Kairon

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-10-18T02:47:37.510199Z",
      "publishedAt": "2026-10-18T02:47:37.510199Z",
      "statusChangedAt": "2026-10-18T02:47:37.510199Z"
    }
  },
  "server": {
    "name": "io.github.zyvorai/kairon",
    "title": "Kairon",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.10.2",
    "packages": [
      {
        "transport": {
          "type": "stdio"
        },
        "identifier": "ghcr.io/zyvorai/kairon-mcp:v0.10.2",
        "registryType": "oci",
        "environmentVariables": [
          {
            "name": "KAIRON_KUBE_URL",
            "isRequired": true,
            "description": "Kubernetes API server URL, e.g. https://k8s.example:6443. The server only offers read tools unless --allow-write is appended to the container arguments; the image never sets it."
          },
          {
            "name": "KAIRON_KUBE_TOKEN",
            "isSecret": true,
            "isRequired": true,
            "description": "Bearer token for the Kubernetes API. Bind it to a Role with only the verbs the agent needs (get/list on machines for read-only use)."
          },
          {
            "name": "KAIRON_KUBE_CA",
            "description": "Path, inside the container, of the CA bundle for the Kubernetes API (mount it). Leave unset to use system roots."
          },
          {
            "name": "KAIRON_KUBE_INSECURE",
            "default": "false",
            "description": "Set to \"true\" to skip TLS verification of the Kubernetes API. Lab use only."
          },
          {
            "name": "KAIRON_UI_URL",
            "description": "Base URL of kairon-ui; needed by the machine_network tool (network flows, drops, capture sessions)."
          },
          {
            "name": "KAIRON_UI_TOKEN",
            "isSecret": true,
            "description": "Bearer token for kairon-ui."
          },
          {
            "name": "KAIRON_UI_CA",
            "description": "Path, inside the container, of the CA certificate for a self-signed kairon-ui (mount it)."
          },
          {
            "name": "KAIRON_UI_INSECURE",
            "default": "false",
            "description": "Set to \"true\" to skip TLS verification of kairon-ui. Lab use only."
          },
          {
            "name": "KAIRON_LLM_URL",
            "description": "OpenAI-compatible endpoint for the optional ask tool and the summary in diagnose."
          },
          {
            "name": "KAIRON_LLM_MODEL",
            "description": "Model name sent to KAIRON_LLM_URL."
          },
          {
            "name": "KAIRON_LLM_API_KEY",
            "isSecret": true,
            "description": "API key for KAIRON_LLM_URL."
          },
          {
            "name": "KAIRON_MCP_TENANT",
            "description": "Scope the claim tools, diagnose and ask to this tenant."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/zyvorai/zyvor-kairon",
      "source": "github"
    },
    "websiteUrl": "https://github.com/zyvorai/zyvor-kairon",
    "description": "Inspect Kairon VMs, network policy and VM-edge flows from an agent. Read-only by default."
  }
}