luisgf/infrabroker

What it does

InfraBroker is a Model Context Protocol (MCP) server that acts as a secure access broker for SSH and Kubernetes infrastructure. It enables AI models and users to interact with infrastructure resources without ever handling actual credentials. The tool implements a zero-trust security model where a separate signer service mints per-operation ephemeral SSH certificates and bound ServiceAccount tokens.

Key Features

• Credential-less authentication through ephemeral SSH certificates
• Per-operation ServiceAccount token binding for Kubernetes access
• POSIX shell AST-based command firewall with allow/deny/approval rules
• Dry-run capability for safe command preview
• Human-in-the-loop approval workflow for sensitive operations
• Session tracking and audit logging
• Multi-platform support (macOS, Linux, cloud environments)

How to set up

Install via MCP server registration, configure the signer component for certificate minting, set up your firewall rules using POSIX shell AST patterns, and integrate with your SSH and Kubernetes infrastructure. Documentation and examples are available on the GitHub repository.