NestDaddy
All servers NestDaddy MCP Blog Sign inTry it free
Cloud and DevOps

No Crd

io.github.nogoo9/no-crd ยท v0.18.0

Dynamic pod spawner & proxy for ephemeral AI agent workspaces on Kubernetes without CRDs

Source code Set it up

Connect Runs on your machine

Terminal
claude mcp add no-crd -e KUBECONFIG=<KUBECONFIG> -e BASE_URL=<BASE_URL> -e STATELESS=<STATELESS> -e TLS_CERT=<TLS_CERT> -e TLS_KEY=<TLS_KEY> -e TLS_CA=<TLS_CA> -e NODE_TLS_REJECT_UNAUTHORIZED=<NODE_TLS_REJECT_UNAUTHORIZED> -e REGISTRY_URL=<REGISTRY_URL> -e TEMPLATES_DIR=<TEMPLATES_DIR> -e BUILTIN_TEMPLATES=<BUILTIN_TEMPLATES> -e AUTH_ENABLED=<AUTH_ENABLED> -e JWT_VERIFICATION_REQUIRED=<JWT_VERIFICATION_REQUIRED> -e JWT_SECRET=<JWT_SECRET> -e JWT_PUBLIC_KEY=<JWT_PUBLIC_KEY> -e JWKS_URI=<JWKS_URI> -e INTROSPECTION_ENDPOINT=<INTROSPECTION_ENDPOINT> -e OAUTH_CLIENT_ID=<OAUTH_CLIENT_ID> -e OAUTH_CLIENT_SECRET=<OAUTH_CLIENT_SECRET> -e JWT_AUDIENCE=<JWT_AUDIENCE> -e AUTH_ISSUER=<AUTH_ISSUER> -e AUTH_SUB_JSONPATH=<AUTH_SUB_JSONPATH> -e AUTH_ADMIN_ROLE=<AUTH_ADMIN_ROLE> -e AUTH_ADMIN_USERS=<AUTH_ADMIN_USERS> -e PROXY_SESSION_TTL=<PROXY_SESSION_TTL> -e PROXY_SESSION_SECRET=<PROXY_SESSION_SECRET> -e UI_ENABLED=<UI_ENABLED> -e THEMES_DIR=<THEMES_DIR> -e THEMES_CONFIGMAP=<THEMES_CONFIGMAP> -e DOCS_DIR=<DOCS_DIR> -e OAUTH_DISCOVERY_URL=<OAUTH_DISCOVERY_URL> -e OAUTH_LOGIN_METHOD=<OAUTH_LOGIN_METHOD> -e UI_TITLE=<UI_TITLE> -e UI_SUBTITLE=<UI_SUBTITLE> -- npx -y @nogoo9/[email protected]
claude_desktop_config.json
{
  "mcpServers": {
    "no-crd": {
      "command": "npx",
      "args": [
        "-y",
        "@nogoo9/[email protected]"
      ],
      "env": {
        "KUBECONFIG": "<KUBECONFIG>",
        "BASE_URL": "<BASE_URL>",
        "STATELESS": "<STATELESS>",
        "TLS_CERT": "<TLS_CERT>",
        "TLS_KEY": "<TLS_KEY>",
        "TLS_CA": "<TLS_CA>",
        "NODE_TLS_REJECT_UNAUTHORIZED": "<NODE_TLS_REJECT_UNAUTHORIZED>",
        "REGISTRY_URL": "<REGISTRY_URL>",
        "TEMPLATES_DIR": "<TEMPLATES_DIR>",
        "BUILTIN_TEMPLATES": "<BUILTIN_TEMPLATES>",
        "AUTH_ENABLED": "<AUTH_ENABLED>",
        "JWT_VERIFICATION_REQUIRED": "<JWT_VERIFICATION_REQUIRED>",
        "JWT_SECRET": "<JWT_SECRET>",
        "JWT_PUBLIC_KEY": "<JWT_PUBLIC_KEY>",
        "JWKS_URI": "<JWKS_URI>",
        "INTROSPECTION_ENDPOINT": "<INTROSPECTION_ENDPOINT>",
        "OAUTH_CLIENT_ID": "<OAUTH_CLIENT_ID>",
        "OAUTH_CLIENT_SECRET": "<OAUTH_CLIENT_SECRET>",
        "JWT_AUDIENCE": "<JWT_AUDIENCE>",
        "AUTH_ISSUER": "<AUTH_ISSUER>",
        "AUTH_SUB_JSONPATH": "<AUTH_SUB_JSONPATH>",
        "AUTH_ADMIN_ROLE": "<AUTH_ADMIN_ROLE>",
        "AUTH_ADMIN_USERS": "<AUTH_ADMIN_USERS>",
        "PROXY_SESSION_TTL": "<PROXY_SESSION_TTL>",
        "PROXY_SESSION_SECRET": "<PROXY_SESSION_SECRET>",
        "UI_ENABLED": "<UI_ENABLED>",
        "THEMES_DIR": "<THEMES_DIR>",
        "THEMES_CONFIGMAP": "<THEMES_CONFIGMAP>",
        "DOCS_DIR": "<DOCS_DIR>",
        "OAUTH_DISCOVERY_URL": "<OAUTH_DISCOVERY_URL>",
        "OAUTH_LOGIN_METHOD": "<OAUTH_LOGIN_METHOD>",
        "UI_TITLE": "<UI_TITLE>",
        "UI_SUBTITLE": "<UI_SUBTITLE>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "no-crd": {
      "command": "npx",
      "args": [
        "-y",
        "@nogoo9/[email protected]"
      ],
      "env": {
        "KUBECONFIG": "<KUBECONFIG>",
        "BASE_URL": "<BASE_URL>",
        "STATELESS": "<STATELESS>",
