Infrabroker MCP Server

by luisgf Your server? Claim it

local only

Infrabroker runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 21 Oct 2026.

SSH & Kubernetes access broker for AI agents; the model never touches a credential.

—

Installs / week

not published

Stars

6 open issues

21 Oct 2026

Last commit

from GitHub

GPL-3.0

License

What the code does

We read the source, 1 d ago · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Builds a file path from a variable cmd/infrabroker-shim/main.go:134, internal/initcmd/pki.go:41, cmd/broker-ctl/clientconfig.go:200

    f, err := os.OpenFile(filepath.Join(dir, nonce), os.O_CREATE|os.O_EXCL|os.O_WRONLY, 0o600)

Touches key and credential files internal/initcmd/initcmd.go:27

    importSSH := fs.Bool("import-ssh-config", false, "import hosts from ~/.ssh/config (Include followed; ssh -G + known_hosts / keyscan; ProxyJump/ProxyCommand hosts are skipped)")

Touches key and credential files internal/initcmd/initcmd.go:27

    importSSH := fs.Bool("import-ssh-config", false, "import hosts from ~/.ssh/config (Include followed; ssh -G + known_hosts / keyscan; ProxyJump/ProxyCommand hosts are skipped)")

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Alternatives to Infrabroker

same job, measured the same way

MCP Kubernetes

by dockndevai

Kubernetes monitoring & ops for AI agents — safe-by-default access modes and guards.

394 installs/wk local only

K8s MCP Server (Go)

by kaneg

Safe Kubernetes access for AI agents via MCP. Read-only by default, with explicit permission modes.

local only

Kubernetes MCP Server

by containers

A Model Context Protocol (MCP) server for Kubernetes and OpenShift

59 414 installs/wk local only

OpenShift MCP Server

by sanjaypsachdev

OpenShift/Kubernetes cluster management via the oc CLI for MCP clients

49 installs/wk local only

Kubeleash

by kubeleash

Kubernetes MCP server with RBAC-style, context-scoped guardrails for AI agents.

local only

KubeDrive

by aleksskoz

Your Kubernetes clusters for AI agents through the KubeDrive desktop app, without a kubeconfig.

local only

K8gentS — Kubernetes RCA MCP Server

by jdoornink

Kubernetes RCA agent that sandboxes its own AI with OPA Gatekeeper. MCP-ready for any client.

local only

No Crd

by nogoo9

Dynamic pod spawner & proxy for ephemeral AI agent workspaces on Kubernetes without CRDs

168 installs/wk local only

Infrabroker — questions

Answers built from our own checks of this server.

Why is there no uptime for Infrabroker?

Infrabroker runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone.

Is Infrabroker open source?

Yes — it is published under the GPL-3.0 licence, written in Go, 13 stars on GitHub and 6 open issues. The source link is on this page, so you can read exactly what it does with your data before you connect it.