Is io.github.luisgf/infrabroker safe to use?

io.github.luisgf/infrabroker has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.luisgf/infrabroker?

io.github.luisgf/infrabroker can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with io.github.luisgf/infrabroker?

io.github.luisgf/infrabroker is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

io.github.luisgf/infrabroker

SSH & Kubernetes access broker for AI agents; the model never touches a credential.

GitHub

No known CVEs

No license

Maintenance unknown

No commit data

Works with most clients

Transport: stdio

0 tools

Grade F

Edit this pageView history

AI / ML Cloud

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-luisgf-infrabroker": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-luisgf-infrabroker-2)](https://mcppedia.org/s/io-github-luisgf-infrabroker-2)

Read me

What io.github.luisgf/infrabroker does

Infrastructure access broker for AI agents — SSH & Kubernetes. The model never touches a credential. (formerly ssh-broker)

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

21/100across 5 weighted dimensions

How we score →

0255075100

−79

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.luisgf/infrabroker safe to use?: io.github.luisgf/infrabroker has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.luisgf/infrabroker?: io.github.luisgf/infrabroker can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.luisgf/infrabroker?: io.github.luisgf/infrabroker is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Similar servers

Others in ai-ml / cloud

View all →

Memory MCP Server96

Persistent memory using a knowledge graph

88.7k 5

Sequential Thinking MCP Server96

Dynamic problem-solving through sequential thought chains

88.7k 1

Gemini Cli95

An open-source AI agent that brings the power of Gemini directly into your terminal.

106.1k 8

Ruflo95

🌊 The leading agent orchestration platform for Claude. Deploy intelligent multi-agent swarms, coordinate autonomous workflows, and build conversational AI systems. Features enterprise-grade architecture, distributed swarm intelligence, RAG integration, and native Claude Code / Codex Integration

65.4k 4

MCP Security Weekly

Get CVE alerts and security updates for io.github.luisgf/infrabroker and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

AI / ML Cloud

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-luisgf-infrabroker": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-luisgf-infrabroker-2)](https://mcppedia.org/s/io-github-luisgf-infrabroker-2)

Read me

What io.github.luisgf/infrabroker does

Infrastructure access broker for AI agents — SSH & Kubernetes. The model never touches a credential. (formerly ssh-broker)

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

infrabroker

Infrastructure access broker for AI agents — SSH & Kubernetes. The model never touches a credential. (formerly ssh-broker)

The agent requests an action — run a command on a host, query or change a cluster. infrabroker checks it against policy, executes it with a credential minted for that single operation — an ephemeral, scope-limited SSH certificate from its own CA, or a short-lived bound ServiceAccount token — and returns only the output. Keys, certificates and tokens live in the broker's memory and are discarded after the call: nothing enters the model's context, so a prompt-injected agent has nothing to exfiltrate.

One binary — infrabroker — exposes the same engine (internal/broker) and tool surface (internal/mcpserver) over three transports, chosen by subcommand. (The legacy per-transport binaries broker / mcp-broker / mcp-broker-http remain as thin deprecated wrappers over these subcommands, so existing configs keep working.)

MCP stdio (local, recommended for personal use) — infrabroker serve-mcp. Tools: ssh_execute, ssh_session_open / ssh_session_exec / ssh_session_close, ssh_list_servers, ssh_put_file / ssh_get_file; with clusters configured, also k8s_get / k8s_list / k8s_logs / k8s_apply / k8s_delete / k8s_list_clusters. No transport auth — isolation comes from the process being launched by the user (as the MCP spec recommends for stdio).
MCP HTTP + OAuth2/OIDC (remote, multi-user) — infrabroker serve-mcp-http, Streamable HTTP. Same tools, but each client authenticates with an OIDC bearer token validated locally against the issuer's JWKS; the user identity (and groups, for per-user RBAC) is propagated to the signer.
HTTP + mTLS — infrabroker serve-http, POST /v1/ssh_run (one-shot), for network agents authenticated with a client certificate.

Documentation

This README is a landing page. The detail lives in focused, single-source docs:

Document	Contents
QUICKSTART.md	First `ssh_execute` in under 10 minutes — single-binary local mode, no signer/PKI
ARCHITECTURE.md	Diagram, request flow, design decisions, sudo elevation, sessions, multi-CA
THREAT_MODEL.md	Actors, trust boundaries, security controls, and explicit non-goals/gaps
OPERATIONS.md	Runbook: startup, adding hosts, hot-reload, `broker-ctl`, PKI rotation, configs
MESH.md	Running infrabroker over a NetBird / Tailscale mesh — the session layer on top of the overlay path
API.md	HTTP endpoint reference for all services
USAGE.md	Guide to the MCP tools (SSH + Kubernetes), dry-run, and audit review (for the model / operator)
SECURITY.md	Vulnerability disclosure policy
CONTRIBUTING.md · CODING_STYLE.md	Workflow, versioning, Go style

Why infrabroker

Anti-exfiltration (prompt injection): the ephemeral key/cert/token live only in the broker's memory; they never enter the model's context.
Kubernetes without kubeconfigs: the signer mints a short-lived bound ServiceAccount token (TokenRequest API) per operation; every cluster is **defa

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

21/100across 5 weighted dimensions

How we score →

0255075100

−79

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.luisgf/infrabroker safe to use?: io.github.luisgf/infrabroker has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.luisgf/infrabroker?: io.github.luisgf/infrabroker can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.luisgf/infrabroker?: io.github.luisgf/infrabroker is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.