| name | mcp-runtime-local-dev |
| description | Local Kind contributor endpoints, API keys, test-mode logins, port-forward URLs, and Sentinel auth for MCP Runtime. Use when developing against kind-mcp-runtime, curling `/api/v1` or MCP paths on localhost:18080, or debugging 401s in test-mode — after cluster bring-up (qa-cluster-bringup). |
MCP Runtime — local dev endpoints and auth
Prerequisites
Cluster running per .codex/skills/qa-cluster-bringup/SKILL.md or docs/contributor/README.md.
kubectl port-forward -n traefik svc/traefik 18080:8000
URLs (test-mode)
| Service | URL |
|---|
| UI | http://localhost:18080/ |
| API | http://localhost:18080/api/v1 |
| Grafana | http://localhost:18080/grafana |
| MCP samples | http://localhost:18080/workspace-assistant-mcp/mcp, …/data-utility-mcp/mcp, …/text-analysis-mcp/mcp |
| Prometheus (debug) | kubectl port-forward -n mcp-sentinel svc/prometheus 9090:9090 |
PII redaction: config/ingress/overlays/http + pii-redactor@file — keep off /api/v1 routes (keys and grant subjects must stay exact).
API keys
kubectl get secret mcp-sentinel-secrets -n mcp-sentinel -o jsonpath='{.data.UI_API_KEY}' | base64 -d
kubectl get secret mcp-sentinel-secrets -n mcp-sentinel -o jsonpath='{.data.INGEST_API_KEYS}' | base64 -d
UI_API_KEY must appear in both API_KEYS and ADMIN_API_KEYS for admin curl + browser loginINGEST_API_KEYS for analytics ingest only- After secret changes: roll platform-api, runtime-api, analytics-api, UI, ingest, and gateway workloads
/api/v1 401 → ./bin/mcp-runtime cluster doctor
Test-mode logins
setup --test-mode seeds (local only):
test@mcpruntime.org / test@123admin@mcpruntime.org / admin@123
Override via PLATFORM_DEV_* in mcp-sentinel-secrets; roll the split API Deployments after changes.
Platform admin bootstrap (one-shot)
kubectl apply -f k8s/21-platform-admin-bootstrap-job.yaml
kubectl wait --for=condition=complete job/mcp-sentinel-platform-admin-bootstrap -n mcp-sentinel --timeout=120s
kubectl patch secret mcp-sentinel-secrets -n mcp-sentinel --type merge -p '{"stringData":{"PLATFORM_ADMIN_PASSWORD":""}}'
Clear PLATFORM_ADMIN_PASSWORD from steady-state API env after bootstrap.
Quick commands
./bin/mcp-runtime status
./bin/mcp-runtime bootstrap
./bin/mcp-runtime cluster doctor
Governance traffic and grants: .codex/skills/mcp-runtime-governance/SKILL.md.