        "TLS_CERT": "<TLS_CERT>",
        "TLS_KEY": "<TLS_KEY>",
        "TLS_CA": "<TLS_CA>",
        "NODE_TLS_REJECT_UNAUTHORIZED": "<NODE_TLS_REJECT_UNAUTHORIZED>",
        "REGISTRY_URL": "<REGISTRY_URL>",
        "TEMPLATES_DIR": "<TEMPLATES_DIR>",
        "BUILTIN_TEMPLATES": "<BUILTIN_TEMPLATES>",
        "AUTH_ENABLED": "<AUTH_ENABLED>",
        "JWT_VERIFICATION_REQUIRED": "<JWT_VERIFICATION_REQUIRED>",
        "JWT_SECRET": "<JWT_SECRET>",
        "JWT_PUBLIC_KEY": "<JWT_PUBLIC_KEY>",
        "JWKS_URI": "<JWKS_URI>",
        "INTROSPECTION_ENDPOINT": "<INTROSPECTION_ENDPOINT>",
        "OAUTH_CLIENT_ID": "<OAUTH_CLIENT_ID>",
        "OAUTH_CLIENT_SECRET": "<OAUTH_CLIENT_SECRET>",
        "JWT_AUDIENCE": "<JWT_AUDIENCE>",
        "AUTH_ISSUER": "<AUTH_ISSUER>",
        "AUTH_SUB_JSONPATH": "<AUTH_SUB_JSONPATH>",
        "AUTH_ADMIN_ROLE": "<AUTH_ADMIN_ROLE>",
        "AUTH_ADMIN_USERS": "<AUTH_ADMIN_USERS>",
        "PROXY_SESSION_TTL": "<PROXY_SESSION_TTL>",
        "PROXY_SESSION_SECRET": "<PROXY_SESSION_SECRET>",
        "UI_ENABLED": "<UI_ENABLED>",
        "THEMES_DIR": "<THEMES_DIR>",
        "THEMES_CONFIGMAP": "<THEMES_CONFIGMAP>",
        "DOCS_DIR": "<DOCS_DIR>",
        "OAUTH_DISCOVERY_URL": "<OAUTH_DISCOVERY_URL>",
        "OAUTH_LOGIN_METHOD": "<OAUTH_LOGIN_METHOD>",
        "UI_TITLE": "<UI_TITLE>",
        "UI_SUBTITLE": "<UI_SUBTITLE>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "no-crd": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@nogoo9/[email protected]"
      ],
      "env": {
        "KUBECONFIG": "<KUBECONFIG>",
        "BASE_URL": "<BASE_URL>",
        "STATELESS": "<STATELESS>",
        "TLS_CERT": "<TLS_CERT>",
        "TLS_KEY": "<TLS_KEY>",
        "TLS_CA": "<TLS_CA>",
        "NODE_TLS_REJECT_UNAUTHORIZED": "<NODE_TLS_REJECT_UNAUTHORIZED>",
        "REGISTRY_URL": "<REGISTRY_URL>",
        "TEMPLATES_DIR": "<TEMPLATES_DIR>",
        "BUILTIN_TEMPLATES": "<BUILTIN_TEMPLATES>",
        "AUTH_ENABLED": "<AUTH_ENABLED>",
        "JWT_VERIFICATION_REQUIRED": "<JWT_VERIFICATION_REQUIRED>",
        "JWT_SECRET": "<JWT_SECRET>",
        "JWT_PUBLIC_KEY": "<JWT_PUBLIC_KEY>",
        "JWKS_URI": "<JWKS_URI>",
        "INTROSPECTION_ENDPOINT": "<INTROSPECTION_ENDPOINT>",
        "OAUTH_CLIENT_ID": "<OAUTH_CLIENT_ID>",
        "OAUTH_CLIENT_SECRET": "<OAUTH_CLIENT_SECRET>",
        "JWT_AUDIENCE": "<JWT_AUDIENCE>",
        "AUTH_ISSUER": "<AUTH_ISSUER>",
        "AUTH_SUB_JSONPATH": "<AUTH_SUB_JSONPATH>",
        "AUTH_ADMIN_ROLE": "<AUTH_ADMIN_ROLE>",
        "AUTH_ADMIN_USERS": "<AUTH_ADMIN_USERS>",
        "PROXY_SESSION_TTL": "<PROXY_SESSION_TTL>",
        "PROXY_SESSION_SECRET": "<PROXY_SESSION_SECRET>",
        "UI_ENABLED": "<UI_ENABLED>",
        "THEMES_DIR": "<THEMES_DIR>",
        "THEMES_CONFIGMAP": "<THEMES_CONFIGMAP>",
        "DOCS_DIR": "<DOCS_DIR>",
        "OAUTH_DISCOVERY_URL": "<OAUTH_DISCOVERY_URL>",
        "OAUTH_LOGIN_METHOD": "<OAUTH_LOGIN_METHOD>",
        "UI_TITLE": "<UI_TITLE>",
        "UI_SUBTITLE": "<UI_SUBTITLE>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
KUBECONFIG
Optional		Path to the Kubernetes API credentials configuration file
BASE_URL
Optional		Hosting URL subpath prefix for gateways and reverse proxies
STATELESS
Optional		Disable in-memory session tracking for stateless execution
TLS_CERT
Optional		Local file path containing TLS public certificate (HTTPS)
