Documentation
¶
Overview ¶
Command burrow-mcp is the Burrow MCP server: the thin, agent-neutral control surface that exposes Burrow's tools to any MCP client and translates tool calls into control-plane API calls (ADR-0003). It holds no cluster-operating credentials (ADR-0005); in self-host it reaches the in-cluster control plane through the scoped, burrowd-only agent kubeconfig `burrow install` mints (ADR-0038) and the Kubernetes API-server proxy (ADR-0014). Unlike the human CLI, it fails closed: a handle that records a scoped credential whose file is missing is an error, never a silent escalation to the ambient/admin kubeconfig, and setting BURROW_MCP_REQUIRE_SCOPED refuses the ambient fallback entirely. Absent that strict mode, a handle that records no scoped credential (a pre-scoped-credential cluster) still falls back to the ambient kubeconfig for backward compatibility. It speaks MCP over stdio, so an agent launches it as a subprocess.
Source Files