Infrabroker MCP Server

Infrastructure access broker for AI agents - SSH & Kubernetes. The model never touches a credential. (formerly ssh-broker)

People who need cloud infrastructure tools inside Claude, Cursor, VS Code, or another MCP client. The project is written in Go.

VERIFIED ACTIVE

LAST COMMIT 2026-08-18 · ★ 10 · #105 OF 141 MAINTAINED CLOUD INFRASTRUCTURE · VERIFIED 2026-08-25

GPL-3.0 · Go servers · how we verify → /methodology

01 · Install Infrabroker

Docker

docker run -i --rm ghcr.io/luisgf/infrabroker:3.1.2

Claude Desktop - add to config

{
  "mcpServers": {
    "luisgf-infrabroker": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/luisgf/infrabroker:3.1.2"
      ]
    }
  }
}
Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as container (OCI image) - can be sandboxed away from your filesystem

license GPL-3.0 - declared in the repository

registry namespace io.github.luisgf is GitHub-verified and matches the repo owner

03 · What Infrabroker can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v3.1.2 · 2026-08-13

reject sudo/su/source wrappers in shell_parse · name the cert-TTL session cap in gap #1 · name the ssh-agent CA backend in Multi-CA · match versioned interpreters in shell_parse wrappers · hold writeMu across reload so…

v3.1.1 · 2026-08-12

bump modernc.org/sqlite from 1.54.0 to 1.55.0 in the go-minor-patch group · reject command-hiding wrappers in shell_parse · enforce freeze when durability checkpoint fails · make freeze grant revocation all-or-nothing…

v3.1.0 · 2026-08-02

annotate the intentional SSH remote-exec sink · bump modernc.org/sqlite from 1.53.0 to 1.54.0 in the go-minor-patch group · bump actions/setup-go from 6 to 7 · bump actions/setup-python from 6 to 7 · emit direct sudo…

04 · Who maintains Infrabroker

infrabroker is maintained by luisgf. It's the only MCP server we track from this author; the repo dates to Jun 2026.

05 · Facts

category
cloud infrastructure - ranked #105 of 141 actively-maintained cloud infrastructure servers as of 2026-08-25.
release cadence
10+ releases in the last 90 days (latest 2026-08-13)
registry
io.github.luisgf/infrabroker (active, first published 2026-07-04 · 9 versions)
packages
oci:ghcr.io/luisgf/infrabroker:3.1.2

06 · Infrabroker FAQ

What is Infrabroker?

Infrastructure access broker for AI agents - SSH & Kubernetes. The model never touches a credential. (formerly ssh-broker)

Is Infrabroker still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-18 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install Infrabroker?

Run `docker run -i --rm ghcr.io/luisgf/infrabroker:3.1.2`. You can also paste the ready-made client config above.

07 · Alternatives to Infrabroker