pico-mcp

A Model Context Protocol (MCP) server for interacting with pico-agent.

Features

• SPIFFE Support: Out of the box JWT-SVID authentication for calling pico-agent.
• Generic Task Calling: Call any task on pico-agent using the call_pico_task tool.
• Specific Tools: Includes a first-class pv_resize tool for Kubernetes PVC resizing.
• Dynamic Task Discovery: Use list_pico_tasks to see what tasks the agent supports.

Requirements

• Go 1.24+
• pico-agent running and accessible.
• SPIRE Agent running (optional, but required for SPIFFE auth).

Installation

go build -o pico-mcp ./cmd/pico-mcp

Usage

Run the server via Stdio (standard for MCP clients):

./pico-mcp --config config.yaml

Configuration (YAML)

Create a config.yaml to define your agents:

spire:
  agent_socket: "unix:///run/spire/sockets/agent.sock"
  enabled: true

agents:
  - id: "cluster-alpha"
    url: "http://pico-agent.alpha.svc.cluster.local:8080"
    jwt_audience: "pico-agent-alpha"
  - id: "cluster-beta"
    url: "http://pico-agent.beta.svc.cluster.local:8080"
    jwt_audience: "pico-agent-beta"

MCP Tools

list_pico_agents

Lists all configured pico-agent IDs.

list_pico_tasks

Lists all available task types on a specific pico-agent.
Arguments:

• agent_id (string, required): The ID of the target pico-agent.

call_pico_task

Calls a generic task on a specific pico-agent.
Arguments:

• agent_id (string, required): The ID of the target pico-agent.
• type (string, required): The task type.
• payload (object, required): The JSON payload for the task.

pv_resize

Resizes a Kubernetes PersistentVolumeClaim on a specific pico-agent.
Arguments:

• agent_id (string, required): The ID of the target pico-agent.
• namespace (string, required): The K8s namespace.
• pvc_name (string, required): The name of the PVC.
• new_size (string, required): The target size (e.g., 10Gi).
• wait (boolean, optional): Wait for resize to complete.
• timeout (string, optional): Timeout for the wait (e.g., 5m).

License

MIT (c) 2026 Andy Lo-A-Foe. See LICENSE for details.