Magertron™: Governance and Spend Control for Enterprise AI Agents

✦ AI Orchestrator Assistant Advisory · read-only · grounded in live platform state

Install in 5 minutes

# Bare Ubuntu box — installs k3s, helm and Magertron
$ curl -fsSL https://magertron.com/bootstrap.sh | sudo bash -s -- \
      --api-public-url https://mcp.example.com

# Already have a Kubernetes cluster
$ git clone https://github.com/magertron/orchestrator.git
$ cd orchestrator
$ ./install.sh                                  # Free tier — no license needed
$ ./install.sh --license /path/to/license.json  # With a license

Enterprise Security

Rogue MCP servers are already inside your network

Developers are spinning up ungoverned MCP servers on laptops, in personal cloud accounts, and inside your perimeter — with no audit trail and no controls. AI agents talking to these servers can execute actions at scale.

Now you can find them. Magertron reads MCP client configs on every endpoint you manage, shows you every server in use — approved or not — and points them at the gateway with a single policy change. No resident agent on the laptop — a script and a timer, delivered by the MDM you already run.

Read the security guide →

Governed Surfaces

Every model, API, stream and tool call. One policy plane.

Swipe to see the full diagram →

Server Management

Full lifecycle control for every server you run

Deploy MCP servers and LLM pods from any container image, monitor real-time CPU and memory metrics, and scale with a slider. Every action is audited.

• Live metrics charts polling every 5 seconds
• Real pod logs from Kubernetes API
• One-click rollback from deployment history
• Rolling restart with zero downtime

Governance

Enforce policy before anything reaches production

Namespace-scoped governance policies evaluate every deployment at deploy time. Error-severity rules block non-compliant servers. Warnings flag for review.

• Different policies for prod vs dev environments
• Resource limits, transport rules, naming standards
• Dry-run evaluator for pre-flight checks
• Export/import policies across clusters

⬡

Server Lifecycle

Deploy, scale, restart, and roll back MCP servers and LLM pods from a single console.

▦

Server & Model Registry

Central catalog of every MCP server and LLM provider in your organization. Most platforms don't have a registry — Magertron does, in your cluster.

◈

Governance Engine

Policies for resource limits, transport, naming, and security. Namespace-scoped for prod vs dev.

◷

Audit & Compliance

OCSF-aligned audit events. SIEM-ready, validated with Splunk Cloud. Built for regulated environments.

Developer Experience

A CLI that gets out
of your way

Single binary, zero dependencies. Deploy, scale, and evaluate governance from your terminal. Ships for macOS and Linux.

$ mcpctl login https://mcp.acme.internal admin

✓ Logged in as admin (system:platform-admin)

$ mcpctl deploy code-assistant mcp-prod ghcr.io/acme/code-assistant --tag v2.1 --team platform

Deploying code-assistant to mcp-prod...

✓ Server deployed (state: Running)

$ mcpctl governance evaluate spec.json --namespace mcp-prod

✓ ALLOWED

⚠ Mutating tools detected — review required before production use

$ mcpctl servers

NAME NAMESPACE STATE REPLICAS IMAGE

code-assistant mcp-prod Running 2/2 ghcr.io/acme/code-assistant:v2.1

search-tool mcp-prod Running 3/3 ghcr.io/acme/search:latest

doc-retriever mcp-staging Running 1/1 ghcr.io/acme/docs:v1.4

Homebrew macOS · Linux ▸

Cleanest install if you have brew — and the only one that upgrades itself:

$ brew trust magertron/tap
$ brew install magertron/tap/mcpctl

Homebrew 6 asks you to trust any tap outside its core before it will load a formula, because a formula is code that runs on your machine. One command, once. Afterwards brew upgrade keeps mcpctl current.

curl one-liner macOS · Linux ▸

No package manager required:

$ curl -fsSL https://magertron.com/install-mcpctl.sh | sh

Debian / Ubuntu apt · amd64 · arm64 ▸

One-time setup

$ curl -fsSL https://magertron.com/apt/magertron-archive-keyring.gpg | sudo tee /etc/apt/trusted.gpg.d/magertron-archive-keyring.gpg > /dev/null
$ echo "deb [signed-by=/etc/apt/trusted.gpg.d/magertron-archive-keyring.gpg] https://magertron.com/apt stable main" | sudo tee /etc/apt/sources.list.d/magertron.list
$ sudo apt update

Install

$ sudo apt install mcpctl

RHEL / Fedora / Rocky dnf · x86_64 ▸

One-time setup

$ sudo curl -fsSL https://magertron.com/yum/magertron.repo -o /etc/yum.repos.d/magertron.repo

Install

$ sudo dnf install mcpctl

View latest release →