Infrabroker

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/luisgf-infrabroker

About

Use cases: containers-kubernetes, cloud-management

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools

6 read · 4 write · 1 delete · 2 not yet classified

Secrets

None asked for

Install scripts

None found

Runs as

Docker image

Tools (13)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• k8s_apply

  Create or update a Kubernetes object from a JSON manifest (server-side apply). REQUIRES an allow rule for verb=apply; the action may be approval-gated (a human must approve before it runs). Use dry_run=true to preview the BROKER policy decision. The manifest's apiVersion/kind/metadata must match the resource/group/namespace/name arguments.

• k8s_delete

  Delete one Kubernetes object. REQUIRES an allow rule for verb=delete; the action may be approval-gated. Use dry_run=true to preview the policy decision without deleting.

• k8s_get

  Get one Kubernetes object as JSON. REQUIRES an allow rule for this verb/resource in the cluster policy; if the broker returns not allowed, DO NOT retry — inform the user. Use dry_run=true to preview whether the action is permitted.

• k8s_list

  List Kubernetes objects of a resource type as JSON, optionally filtered by label/field selectors. Omit namespace to list across all namespaces the ServiceAccount can read. REQUIRES an allow rule; use dry_run=true to preview.

• k8s_list_clusters

  List the Kubernetes clusters accessible to the caller (clusters outside the user's RBAC groups are not listed). ALWAYS call before the other k8s_* tools to learn the available cluster names.

• k8s_logs

  Read a pod's container logs (plain text). REQUIRES an allow rule for verb=logs; use dry_run=true to preview.

• ssh_execute

  Execute a single command on a Linux host via SSH with an ephemeral credential. Prefer this tool over ssh_session_open when you only need to run one command or independent commands. Returns stdout, stderr and exit_code. exit_code != 0 means remote command failure, NOT a tool error; treat it like a process that exits with an error. BEFORE calling: use ssh_list_servers to learn the host capabilities. sudo=true ONLY if allow_sudo=true; if allow_sudo=false, DO NOT retry with sudo and inform the user. pty=true ONLY if allow_pty=true and the command needs a TTY (with pty, stdout and stderr are merged…

• ssh_get_file

  Read a file from a Linux host via SSH with an ephemeral credential. Returns the content as text, or base64 (base64=true in the result) when the file is not valid UTF-8. REQUIRES allow_file_transfer=true on the host (see ssh_list_servers); if false DO NOT retry, the signer will reject it. The read runs as the host's configured SSH user (no sudo); the file must be readable by that user. On a host with a command_policy and shell_parse (the default) the transfer command (head -c N < path) is ALWAYS denied — the policy parser rejects its file redirect and no allow pattern changes that; if the signe…

• ssh_list_servers

  List the hosts accessible to the caller with their capabilities (hosts outside the user's RBAC groups are not listed). ALWAYS call before ssh_execute or ssh_session_open. Fields per host: allow_sudo=true → the host accepts NOPASSWD sudo elevation (sudo=true may be used); allow_sudo=false → DO NOT attempt sudo, the signer will reject it. allow_pty=true → the host accepts PTY (pty=true or mode=pty may be used); allow_pty=false → DO NOT attempt PTY. allow_file_transfer=true → ssh_put_file and ssh_get_file may be used; allow_file_transfer=false → DO NOT attempt file transfers, the signer will reje…

• ssh_put_file

  Write a file on a Linux host via SSH with an ephemeral credential. Creates or OVERWRITES the destination file with the given content. Use content_base64=true for binary data (the content field is decoded before writing). REQUIRES allow_file_transfer=true on the host (see ssh_list_servers); if false DO NOT retry, the signer will reject it. The write runs as the host's configured SSH user (no sudo); the destination must be writable by that user. On a host with a command_policy and shell_parse (the default) the transfer command (cat > path) is ALWAYS denied — the policy parser rejects its file re…

• ssh_session_close

  Close a persistent SSH session and release the connection. Always call when done working with a session; an unclosed session keeps its SSH connection until it is reaped when the opening certificate expires, or by the idle or maximum-lifetime timeout (whichever comes first).

• ssh_session_exec

  Description is built at runtime.

• ssh_session_open

  Open a persistent SSH session that reuses the connection across commands. Use when you need multiple commands with shared state (e.g. cd to a directory and then operate in it) or interactive programs. For isolated commands prefer ssh_execute (simpler, stronger isolation guarantee). Available modes: exec (default, independent commands), shell (stateful sh: cd and variables persist), pty (shell with TTY for interactive programs). sudo=true ONLY if allow_sudo=true (see ssh_list_servers); if allow_sudo=false DO NOT retry. mode=pty ONLY if allow_pty=true. Every ssh_session_exec is preflighted again…

Compare and alternatives

Featured in

• Best MCP servers for Kubernetes
• Best MCP servers for SSH

Signals

Stars

13

Forks

0

Open issues

6

Last commit

Oct 21, 2026 (7 days ago)

Last release

Sep 8, 2026 (1 month ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name

io.github.luisgf/infrabroker

Version

3.1.3

Auth

No auth

Packages

oci ghcr.io/luisgf/infrabroker:3.1.3

License

GPL-3.0

Repository

github.com/luisgf/infrabroker

Website

luisgf.github.io/infrabroker/

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql