infrabroker
Infrastructure access broker for AI agents — SSH & Kubernetes. Per-operation ephemeral credentials minted by a separate signer; the model never touches one. MCP stdio / HTTP+OIDC.
面向AI代理的基础设施访问代理——SSH和Kubernetes。每次操作由独立签名者生成的临时凭据；模型永远不会接触到。支持MCP stdio / HTTP+OIDC。
How to install
No unified install command; see the repository README.
About
infrabroker **Infrastructure access broker for AI agents — SSH & Kubernetes. The model never touches a credential.** *(formerly ssh-broker)* The agent requests an *action* — run a command on a host, query or change a cluster. infrabroker checks it against policy, executes it with a credential minted for that single operation — an **ephemeral, scope-limited SSH certificate** from its own CA, or a **short-lived bound ServiceAccount token** — and returns **only the output**. Keys, certificates and tokens live in the broker's memory and are discarded after the call: nothing enters the model's cont…
Recommendation signals
Meta
- License
- GPL-3.0
- Language
- Go
- GitHub stars
- 10
- mo. downloads
- –
- Last push
- 2026-09-22
- Created
- 2026-06-03
Links
Basic safety check
- Findings
- curated 收录但无 npm 包/安装命令
- Sources
- curated:punkpeye/awesome-mcp-servers
- Topics
- ai-agents, golang, kubernetes, mcp, mcp-server, prompt-injection, security, ssh, ssh-certificates, zero-trust
Related plugins
mobile-mcp
mobile-next/mobile-mcp
Model Context Protocol Server for Mobile Automation and Scraping (iOS, Android, Emulators, Simulators and Real Devices)
davinci-resolve-mcp
samuelgursky/davinci-resolve-mcp
MCP server integration for DaVinci Resolve Studio
ssh-mcp
tufantunc/ssh-mcp
MCP server exposing SSH control for Linux servers via Model Context Protocol.