Validates AI infra code on real VMs. Self-corrects until it works. No containers, no sandboxes.
Copy the AI prompt to install this server into Claude Code, Cursor, or another agent β or use 1-click editor setup below.
π‘ Paste the JSON block into your client's configuration file under mcpServers, then restart the application.
Instant disposable clusters for LLM-generated networks and infra.
Say an LLM writes a VyOS NAT config, an OpenWrt firewall rule set, or a bash script to harden a CentOS cluster. Where do you run it before it touches your environment? Antrieb gives the LLM a disposable multi-node cluster, with real VMs and real networking, to try what it generates. Break it, quickly reprovision, try again. No cleanup.
Same OS and appliances your LLM-generated code will target in production: CentOS Stream, Ubuntu, Debian, Alma, Alpine, VyOS, OPNsense, SONiC, OpenWrt. Multi-network topologies with per-NIC assignment. Not a container, not a microVM, not some unknown Linux β the same kernels and packages your real fleet runs.
Root access, private networking, passwordless SSH between nodes. Ten minutes per cluster. Clean slate every time. Instant clusters that change the economics of being wrong for LLMs.
Antrieb is a remote MCP server. Nothing to install. Add it to your config and start provisioning.
With web-based AI clients, add Antrieb as a custom connector.
In claude.ai: go to Settings β Connectors, click Add custom connector. Enter:
Antriebhttps://antrieb.sh/mcpClick Add, then Connect and sign in. Back in your chat, try something like:
Create a 3-node Kubernetes cluster, with node1 running both as control-plane and worker, and node2/node3 as pure workers. Install nginx with 3 pods and pod anti-affinity.
Walkthrough video: https://youtu.be/8nts8ol-yeA
Get a free API key at antrieb.sh/dash, then add this to your MCP client config (e.g. .mcp.json for Claude Desktop):
Put this JSON in the current folder in a file called .mcp.json. Claude Code will find it automatically.
Put this TOML content in ./.codex/config.toml. Then set the ANTRIEB_TOKEN environment variable with your API key before launching Codex.
No local install, no dependencies, no Docker.
Your LLM controls real VMs through 5 tools:
The LLM drives the entire workflow: provision a cluster, install software command by command, verify each step, and iterate until it works. Antrieb provides the infrastructure; the LLM provides the intelligence.
| ANI | Description |
|---|---|
ubuntu24.04 | Ubuntu 24.04 LTS: apt, bash, Python 3, curl, wget, jq |
almalinux9 | AlmaLinux 9 (RHEL-compatible): dnf, bash, Python 3 |
centos-stream10 | CentOS Stream 10: dnf, bash, Python 3 |
debian13 | Debian 13: apt, bash, Python 3, curl, wget, jq |
alpine | Alpine Linux 3.23: apk, minimal, musl libc |
sonic | SONiC: open-source network OS for data-center switches |
vyos | VyOS: Linux-based router / firewall with a unified CLI |
openwrt | OpenWrt 25.12: Linux-based firmware with UCI configuration |
opnsense | OPNsense: FreeBSD-based firewall / router with web UI |
Stack images are custom images created by enriching the base images with additional packages.
| ANI | Description |
|---|---|
terraform-aws | Terraform with real AWS (free-tier, Antrieb's credentials, Vault-brokered STS) |
ansible-controller | Ansible control node with collections |
podman | Podman, Buildah, Skopeo (rootless, Docker-API-compatible) |
mongodb | MongoDB server image for database provisioning and integration tests |
postgresql | PostgreSQL server image for SQL database tests |
vault | HashiCorp Vault image for secrets workflows and Terraform-backed credentials |
mariadb | MariaDB server image for MySQL-compatible database tests |
nginx | NGINX image for web server and reverse-proxy scenarios |
helm-k3s | K3s with Helm for lightweight Kubernetes scenarios |
asterisk-pbx | Asterisk PBX image for SIP and telephony scenarios |
Use search to discover all available images with full descriptions, or just specify a distro name and Antrieb picks the right one.
Networking is a first-class input to provision, not an afterthought. Every cluster is L2-isolated from every other cluster (even ones you own), with hostname resolution, passwordless SSH between its own nodes, and cluster-scoped env vars auto-injected into every exec call. What varies between runs is how nodes are wired and controlled by the optional networks and nics parameters on provision.
There are two modes: the default network (flat, one-subnet, internet-reachable) and declared networks (first-class multi-subnet, multi-NIC topologies).
node1, node2, node3 in /etc/hosts on every node.ssh node2 hostname just works.exec: NODE_NAME, NODE_INDEX, NODE_IP, CLUSTER_HOSTS (multiline IP NAME β drop-in for /etc/hosts), CLUSTER_SSH_PUBKEY, CLUSTER_SSH_PRIVKEY.networks / nics are omitted)You get:
/24 network named default, one NIC per node, DHCP-assigned IPs.Use this whenever the network isn't what you're testing β application-level work, distro-specific configuration, Ansible playbooks, CI pipelines, Kubernetes-on-three-ubuntus.
Pass networks and nics when the topology itself is the thing under test: routers, firewalls, DMZs, isolated back-end subnets, dual-homed nodes, BGP meshes.
Contract:
/24. CIDRs are auto-allocated when omitted; only /24 is supported.egress: true β internet-reachable on the default port allowlist. egress: false β traffic stays inside the network; no default route out.dhcp: true (default) β the platform assigns IPs. dhcp: false β you assign IPs (use this when a router VM owns addressing or you need precise /31 links).nics.<node> becomes eth0, eth1, ... in the listed order..1 of every DHCP-enabled network is reserved for the platform bridge gateway. Router VMs should claim .254 (or DHCP-client) β assigning .1 to a VM causes ARP flip-flop.This unlocks serious networking work: VyOS / OPNsense firewalls with WAN/LAN zones, SONiC as an L2 switch or L3 router, OpenWrt with its fw3 zone model, nginx behind a reverse-proxy LAN, BGP peering over /31 transit links, hairpin NAT, DNAT port-forwards. Full walkthroughs for each pattern live in the @antrieb/* runbook library.
Reusable topologies should be captured in runbooks. Networks are declared inline during provision; if the same topology matters across scenarios, save the topology, commands, and verification steps together as a runbook.
The default antrieb/* runbook library includes verified scenarios such as:
No reviews yet β be the first to share how this listing worked for you.
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
[](https://allmcps.com/mcp/antrieb)<a href="https://allmcps.com/mcp/antrieb"><img src="https://allmcps.com/api/badge/antrieb?style=directory" alt="Antrieb on AllMCPs" /></a>