Potencialize seu agente
Instalação do publicador. Não é um endpoint do PlugMCP.
Host a copy with our keys and logs.
Ainda não há uma versão empacotada no registro. Siga o README do repositório.
URL remota ou um comando na sua máquina? Como as duas instalações diferem
Rodar no PlugMCP
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
AbrirDo publicador
Kubernetes operator that gives AI agents a sandboxed bash shell in per-session pods.
Agents call one tool, bash: pipes, redirects, and whatever CLIs are in the sandbox image. The MCP server is stateless. Session state lives in the pod. Commands leave the pod through a credential proxy, which discards the token the shell presents. A kubernetes target replaces it with the investigation credential. An allowlist target injects nothing.
MCP server that provides AI agents with a sandboxed bash shell inside per-investigation Kubernetes pods.
flowchart LR
Client[MCP client] --> Server[MCP server]
Server --> Sandbox[Sandbox pod]
Sandbox --> Proxy[Credential proxy]
Proxy --> API[Allowed targets]
CliMcpInstance is one sandbox class: image, proxy targets, and pool.kubernetes target gives the sandbox a dummy kubeconfig; the real credential stays on the proxy. An allowlist target reaches only the listed hosts and injects no credential.How the pieces behave: Architecture.
OLM, or the kustomize manifests. Apply a custom resource. A kubernetes target also needs an investigation kubeconfig Secret (cli-mcp-<name>-kubeconfig, key kubeconfig). On generic Kubernetes, create Secret cli-mcp--tls with keys tls.crt and tls.key. On OpenShift the Service serving-cert annotation fills that Secret. The operator does not create it.
apiVersion: cli-mcp.redhat.com/v1alpha1
kind: CliMcpInstance
metadata:
name: oc
spec:
proxy:
targets:
- type: kubernetes
Send X-Session-ID (an RFC 1123 label) so later calls reuse the same shell and /workspace. DELETE /sessions/{id} removes the sandbox. Otherwise the operator collects it after the idle timeout. A non-zero exit is a tool result with isError: true and the command output. It is not a transport error.
make build # operator, server, agent, and proxy
make test
make lint
make run starts the operator. make run-server starts the MCP server alone.
MCP server that provides AI agents with a sandboxed bash shell inside per-investigation Kubernetes pods.
Ferramentas
Ainda não há lista de ferramentas. Servidores remotos recebem uma após a primeira verificação de saúde.
Perguntas frequentes
Copie nesta página a configuração stdio para Cursor, Claude Desktop, Claude Code ou VS Code. Ela usa a instalação do publicador, não um proxy do PlugMCP.
Este registro não lista nenhuma variável de ambiente obrigatória.
Cli MCP Operator roda localmente via stdio.
Última verificação: 2026-10-28. MCP server that provides AI agents with a sandboxed bash shell inside per-investigation Kubernetes pods.