TLS_KEY
Optional, secret		Local file path containing TLS private key (HTTPS)
TLS_CA
Optional		Local file path containing trusted client Certificate Authority
NODE_TLS_REJECT_UNAUTHORIZED
Optional		Set to '0' to allow connection to unverified TLS endpoints
REGISTRY_URL
Optional		Default container registry for workspace image resolution
TEMPLATES_DIR
Optional		Local filesystem directory containing custom YAML/JSON templates
BUILTIN_TEMPLATES
Optional		Enable loading of standard pre-configured templates (default: true)
AUTH_ENABLED
Optional		Enforce JWT verification and user tenant isolation (default: false)
JWT_VERIFICATION_REQUIRED
Optional		Set to 'false' to skip OIDC cryptographic signature checks
JWT_SECRET
Optional, secret		HMAC-SHA symmetric secret key to sign/verify JWT tokens
JWT_PUBLIC_KEY
Optional, secret		PEM public key to verify asymmetric OIDC signatures
JWKS_URI
Optional		Discovery URI to fetch keys from OIDC provider dynamically
INTROSPECTION_ENDPOINT
Optional		RFC 7662 compliant token introspection validation endpoint
OAUTH_CLIENT_ID
Optional		Client identifier for OAuth2 authentication flows
OAUTH_CLIENT_SECRET
Optional, secret		Client secret credentials used for token introspection
JWT_AUDIENCE
Optional		Target audience check value for incoming OIDC tokens
AUTH_ISSUER
Optional		Expected token issuer authority check value (e.g. Keycloak)
AUTH_SUB_JSONPATH
Optional		JSONPath pattern to extract user identity subject from token
AUTH_ADMIN_ROLE
Optional		Bypass role name that grants admin access (default: nogoo9-admin)
AUTH_ADMIN_USERS
Optional		Comma-separated list of user subject IDs (sub) granted admin privileges without OIDC scope/role claims
PROXY_SESSION_TTL
Optional		Active lifetime in seconds for signed proxy session cookies
PROXY_SESSION_SECRET
Optional, secret		Secret key for session cookie signing
UI_ENABLED
Optional		Serve the built-in HTML dashboard (default: true)
THEMES_DIR
Optional		Filesystem directory to scan for custom CSS themes
THEMES_CONFIGMAP
Optional		ConfigMap name storing dynamic CSS theme overrides
DOCS_DIR
Optional		Directory containing static documentation web files to serve
OAUTH_DISCOVERY_URL
Optional		Standard OIDC .well-known configuration discovery endpoint
OAUTH_LOGIN_METHOD
Optional		UI SSO flow login method: 'redirect' or silent 'iframe'
UI_TITLE
Optional		Custom dashboard header title for white-label branding
UI_SUBTITLE
Optional		Custom dashboard subtitle text below the header title

Details

Package@nogoo9/[email protected] (NPM, stdio)
First published12 Aug 2026
Last updated12 Aug 2026
Registry nameio.github.nogoo9/no-crd

More cloud and devops servers See all

  • OxyPages

    Deploy HTML pages and built web apps (React, Vue, Vite) to a live HTTPS link from your AI agent.

  • Privi Call

    One number per AI agent: route MCP calls to any agent, every call sealed in an on-chain log.

  • OldWeb Diagnostics

    Public DNS, HTTPS and deployment checks, plus offline email header and delivery-log tracing.

  • OldWeb Logs

    Offline log parsing, CI failures, HTTP capture analysis and bounded JSON configuration validation.

  • TrainRec

    Your AI assistant logs your meals and workouts, then plans your week from what you did.

  • ZeroPhase

    BUD/S prep training: read today's workout, log tasks and PST results from your agent.

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.