no-crd — MCP Server 安装配置（官方 MCP Registry）

{
  "id": "io.github.nogoo9/no-crd",
  "type": "mcp-server",
  "version": "0.13.0",
  "displayName": "no-crd",
  "description": "Dynamic pod spawner & proxy for ephemeral AI agent workspaces on Kubernetes without CRDs",
  "repository": {
    "url": "https://github.com/nogoo9/no-crd",
    "source": "github"
  },
  "distribution": {
    "packages": [
      {
        "registryType": "npm",
        "identifier": "@nogoo9/no-crd",
        "version": "0.13.0",
        "runtimeHint": "bunx",
        "transport": "stdio",
        "environmentVariables": [
          {
            "name": "KUBECONFIG",
            "description": "Path to the Kubernetes API credentials configuration file"
          },
          {
            "name": "BASE_URL",
            "description": "Hosting URL subpath prefix for gateways and reverse proxies"
          },
          {
            "name": "STATELESS",
            "description": "Disable in-memory session tracking for stateless execution"
          },
          {
            "name": "TLS_CERT",
            "description": "Local file path containing TLS public certificate (HTTPS)"
          },
          {
            "name": "TLS_KEY",
            "description": "Local file path containing TLS private key (HTTPS)",
            "isSecret": true
          },
          {
            "name": "TLS_CA",
            "description": "Local file path containing trusted client Certificate Authority"
          },
          {
            "name": "NODE_TLS_REJECT_UNAUTHORIZED",
            "description": "Set to '0' to allow connection to unverified TLS endpoints"
          },
          {
            "name": "REGISTRY_URL",
            "description": "Default container registry for workspace image resolution"
          },
          {
            "name": "TEMPLATES_DIR",
            "description": "Local filesystem directory containing custom YAML/JSON templates"
          },
          {
            "name": "BUILTIN_TEMPLATES",
            "description": "Enable loading of standard pre-configured templates (default: true)"
          },
          {
            "name": "AUTH_ENABLED",
            "description": "Enforce JWT verification and user tenant isolation (default: false)"
          },
          {
            "name": "JWT_VERIFICATION_REQUIRED",
            "description": "Set to 'false' to skip OIDC cryptographic signature checks"
          },
          {
            "name": "JWT_SECRET",
            "description": "HMAC-SHA symmetric secret key to sign/verify JWT tokens",
            "isSecret": true
          },
          {
            "name": "JWT_PUBLIC_KEY",
            "description": "PEM public key to verify asymmetric OIDC signatures",
            "isSecret": true
          },
          {
            "name": "JWKS_URI",
            "description": "Discovery URI to fetch keys from OIDC provider dynamically"
          },
          {
            "name": "INTROSPECTION_ENDPOINT",
            "description": "RFC 7662 compliant token introspection validation endpoint"
          },
          {
            "name": "OAUTH_CLIENT_ID",
            "description": "Client identifier for OAuth2 authentication flows"
          },
          {
            "name": "OAUTH_CLIENT_SECRET",
            "description": "Client secret credentials used for token introspection",
            "isSecret": true
          },
          {
            "name": "JWT_AUDIENCE",
            "description": "Target audience check value for incoming OIDC tokens"
          },
          {
            "name": "AUTH_ISSUER",
            "description": "Expected token issuer authority check value (e.g. Keycloak)"
          },
          {
            "name": "AUTH_SUB_JSONPATH",
            "description": "JSONPath pattern to extract user identity subject from token"
          },
          {
            "name": "AUTH_ADMIN_ROLE",
            "description": "Bypass role name that grants admin access (default: nogoo9-admin)"
          },
          {
            "name": "PROXY_SESSION_TTL",
            "description": "Active lifetime in seconds for signed proxy session cookies"
          },
          {
            "name": "PROXY_SESSION_SECRET",
            "description": "Secret key for session cookie signing",
            "isSecret": true
          },
          {
            "name": "UI_ENABLED",
            "description": "Serve the built-in HTML dashboard (default: true)"
          },
          {
            "name": "THEMES_DIR",
            "description": "Filesystem directory to scan for custom CSS themes"
          },
          {
            "name": "THEMES_CONFIGMAP",
            "description": "ConfigMap name storing dynamic CSS theme overrides"
          },
          {
            "name": "DOCS_DIR",
            "description": "Directory containing static documentation web files to serve"
          },
          {
            "name": "OAUTH_DISCOVERY_URL",
            "description": "Standard OIDC .well-known configuration discovery endpoint"
          },
          {
            "name": "OAUTH_LOGIN_METHOD",
            "description": "UI SSO flow login method: 'redirect' or silent 'iframe'"
          },
          {
            "name": "UI_TITLE",
            "description": "Custom dashboard header title for white-label branding"
          },
          {
            "name": "UI_SUBTITLE",
            "description": "Custom dashboard subtitle text below the header title"
          }
        ]
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "vscode"
  ],
  "keywords": [],
  "provenance": {
    "origin": "official-mcp-registry",
    "originalId": "io.github.nogoo9/no-crd",
    "originalUrl": "https://registry.modelcontextprotocol.io/v0.1/servers/io.github.nogoo9%2Fno-crd/versions/latest",
    "isOfficial": true,
    "status": "active"
  }
}