Kairon

io.github.zyvorai/kairon · v0.10.4

Inspect Kairon VMs, network policy and VM-edge flows from an agent. Read-only by default.

Website Source code Set it up

Connect Runs on your machine

Terminal

claude mcp add kairon -e KAIRON_KUBE_URL=<KAIRON_KUBE_URL> -e KAIRON_KUBE_TOKEN=<KAIRON_KUBE_TOKEN> -e KAIRON_KUBE_CA=<KAIRON_KUBE_CA> -e KAIRON_KUBE_INSECURE=<KAIRON_KUBE_INSECURE> -e KAIRON_UI_URL=<KAIRON_UI_URL> -e KAIRON_UI_TOKEN=<KAIRON_UI_TOKEN> -e KAIRON_UI_CA=<KAIRON_UI_CA> -e KAIRON_UI_INSECURE=<KAIRON_UI_INSECURE> -e KAIRON_LLM_URL=<KAIRON_LLM_URL> -e KAIRON_LLM_MODEL=<KAIRON_LLM_MODEL> -e KAIRON_LLM_API_KEY=<KAIRON_LLM_API_KEY> -e KAIRON_MCP_TENANT=<KAIRON_MCP_TENANT> -- docker run -i --rm ghcr.io/zyvorai/kairon-mcp:v0.10.4

claude_desktop_config.json

{
  "mcpServers": {
    "kairon": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/zyvorai/kairon-mcp:v0.10.4"
      ],
      "env": {
        "KAIRON_KUBE_URL": "<KAIRON_KUBE_URL>",
        "KAIRON_KUBE_TOKEN": "<KAIRON_KUBE_TOKEN>",
        "KAIRON_KUBE_CA": "<KAIRON_KUBE_CA>",
        "KAIRON_KUBE_INSECURE": "<KAIRON_KUBE_INSECURE>",
        "KAIRON_UI_URL": "<KAIRON_UI_URL>",
        "KAIRON_UI_TOKEN": "<KAIRON_UI_TOKEN>",
        "KAIRON_UI_CA": "<KAIRON_UI_CA>",
        "KAIRON_UI_INSECURE": "<KAIRON_UI_INSECURE>",
        "KAIRON_LLM_URL": "<KAIRON_LLM_URL>",
        "KAIRON_LLM_MODEL": "<KAIRON_LLM_MODEL>",
        "KAIRON_LLM_API_KEY": "<KAIRON_LLM_API_KEY>",
        "KAIRON_MCP_TENANT": "<KAIRON_MCP_TENANT>"
      }
    }
  }
}

~/.cursor/mcp.json

{
  "mcpServers": {
    "kairon": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/zyvorai/kairon-mcp:v0.10.4"
      ],
      "env": {
        "KAIRON_KUBE_URL": "<KAIRON_KUBE_URL>",
        "KAIRON_KUBE_TOKEN": "<KAIRON_KUBE_TOKEN>",
        "KAIRON_KUBE_CA": "<KAIRON_KUBE_CA>",
        "KAIRON_KUBE_INSECURE": "<KAIRON_KUBE_INSECURE>",
        "KAIRON_UI_URL": "<KAIRON_UI_URL>",
        "KAIRON_UI_TOKEN": "<KAIRON_UI_TOKEN>",
        "KAIRON_UI_CA": "<KAIRON_UI_CA>",
        "KAIRON_UI_INSECURE": "<KAIRON_UI_INSECURE>",
        "KAIRON_LLM_URL": "<KAIRON_LLM_URL>",
        "KAIRON_LLM_MODEL": "<KAIRON_LLM_MODEL>",
        "KAIRON_LLM_API_KEY": "<KAIRON_LLM_API_KEY>",
        "KAIRON_MCP_TENANT": "<KAIRON_MCP_TENANT>"
      }
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "kairon": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/zyvorai/kairon-mcp:v0.10.4"
      ],
      "env": {
        "KAIRON_KUBE_URL": "<KAIRON_KUBE_URL>",
        "KAIRON_KUBE_TOKEN": "<KAIRON_KUBE_TOKEN>",
        "KAIRON_KUBE_CA": "<KAIRON_KUBE_CA>",
        "KAIRON_KUBE_INSECURE": "<KAIRON_KUBE_INSECURE>",
        "KAIRON_UI_URL": "<KAIRON_UI_URL>",
        "KAIRON_UI_TOKEN": "<KAIRON_UI_TOKEN>",
        "KAIRON_UI_CA": "<KAIRON_UI_CA>",
        "KAIRON_UI_INSECURE": "<KAIRON_UI_INSECURE>",
        "KAIRON_LLM_URL": "<KAIRON_LLM_URL>",
        "KAIRON_LLM_MODEL": "<KAIRON_LLM_MODEL>",
        "KAIRON_LLM_API_KEY": "<KAIRON_LLM_API_KEY>",
        "KAIRON_MCP_TENANT": "<KAIRON_MCP_TENANT>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

Name	Description
`KAIRON_KUBE_URL` Required	Kubernetes API server URL, e.g. https://k8s.example:6443. The server only offers read tools unless --allow-write is appended to the container arguments; the image never sets it.
`KAIRON_KUBE_TOKEN` Required, secret	Bearer token for the Kubernetes API. Bind it to a Role with only the verbs the agent needs (get/list on machines for read-only use).
`KAIRON_KUBE_CA` Optional	Path, inside the container, of the CA bundle for the Kubernetes API (mount it). Leave unset to use system roots.
`KAIRON_KUBE_INSECURE` Optional	Set to "true" to skip TLS verification of the Kubernetes API. Lab use only.
`KAIRON_UI_URL` Optional	Base URL of kairon-ui; needed by the machine_network tool (network flows, drops, capture sessions).
`KAIRON_UI_TOKEN` Optional, secret	Bearer token for kairon-ui.
`KAIRON_UI_CA` Optional	Path, inside the container, of the CA certificate for a self-signed kairon-ui (mount it).
`KAIRON_UI_INSECURE` Optional	Set to "true" to skip TLS verification of kairon-ui. Lab use only.
`KAIRON_LLM_URL` Optional	OpenAI-compatible endpoint for the optional ask tool and the summary in diagnose.
`KAIRON_LLM_MODEL` Optional	Model name sent to KAIRON_LLM_URL.
`KAIRON_LLM_API_KEY` Optional, secret	API key for KAIRON_LLM_URL.
`KAIRON_MCP_TENANT` Optional	Scope the claim tools, diagnose and ask to this tenant.

Details

Package	`ghcr.io/zyvorai/kairon-mcp:v0.10.4` (OCI, stdio)
First published	12 Nov 2026
Last updated	12 Nov 2026
Registry name	`io.github.zyvorai/kairon`

More ai and media servers See all

Live status

Local install

Installed and run on your own machine, so there is no public endpoint to check.

Pair it with live search

Agents that use Kairon often also need current facts. NestDaddy MCP gives your AI today's internet: web search, real-time breaking news and full page reading in one connector.

See NestDaddy MCP

For maintainers

[![NestDaddy MCP](https://nestdaddy.com/mcp/servers/io-github-zyvorai-kairon/badge.svg)](https://nestdaddy.com/mcp/servers/io-github-zyvorai-kairon)

Add the badge to your README. It turns green while your server passes our daily check. Listing details come from the official MCP registry; update them there.

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.