af-jupyterlab-mcp

MCP server that lets AF users create, inspect, and delete their own per-user JupyterLab servers on the UChicago ATLAS Analysis Facility Kubernetes cluster — the same notebooks af-portal deploys today, exposed as tools for LLMs.

Architecture

LLM <--MCP/HTTP--> af-jupyterlab-mcp <--k8s API--> notebook namespace (Pod/Service/Secret/Ingress)
                         ^
                         | Authorization: Bearer <broker-issued JWT>
                         |
              af-mcp-platform credential broker

Phase 1 (this repo, today) ships six tools that manage the Pod/Service/ Secret/Ingress quadruple for a notebook, ported from af-portal's portal/jupyterlab.py and its four Jinja templates. Phase 2 (tracked, not yet built) adds a typed proxy to the Datalayer jupyter-mcp-server running inside the notebook itself — see maniaclab/af-mcp-platform#189.

Project layout

src/af_jupyterlab_mcp/
├── cli.py               # argparse: `af-jupyterlab-mcp serve` (HTTP only)
├── config.py            # env-driven Settings: namespace, domain, image allowlist, quotas
├── server.py            # FastMCP setup, lifespan (k8s client + broker verifier), tool registration
├── auth/
│   └── broker.py        # extract_bearer(), get_broker_claims() -- broker-issued JWT verification
├── k8s/
│   ├── errors.py         # GuardrailError, NameConflictError, NotFoundOrNotYoursError, ...
│   ├── guardrails.py     # CPU/memory/duration range + image allowlist validation
│   ├── names.py          # sanitize_k8s_pod_name, name availability, name generation
│   ├── templates.py      # Jinja rendering of the four ported manifests
│   ├── notebooks.py      # create/get/list/delete notebook (ported portal logic)
│   ├── gpu.py            # get_gpu_availability (ported portal logic)
│   └── templates/        # pod.yaml.j2, service.yaml.j2, secret.yaml.j2, ingress.yaml.j2
│                          # (ported verbatim from af-portal/portal/templates/jupyterlab/)
└── tools/
    └── jupyterlab.py     # the six @mcp.tool() functions

Tool surface

create_jupyter_server
list_jupyter_servers
get_jupyter_server
delete_jupyter_server
get_gpu_availability
list_supported_images

The owner of every server is always claims.unixname from the verified broker JWT — no tool takes an owner/username argument.

Build and test commands

pixi run test          # quick tests
pixi run lint          # pre-commit + pylint
pixi run helm-lint      # lint + smoke-render the Helm chart

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

af_jupyterlab_mcp-0.2.0.tar.gz (137.8 kB view details)

Uploaded Aug 21, 2026 Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

af_jupyterlab_mcp-0.2.0-py3-none-any.whl (37.2 kB view details)

Uploaded Aug 21, 2026 Python 3

File details

Details for the file af_jupyterlab_mcp-0.2.0.tar.gz.

File metadata

Download URL: af_jupyterlab_mcp-0.2.0.tar.gz
Upload date: Aug 21, 2026
Size: 137.8 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for af_jupyterlab_mcp-0.2.0.tar.gz
Algorithm	Hash digest
SHA256	`88f60270f1aa36c18e24d24fce1084e23a2539cfa06fc6a925a473cfdf8541b0`
MD5	`c27b19169debde27a568405e76ea760f`
BLAKE2b-256	`c1be22b6bc380e46dab81347ba1922837e9f14b13cfa24eb0c8bb698950fe99d`

See more details on using hashes here.

Provenance

The following attestation bundles were made for af_jupyterlab_mcp-0.2.0.tar.gz:

Publisher: cd.yml on maniaclab/af-jupyterlab-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: af_jupyterlab_mcp-0.2.0.tar.gz
- Subject digest: 88f60270f1aa36c18e24d24fce1084e23a2539cfa06fc6a925a473cfdf8541b0
- Sigstore transparency entry: 2550593270
- Sigstore integration time: Aug 21, 2026
Source repository:
- Permalink: maniaclab/af-jupyterlab-mcp@8f45d54cb6d76e44c3cecd6f5101a7e49c65b457
- Branch / Tag: refs/tags/v0.2.0
- Owner: https://github.com/maniaclab
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: cd.yml@8f45d54cb6d76e44c3cecd6f5101a7e49c65b457
- Trigger Event: release