Kubernetes Ephemeral Job MCP Server

io.github.inhuman/mcp-k8s-ephemeral-job

Repository Registry

What is the Kubernetes Ephemeral Job MCP server?

Runs a command in a throwaway Kubernetes pod and returns exit code, output and artifacts.

How to install Kubernetes Ephemeral Job

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

MCP_K8S_ALLOWED_IMAGES
required
Strict image allowlist (CSV). Empty means every call is rejected, so this must be set.
MCP_K8S_KUBECONFIG
Path to the kubeconfig inside the container. Empty = use in-cluster credentials.
MCP_K8S_NAMESPACE
Namespace the ephemeral pods are created in. Needs a Role/RoleBinding for jobs and pods.
MCP_K8S_TRANSPORT
MCP transport: stdio | http | sse. Must be 'stdio' for direct docker/stdio use.
MCP_K8S_DEFAULT_TIMEOUT_S
Default wall-clock timeout per job, seconds.
MCP_K8S_MAX_TIMEOUT_S
Maximum wall-clock timeout a caller may request, seconds.
MCP_K8S_MAX_OUTPUT_BYTES
Cap on combined stdout/stderr before truncation.
MCP_K8S_MAX_ARTIFACT_BYTES
Cap on the total size of returned artifacts.
MCP_K8S_MAX_CONCURRENT
Maximum ephemeral pods running at the same time.
MCP_K8S_DEFAULT_CPU
Pod CPU request; limits come from the caller or the namespace LimitRange.
MCP_K8S_DEFAULT_MEMORY
Pod memory request; limits come from the caller or the namespace LimitRange.
MCP_K8S_SIDECAR_IMAGE
Helper image used to inject input files and collect artifacts.
MCP_K8S_CLONE_IMAGE
Image carrying git for the clone init container. Empty disables the clone field.
MCP_K8S_CLONE_SECRET
secret
Secret with git tokens, mounted only on the cloner. Empty disables the clone field.
MCP_K8S_CACHE_PVC
Existing PVC mounted into every job pod as a shared cache. Empty = no cache.
MCP_K8S_CACHE_MOUNT_PATH
Where the cache PVC is mounted, e.g. /go/pkg/mod. Empty = no cache.
MCP_K8S_JOB_EXTRA_ENV
JSON object of env vars added to every job pod; caller keys win on collision.
MCP_K8S_AUTH_TOKEN
secret
Optional X-MCP-AUTH token required on every request (http/sse transports only).

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp-k8s-ephemeral-job": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "docker.io/idconstruct/mcp-k8s-ephemeral-job:v0.7.1",
        "--volume",
        "{kubeconfig_dir}:/kube:ro",
        "--read-only",
        "--cap-drop",
        "ALL",
        "--security-opt",
        "no-new-privileges",
        "--memory",
        "256m"
      ],
      "env": {
        "MCP_K8S_ALLOWED_IMAGES": "<YOUR_MCP_K8S_ALLOWED_IMAGES>",
        "MCP_K8S_KUBECONFIG": "<YOUR_MCP_K8S_KUBECONFIG>",
        "MCP_K8S_NAMESPACE": "<YOUR_MCP_K8S_NAMESPACE>",
        "MCP_K8S_TRANSPORT": "<YOUR_MCP_K8S_TRANSPORT>",
        "MCP_K8S_DEFAULT_TIMEOUT_S": "<YOUR_MCP_K8S_DEFAULT_TIMEOUT_S>",
        "MCP_K8S_MAX_TIMEOUT_S": "<YOUR_MCP_K8S_MAX_TIMEOUT_S>",
        "MCP_K8S_MAX_OUTPUT_BYTES": "<YOUR_MCP_K8S_MAX_OUTPUT_BYTES>",
        "MCP_K8S_MAX_ARTIFACT_BYTES": "<YOUR_MCP_K8S_MAX_ARTIFACT_BYTES>",
        "MCP_K8S_MAX_CONCURRENT": "<YOUR_MCP_K8S_MAX_CONCURRENT>",
        "MCP_K8S_DEFAULT_CPU": "<YOUR_MCP_K8S_DEFAULT_CPU>",
        "MCP_K8S_DEFAULT_MEMORY": "<YOUR_MCP_K8S_DEFAULT_MEMORY>",
        "MCP_K8S_SIDECAR_IMAGE": "<YOUR_MCP_K8S_SIDECAR_IMAGE>",
        "MCP_K8S_CLONE_IMAGE": "<YOUR_MCP_K8S_CLONE_IMAGE>",
        "MCP_K8S_CLONE_SECRET": "<YOUR_MCP_K8S_CLONE_SECRET>",
        "MCP_K8S_CACHE_PVC": "<YOUR_MCP_K8S_CACHE_PVC>",
        "MCP_K8S_CACHE_MOUNT_PATH": "<YOUR_MCP_K8S_CACHE_MOUNT_PATH>",
        "MCP_K8S_JOB_EXTRA_ENV": "<YOUR_MCP_K8S_JOB_EXTRA_ENV>",
        "MCP_K8S_AUTH_TOKEN": "<YOUR_MCP_K8S_AUTH_TOKEN>"
      }
    }
  }
}

Related MCP servers

SSH Fleet

Maintained

Curated ssh_probe diagnostics and single-host ssh_exec over an allowlisted SSH fleet.

MIT

View repository →

Exec Sandbox

Maintained

Single exec tool running caller Python in a network-isolated locked-down sandbox.

MIT

View repository →

Inite Brain

Active

Open-source bitemporal memory layer for LLM agents with knowledge graphs and conflict resolution.

TypeScript

AGPL-3.0

View repository →

io.github.inity13/agentstack-mcp

Active

Deterministic reasoning stack for AI agents: simulate, decide & compute, plus cross-domain tools.

JavaScript

MIT

View repository →

io.github.inity13/decisionmatrix-mcp

Active

Deterministic multi-criteria decision analysis for AI agents — score, rank & explain options.

JavaScript

MIT

View repository →

io.github.inity13/precisioncalc-mcp

Active

High-precision finance & business calculations for AI agents — exact decimals, never floats.

Python

MIT

View repository →