Kairon

Package (oci)

docker run -i --rm ghcr.io/zyvorai/kairon-mcp:v0.10.1

Or add to your MCP client config:

{
  "mcpServers": {
    "zyvor-kairon": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/zyvorai/kairon-mcp:v0.10.1"
      ],
      "env": {
        "KAIRON_KUBE_URL": "<YOUR_VALUE>",
        "KAIRON_KUBE_TOKEN": "<YOUR_VALUE>",
        "KAIRON_KUBE_CA": "<YOUR_VALUE>",
        "KAIRON_KUBE_INSECURE": "<YOUR_VALUE>",
        "KAIRON_UI_URL": "<YOUR_VALUE>",
        "KAIRON_UI_TOKEN": "<YOUR_VALUE>",
        "KAIRON_UI_CA": "<YOUR_VALUE>",
        "KAIRON_UI_INSECURE": "<YOUR_VALUE>",
        "KAIRON_LLM_URL": "<YOUR_VALUE>",
        "KAIRON_LLM_MODEL": "<YOUR_VALUE>",
        "KAIRON_LLM_API_KEY": "<YOUR_VALUE>",
        "KAIRON_MCP_TENANT": "<YOUR_VALUE>"
      }
    }
  }
}

• KAIRON_KUBE_URL required — Kubernetes API server URL, e.g. https://k8s.example:6443. The server only offers read tools unless --allow-write is appended to the container arguments; the image never sets it.
• KAIRON_KUBE_TOKEN required secret — Bearer token for the Kubernetes API. Bind it to a Role with only the verbs the agent needs (get/list on machines for read-only use).
• KAIRON_KUBE_CA — Path, inside the container, of the CA bundle for the Kubernetes API (mount it). Leave unset to use system roots.
• KAIRON_KUBE_INSECURE — Set to "true" to skip TLS verification of the Kubernetes API. Lab use only.
• KAIRON_UI_URL — Base URL of kairon-ui; needed by the machine_network tool (network flows, drops, capture sessions).
• KAIRON_UI_TOKEN secret — Bearer token for kairon-ui.
• KAIRON_UI_CA — Path, inside the container, of the CA certificate for a self-signed kairon-ui (mount it).
• KAIRON_UI_INSECURE — Set to "true" to skip TLS verification of kairon-ui. Lab use only.
• KAIRON_LLM_URL — OpenAI-compatible endpoint for the optional ask tool and the summary in diagnose.
• KAIRON_LLM_MODEL — Model name sent to KAIRON_LLM_URL.
• KAIRON_LLM_API_KEY secret — API key for KAIRON_LLM_URL.
• KAIRON_MCP_TENANT — Scope the claim tools, diagnose and ask to this tenant.