequired
KUBECONFIGPath to the Kubernetes API credentials configuration fileOptional
BASE_URLHosting URL subpath prefix for gateways and reverse proxiesOptional
STATELESSDisable in-memory session tracking for stateless executionOptional
TLS_CERTLocal file path containing TLS public certificate (HTTPS)Optional
TLS_KEYLocal file path containing TLS private key (HTTPS)Optional
TLS_CALocal file path containing trusted client Certificate AuthorityOptional
NODE_TLS_REJECT_UNAUTHORIZEDSet to '0' to allow connection to unverified TLS endpointsOptional
REGISTRY_URLDefault container registry for workspace image resolutionOptional
TEMPLATES_DIRLocal filesystem directory containing custom YAML/JSON templatesOptional
BUILTIN_TEMPLATESEnable loading of standard pre-configured templates (default: true)Optional
AUTH_ENABLEDEnforce JWT verification and user tenant isolation (default: false)Optional
JWT_VERIFICATION_REQUIREDSet to 'false' to skip OIDC cryptographic signature checksOptional
JWT_SECRETHMAC-SHA symmetric secret key to sign/verify JWT tokensOptional
JWT_PUBLIC_KEYPEM public key to verify asymmetric OIDC signaturesOptional
JWKS_URIDiscovery URI to fetch keys from OIDC provider dynamicallyOptional
INTROSPECTION_ENDPOINTRFC 7662 compliant token introspection validation endpointOptional
OAUTH_CLIENT_IDClient identifier for OAuth2 authentication flowsOptional
OAUTH_CLIENT_SECRETClient secret credentials used for token introspectionOptional
JWT_AUDIENCETarget audience check value for incoming OIDC tokensOptional
AUTH_ISSUERExpected token issuer authority check value (e.g. Keycloak)Optional
AUTH_SUB_JSONPATHJSONPath pattern to extract user identity subject from tokenOptional
AUTH_ADMIN_ROLEBypass role name that grants admin access (default: nogoo9-admin)Optional
AUTH_ADMIN_USERSComma-separated list of user subject IDs (sub) granted admin privileges without OIDC scope/role claimsOptional
PROXY_SESSION_TTLActive lifetime in seconds for signed proxy session cookiesOptional
PROXY_SESSION_SECRETSecret key for session cookie signingOptional
UI_ENABLEDServe the built-in HTML dashboard (default: true)Optional
THEMES_DIRFilesystem directory to scan for custom CSS themesOptional
THEMES_CONFIGMAPConfigMap name storing dynamic CSS theme overridesOptional
DOCS_DIRDirectory containing static documentation web files to serveOptional
OAUTH_DISCOVERY_URLStandard OIDC .well-known configuration discovery endpointOptional
OAUTH_LOGIN_METHODUI SSO flow login method: 'redirect' or silent 'iframe'Optional
UI_TITLECustom dashboard header title for white-label brandingOptional
UI_SUBTITLECustom dashboard subtitle text below the header titleOptional