Kubernetes Ephemeral Job

Kubernetes Ephemeral Job runs locally from a container image in an OCI registry such as Docker Hub or GitHub Container Registry: docker.io/idconstruct/mcp-k8s-ephemeral-job:v0.7.1. It speaks MCP over stdio, so the client starts it as a program and talks to it through standard input and output. It needs Docker or another OCI container runtime; started with docker run — the usual command is docker run -i --rm -e MCP_K8S_ALLOWED_IMAGES -e MCP_K8S_KUBECONFIG -e MCP_K8S_NAMESPACE -e MCP_K8S_TRANSPORT -e MCP_K8S_DEFAULT_TIMEOUT_S -e MCP_K8S_MAX_TIMEOUT_S -e MCP_K8S_MAX_OUTPUT_BYTES -e MCP_K8S_MAX_ARTIFACT_BYTES -e MCP_K8S_MAX_CONCURRENT -e MCP_K8S_DEFAULT_CPU -e MCP_K8S_DEFAULT_MEMORY -e MCP_K8S_SIDECAR_IMAGE -e MCP_K8S_CLONE_IMAGE -e MCP_K8S_CLONE_SECRET -e MCP_K8S_CACHE_PVC -e MCP_K8S_CACHE_MOUNT_PATH -e MCP_K8S_JOB_EXTRA_ENV -e MCP_K8S_AUTH_TOKEN docker.io/idconstruct/mcp-k8s-ephemeral-job:v0.7.1. It reads these environment variables: MCP_K8S_ALLOWED_IMAGES (required), MCP_K8S_KUBECONFIG, MCP_K8S_NAMESPACE, MCP_K8S_TRANSPORT, MCP_K8S_DEFAULT_TIMEOUT_S, MCP_K8S_MAX_TIMEOUT_S, MCP_K8S_MAX_OUTPUT_BYTES, MCP_K8S_MAX_ARTIFACT_BYTES, MCP_K8S_MAX_CONCURRENT, MCP_K8S_DEFAULT_CPU, MCP_K8S_DEFAULT_MEMORY, MCP_K8S_SIDECAR_IMAGE, MCP_K8S_CLONE_IMAGE, MCP_K8S_CLONE_SECRET (secret), MCP_K8S_CACHE_PVC, MCP_K8S_CACHE_MOUNT_PATH, MCP_K8S_JOB_EXTRA_ENV and MCP_K8S_AUTH_TOKEN (secret); set them in the client's configuration for this server.

In the mcpServers JSON format that many desktop and editor MCP clients read, the entry looks like this (placeholders in angle brackets):

{
  "mcpServers": {
    "mcp-k8s-ephemeral-job": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "MCP_K8S_ALLOWED_IMAGES",
        "-e",
        "MCP_K8S_KUBECONFIG",
        "-e",
        "MCP_K8S_NAMESPACE",
        "-e",
        "MCP_K8S_TRANSPORT",
        "-e",
        "MCP_K8S_DEFAULT_TIMEOUT_S",
        "-e",
        "MCP_K8S_MAX_TIMEOUT_S",
        "-e",
        "MCP_K8S_MAX_OUTPUT_BYTES",
        "-e",
        "MCP_K8S_MAX_ARTIFACT_BYTES",
        "-e",
        "MCP_K8S_MAX_CONCURRENT",
        "-e",
        "MCP_K8S_DEFAULT_CPU",
        "-e",
        "MCP_K8S_DEFAULT_MEMORY",
        "-e",
        "MCP_K8S_SIDECAR_IMAGE",
        "-e",
        "MCP_K8S_CLONE_IMAGE",
        "-e",
        "MCP_K8S_CLONE_SECRET",
        "-e",
        "MCP_K8S_CACHE_PVC",
        "-e",
        "MCP_K8S_CACHE_MOUNT_PATH",
        "-e",
        "MCP_K8S_JOB_EXTRA_ENV",
        "-e",
        "MCP_K8S_AUTH_TOKEN",
        "docker.io/idconstruct/mcp-k8s-ephemeral-job:v0.7.1"
      ],
      "env": {
        "MCP_K8S_ALLOWED_IMAGES": "<value>",
        "MCP_K8S_KUBECONFIG": "<value>",
        "MCP_K8S_NAMESPACE": "<value>",
        "MCP_K8S_TRANSPORT": "<value>",
        "MCP_K8S_DEFAULT_TIMEOUT_S": "<value>",
        "MCP_K8S_MAX_TIMEOUT_S": "<value>",
        "MCP_K8S_MAX_OUTPUT_BYTES": "<value>",
        "MCP_K8S_MAX_ARTIFACT_BYTES": "<value>",
        "MCP_K8S_MAX_CONCURRENT": "<value>",
        "MCP_K8S_DEFAULT_CPU": "<value>",
        "MCP_K8S_DEFAULT_MEMORY": "<value>",
        "MCP_K8S_SIDECAR_IMAGE": "<value>",
        "MCP_K8S_CLONE_IMAGE": "<value>",
        "MCP_K8S_CLONE_SECRET": "<secret>",
        "MCP_K8S_CACHE_PVC": "<value>",
        "MCP_K8S_CACHE_MOUNT_PATH": "<value>",
        "MCP_K8S_JOB_EXTRA_ENV": "<value>",
        "MCP_K8S_AUTH_TOKEN": "<secret>"
      }
    }
  }
}

Derived from the registry entry, not tested here. What the server does, and on what terms, is set by its publisher; check its repository or website before giving it access to your accounts or files. How to add an MCP server to an assistant · Before you connect