Back to Browse

Jobd MCP Server

Developer ToolsUse Caution4.7MCP RegistryLocal
Free

Server data from the Official MCP Registry

Self-hostable GPU-aware job broker: submit, route by VRAM, babysit jobs across machines via MCP.

About

Self-hostable GPU-aware job broker: submit, route by VRAM, babysit jobs across machines via MCP.

Security Report

4.7
Use Caution4.7High Risk

jobd is a well-architected job broker with thoughtful security controls and clear documentation of its threat model. Authentication and authorization are properly implemented with bearer tokens and IP-based ACLs, and code quality is generally high with appropriate input validation. However, several moderate-severity findings warrant attention: the broker executes arbitrary shell commands via subprocess when `--stdin` or MCP tools are used, environment variables are passed to job processes without explicit filtering, and three endpoints (`/livez`, `/readyz`, `/metrics`) are intentionally unauthenticated which could leak worker fleet inventory. These are acceptable trade-offs for the stated use case (trusted tailnets only) but users must understand the security posture and follow the deployment guidance strictly. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

3 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

process_spawn

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Base URL of the jobd broker the MCP server talks to. Defaults to http://127.0.0.1:8765.Optional

Environment variable: JOBD_URL

Bearer token; must match the broker's JOBD_API_TOKEN. Required unless the broker runs with JOBD_ALLOW_NO_AUTH=1.Required

Environment variable: JOBD_API_TOKEN

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-musharna-jobd": {
      "env": {
        "JOBD_URL": "your-jobd-url-here",
        "JOBD_API_TOKEN": "your-jobd-api-token-here"
      },
      "args": [
        "jobd"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!