Kubernetes Ephemeral Job MCP Setup & Guide

{
  "id": "io.github.inhuman/mcp-k8s-ephemeral-job",
  "type": "mcp-server",
  "version": "0.7.1",
  "displayName": "Kubernetes Ephemeral Job",
  "description": "Runs a command in a throwaway Kubernetes pod and returns exit code, output and artifacts.",
  "repository": {
    "url": "https://github.com/inhuman/mcp-k8s-ephemeral-job",
    "source": "github"
  },
  "distribution": {
    "packages": [
      {
        "registryType": "oci",
        "identifier": "docker.io/idconstruct/mcp-k8s-ephemeral-job:v0.7.1",
        "runtimeHint": "docker",
        "transport": "stdio",
        "environmentVariables": [
          {
            "name": "MCP_K8S_ALLOWED_IMAGES",
            "description": "Strict image allowlist (CSV). Empty means every call is rejected, so this must be set.",
            "isRequired": true
          },
          {
            "name": "MCP_K8S_KUBECONFIG",
            "description": "Path to the kubeconfig inside the container. Empty = use in-cluster credentials."
          },
          {
            "name": "MCP_K8S_NAMESPACE",
            "description": "Namespace the ephemeral pods are created in. Needs a Role/RoleBinding for jobs and pods."
          },
          {
            "name": "MCP_K8S_TRANSPORT",
            "description": "MCP transport: stdio | http | sse. Must be 'stdio' for direct docker/stdio use."
          },
          {
            "name": "MCP_K8S_DEFAULT_TIMEOUT_S",
            "description": "Default wall-clock timeout per job, seconds."
          },
          {
            "name": "MCP_K8S_MAX_TIMEOUT_S",
            "description": "Maximum wall-clock timeout a caller may request, seconds."
          },
          {
            "name": "MCP_K8S_MAX_OUTPUT_BYTES",
            "description": "Cap on combined stdout/stderr before truncation."
          },
          {
            "name": "MCP_K8S_MAX_ARTIFACT_BYTES",
            "description": "Cap on the total size of returned artifacts."
          },
          {
            "name": "MCP_K8S_MAX_CONCURRENT",
            "description": "Maximum ephemeral pods running at the same time."
          },
          {
            "name": "MCP_K8S_DEFAULT_CPU",
            "description": "Pod CPU request; limits come from the caller or the namespace LimitRange."
          },
          {
            "name": "MCP_K8S_DEFAULT_MEMORY",
            "description": "Pod memory request; limits come from the caller or the namespace LimitRange."
          },
          {
            "name": "MCP_K8S_SIDECAR_IMAGE",
            "description": "Helper image used to inject input files and collect artifacts."
          },
          {
            "name": "MCP_K8S_CLONE_IMAGE",
            "description": "Image carrying git for the clone init container. Empty disables the clone field."
          },
          {
            "name": "MCP_K8S_CLONE_SECRET",
            "description": "Secret with git tokens, mounted only on the cloner. Empty disables the clone field.",
            "isSecret": true
          },
          {
            "name": "MCP_K8S_CACHE_PVC",
            "description": "Existing PVC mounted into every job pod as a shared cache. Empty = no cache."
          },
          {
            "name": "MCP_K8S_CACHE_MOUNT_PATH",
            "description": "Where the cache PVC is mounted, e.g. /go/pkg/mod. Empty = no cache."
          },
          {
            "name": "MCP_K8S_JOB_EXTRA_ENV",
            "description": "JSON object of env vars added to every job pod; caller keys win on collision."
          },
          {
            "name": "MCP_K8S_AUTH_TOKEN",
            "description": "Optional X-MCP-AUTH token required on every request (http/sse transports only).",
            "isSecret": true
          }
        ]
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "vscode",
    "trae",
    "cherry-studio",
    "lingma",
    "windsurf",
    "cline",
    "workbuddy"
  ],
  "keywords": [],
  "provenance": {
    "origin": "official-mcp-registry",
    "originalId": "io.github.inhuman/mcp-k8s-ephemeral-job",
    "originalUrl": "https://registry.modelcontextprotocol.io/v0.1/servers/io.github.inhuman%2Fmcp-k8s-ephemeral-job/versions/latest",
    "isOfficial": true,
    "status": "active"
  }
}