Infrabroker MCP Server

Infrastructure access broker for AI agents - SSH & Kubernetes. The model never touches a credential. (formerly ssh-broker)

People who work with kubernetes, prompt injection and security and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Go.

VERIFIED ACTIVE

LAST COMMIT 2026-09-15 · ★ 10 · #113 OF 153 MAINTAINED CLOUD INFRASTRUCTURE · VERIFIED 2026-09-18

GPL-3.0 · Go servers · how we verify → /methodology

01 · Install Infrabroker

Docker

docker run -i --rm ghcr.io/luisgf/infrabroker:3.1.3

Claude Desktop - add to config

{
  "mcpServers": {
    "luisgf-infrabroker": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/luisgf/infrabroker:3.1.3"
      ]
    }
  }
}

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as container (OCI image) - can be sandboxed away from your filesystem

license GPL-3.0 - declared in the repository

registry namespace io.github.luisgf is GitHub-verified and matches the repo owner

03 · What Infrabroker can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v3.1.3 · 2026-09-08

bump golang.org/x/crypto to v0.56.0 for GO-2026-6353/6354 · keep client-controlled host data out of the signed audit log · reject checkout of a session whose certificate has expired · enable audit redaction by default…

v3.1.2 · 2026-08-13

reject sudo/su/source wrappers in shell_parse · name the cert-TTL session cap in gap #1 · name the ssh-agent CA backend in Multi-CA · match versioned interpreters in shell_parse wrappers · hold writeMu across reload so…

v3.1.1 · 2026-08-12

bump modernc.org/sqlite from 1.54.0 to 1.55.0 in the go-minor-patch group · reject command-hiding wrappers in shell_parse · enforce freeze when durability checkpoint fails · make freeze grant revocation all-or-nothing…

04 · Who maintains Infrabroker

infrabroker is maintained by luisgf. It's the only MCP server we track from this author; the repo dates to Jun 2026.

05 · Facts

repository: github.com/luisgf/infrabroker
website: https://luisgf.github.io/infrabroker/
category: cloud infrastructure - ranked #113 of 153 actively-maintained cloud infrastructure servers as of 2026-09-18.
release cadence: 10+ releases in the last 90 days (latest 2026-09-08)
registry: io.github.luisgf/infrabroker (active, first published 2026-07-04 · 10 versions)
packages: oci:ghcr.io/luisgf/infrabroker:3.1.3

06 · Infrabroker FAQ

What is Infrabroker?

Infrastructure access broker for AI agents - SSH & Kubernetes. The model never touches a credential. (formerly ssh-broker)

Is Infrabroker still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-15 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install Infrabroker?

Run `docker run -i --rm ghcr.io/luisgf/infrabroker:3.1.3`. You can also paste the ready-made client config above.

07 · Alternatives to Infrabroker

Alternatives to Infrabroker

Maintained cloud infrastructure servers if Infrabroker isn't the fit.

Pairs well with

Servers that cover what Infrabroker doesn't - only shown when the pairing reason fits the companion.

More cloud infrastructure MCP servers · Podman MCP Server · Hangar · ChromaDB Remote MCP Server · White Cap Data Dev

More Go MCP servers · Kivgraph · Sense · YAP - Yet Another Packager · Marmot Data Catalog · see all