feat(forgectl): mcp — personal MCP server (12 tools)

[cameronsjo]

Part of #1 · umbrella cameronsjo/claude-configurations#206 (a cameronsjo/claude-configurations#202 module).

forgectl mcp — personal MCP server (12 tools)

Context

A personal MCP server exposing 12 tools to Claude Code over stdio: a read-only "discover" set + a preflight-guarded Kubernetes set.

Scope

• Discover (read-only): network reachability (composes net feat(forgectl): net — cached internal-network reachability #19), deploy-manifest resolution, repo finder, open-PR list, proxy status, last-built Docker tag.
• Kubernetes (preflight-guarded): list pods, describe pod, pod logs (severity-classified), pod events, restart pod (two-call confirmation gate).
• forgectl mcp install [--global] [--dry-run] — idempotent wire-up into Claude Code config.

Safety invariants (security-critical — this is a write-capable surface exposed to an agent)

• Every k8s tool resolves the expected cluster from the deploy manifest and refuses on context mismatch, returning a structured fix action.
• A soft per-tool rate limit backstops debug-spirals.
• Every kubectl call carries a User-Agent stamp for audit attribution.
• All inputs validated against DNS-1123 before use; single-argv flag forms defeat argv-injection.
• Errors returned as structured data, never protocol exceptions, on a stable field contract.

Depends on

• net (feat(forgectl): net — cached internal-network reachability #19); shares the deploy-manifest resolver with k8s.

Note

Large surface — may sub-split (discover tools / k8s tools / mcp install) if it grows. Security review required before the write-capable k8s tools ship.

Reference

cameronsjo/claude-configurations#202 → "mcp — MCP Server".

[cameronsjo]

Migrated to https://github.com/cameronsjo/claude-configurations/issues/262. Ecosystem issues now consolidate on cameronsjo/claude-configurations; forgectl is the marketplace registry only.

[cameronsjo]

Closing in favor of https://github.com/cameronsjo/claude-configurations/issues/262 (see migration note above).

[cameronsjo]

Reopened — forgectl owns its own tracker again; the claude-configurations mirror is closed.

[cameronsjo]

Owner ruling, 2026-07-27

Decided item by item on a decision dashboard rather than as a batch — each roadmap item was presented on its own card with its own trade-offs.

Keep, but re-scope. Twelve tools up front is why this has not moved. Pick the first two or three.

Owner asked what the twelve are and noted they thought it had already been scoped down — answering that separately; the answer may change this ruling.

[cameronsjo]

Partial ruling — fund the blessed-library layer only (2026-08-08 decision round)

Cameron's note, verbatim:

Fund the blessed library layer if we haven't already. Feels like something we've already done. The cross-compaction task state is handled a couple of different ways so I think we tag it as an idea.

---

The blessed-stacks issue is funded. Cross-compaction task state is re-tagged as an idea rather than a commitment. The rest stay block:ruling pending a per-issue call.

[cameronsjo]

Parked as an idea (2026-08-08 decision round).

Cameron's ruling on the speculative-capability set:

I think the undecided/park gets labeled with 'idea' and we forget about it for now.

Nothing is wrong with this proposal — it simply has no current pain behind it, and the round funded only the capability that cited a measured incident. Labelled idea and moved to block:waiting: it is not waiting on a decision any more, it is waiting on something going wrong that names it.

Not closed, deliberately — the captured thinking is the expensive part and re-capture costs more than the label does.