luisgf/infrabroker

Overview

Open-source infrastructure access broker that provides AI agents with ephemeral SSH and Kubernetes credentials. Credentials are minted per operation by a separate signer, keeping long-lived secrets away from the model. Integrates via MCP stdio or HTTP with OIDC.

Best for

Best for
Developers building AI agents that need secure, temporary access to infrastructure

Use cases

• Granting temporary SSH access to servers for automated tasks
• Providing short-lived Kubernetes credentials for AI-driven operations
• Enforcing least-privilege access with per-operation authentication

How to use

Install

infrabroker serve-mcp

Tools exposed

• ssh_execute
• ssh_session_open
• ssh_session_exec
• ssh_session_close
• ssh_list_servers
• ssh_put_file
• ssh_get_file
• k8s_get
• k8s_list
• k8s_logs
• k8s_apply
• k8s_delete
• k8s_list_clusters

Notes

Open-source infrastructure access broker that provides AI agents with ephemeral SSH and Kubernetes credentials. Credentials are minted per operation by a separate signer, keeping long-lived secrets away from the model. Integrates via MCP stdio or HTTP with OIDC.

5 stars on GitHub. Last updated 2026-07-13. Licensed GPL-3.0.

Use cases

• Granting temporary SSH access to servers for automated tasks
• Providing short-lived Kubernetes credentials for AI-driven operations
• Enforcing least-privilege access with per-operation authentication

Pros

• Ephemeral credentials reduce the blast radius of a compromise
• Separate signer ensures the model never touches long-lived secrets
• Supports both SSH and Kubernetes access out of the box

Cons

• Very new project with few stars and limited community support
• Requires setting up and maintaining a separate signer service
• Lacks proven production track record due to early stage

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.