Commands / kosa8 mcp add
kosa8 mcp add
Register a third-party MCP server to run sandboxed behind the gateway
Usage
kosa8 add NAME -- CMD [ARGS...]
The server runs as a container inside a dedicated sandbox (mcp-NAME) when
kosa8 mcp serve starts. Its tools appear namespaced as NAME_tool, filtered
by --allow-tool, and the sandbox's egress policy bounds what it can reach.
Options
| Flag | Type | What it does | Default |
|---|---|---|---|
--allow-tool | stringArray | only expose this tool (repeatable; default all) | [] |
--egress | string | sandbox network policy: any (default) or deny | — |
--egress-allow | stringArray | permit outbound traffic only to these hosts (repeatable) | [] |
-e, --env | stringArray | KEY=VALUE for the server process (repeatable; use for secrets) | [] |
--image | string | container image the server runs in | alpine |