Skip to main content
Glama
nogoo9

no-crd

by nogoo9
OverviewSchemaRelated ServersScoreDiscussions
TypeScript
Remote

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
HOSTNoHost interface to bind the HTTP/SSE server to.0.0.0.0
MODENoKubernetes access scope. Allowed values: cluster, namespaced.cluster
PORTNoHTTP server port for SSE transport.3000
TLS_CANoPath to TLS CA certificate file for HTTPS client/verification.
TLS_KEYNoPath to TLS private key file to enable HTTPS.
BASE_URLNoBase URL path prefix for hosting behind a reverse proxy.
DOCS_DIRNoBase directory from which static documentation files are served.
JWKS_URINoRemote JWKS endpoint URL to dynamically retrieve verification keys.
LOG_FILENoOutput file path for file logging.nogoo9-mcp.log
TLS_CERTNoPath to TLS certificate file to enable HTTPS.
UI_TITLENoCustom title shown in the dashboard header.nogoo9 Pod Manager
LOG_LEVELNoLogging verbosity filter. Allowed values: debug, info, warning, error, fatal.info
NAMESPACENoDefault Kubernetes namespace for operations.nogoo9
STATELESSNoEnable stateless request handling.false
TRANSPORTNoServer transport mode. Allowed values: http, stdio, both.http
JWT_SECRETNoSymmetric HMAC-SHA256 secret for token verification.
THEMES_DIRNoLocal directory path containing custom CSS UI themes.themes
UI_ENABLEDNoEnables the embedded HTML Pod Manager UI resource.true
AUTH_ISSUERNoIdentifier URL for the Authorization Server advertised in metadata discovery.
UI_SUBTITLENoCustom subtitle shown below the dashboard title.On-demand Kubernetes pod orchestration and agent-sandbox management without CRDs.
AUTH_ENABLEDNoEnables JWT token authentication on MCP tools and route proxy.false
CORS_MAX_AGENoCustom CORS Access-Control-Max-Age header in seconds.
JWT_AUDIENCENoExpected token audience. Falls back to OAUTH_CLIENT_ID if set.
MANAGED_ONLYNoWhen true, pod tools only operate on pods managed by this server.true
OAUTH_SCOPESNoOAuth scopes to request during authorization.openid profile email offline_access
REGISTRY_URLNoTarget container registry URL to query for images.
PROXY_TIMEOUTNoTimeout in milliseconds for the routing proxy upstream requests.120000
TEMPLATES_DIRNoPath to local directory containing pod template files.
JWT_PUBLIC_KEYNoPEM encoded RSA/ECDSA public key for asymmetric token verification.
RATE_LIMIT_MAXNoMaximum requests allowed per window for rate limited routes.100
AUTH_ADMIN_ROLENoRole name signifying administrator access.admin
OAUTH_CLIENT_IDNoOAuth client ID for auth configuration.
OAUTH_TOKEN_URLNoDirect OAuth token exchange endpoint for the backend server.
AUTH_ADMIN_USERSNoComma-separated list of user subject IDs (sub) granted admin privileges.
PROXY_KEEP_ALIVENoEnable TCP keep-alive for the routing proxy upstream requests.true
THEMES_CONFIGMAPNoName of Kubernetes ConfigMap containing custom UI theme configurations.
AUTH_DEFAULT_ROLENoFallback role if the token does not provide scopes/roles.viewer
AUTH_SUB_JSONPATHNoPayload path to extract unique user identity from JWT payload.$.sub
BUILTIN_TEMPLATESNoSet to false to disable built-in templates shipped with the package.true
PROXY_SESSION_TTLNoSession cookie expiration lifetime in seconds.1800
RATE_LIMIT_WINDOWNoTime window in milliseconds for rate limited routes.60000
AUTH_ROLES_JSONPATHNoPayload path to extract user roles from JWT payload.$.realm_access.roles
AUTH_SCOPE_JSONPATHNoPayload path to extract scopes claim from JWT payload.$.scope
CORS_ALLOWED_ORIGINNoCORS Allowed Origin header.*
OAUTH_CLIENT_SECRETNoOAuth client secret for auth configuration.
OAUTH_DISCOVERY_URLNoDiscovery URL for the OAuth server used by the backend gateway.
CORS_ALLOWED_HEADERSNoCORS Allowed Headers header.Content-Type, Authorization, mcp-protocol-version, mcp-session-id
CORS_ALLOWED_METHODSNoCORS Allowed Methods header.GET, POST, OPTIONS
CORS_EXPOSED_HEADERSNoCustom CORS Access-Control-Expose-Headers header.mcp-session-id, x-refreshed-token
PROXY_SESSION_SECRETNoHMAC secret key used to sign stateless session cookies. Falls back to JWT_SECRET.
OAUTH_END_SESSION_URLNoDirect OAuth logout endpoint.
CORS_ALLOW_CREDENTIALSNoEnable CORS Access-Control-Allow-Credentials header.false
DEFAULT_WORKSPACE_PORTNoDefault target port inside the workspace pods to proxy traffic to.
INTROSPECTION_ENDPOINTNoEndpoint for token introspection/validation.
PROXY_TOKEN_COOKIE_TTLNoDefault Max-Age for the access token cookie.86400
AUTH_REQUIRED_READ_ROLENoUser role required for read operations.viewer
OAUTH_AUTHORIZATION_URLNoDirect OAuth authorization URL.
AUTH_REQUIRED_READ_SCOPENoOAuth scope required for read operations.nogoo9:read
AUTH_REQUIRED_WRITE_ROLENoUser role required for write/mutation operations.user
PROXY_REFRESH_COOKIE_TTLNoDefault Max-Age for the encrypted refresh token cookie.604800
AUTH_INJECT_WORKSPACE_JWTNoDetermines if the custom 'x-workspace-jwt' header is injected into proxy requests.true
AUTH_REQUIRED_ADMIN_SCOPENoOAuth scope required for administrator operations.nogoo9:admin
AUTH_REQUIRED_WRITE_SCOPENoOAuth scope required for write/mutation operations.nogoo9:write
DISABLE_PERMISSION_CHECKSNoDisable Kubernetes RBAC permission checks and assume all tools are enabled.false
JWT_VERIFICATION_REQUIREDNoEnable/disable JWT signature verification.true
NODE_TLS_REJECT_UNAUTHORIZEDNoSet to 0 to bypass TLS verification (for development/testing only).true

Capabilities

Server capabilities have not been inspected yet.

Tools

Functions exposed to the LLM to take actions

NameDescription

No tools

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/nogoo9/no-crd'

If you have feedback or need assistance with the MCP directory API, please join our Discord server