Last modified June 21, 2026

'muster serve' command reference

muster serve starts the aggregator server. It connects the configured MCP servers, exposes their tools behind one unified MCP endpoint, and keeps that endpoint available for IDEs, the developer portal chat, and the other muster commands.

Usage

muster serve [flags]

With no flags, Muster loads its configuration from ~/.config/muster, starts the MCP servers and services marked for autostart, and prints a summary with the connection details.

To connect an IDE that can’t reach the endpoint directly, bridge it with muster agent --mcp-server. IDEs that support remote, OAuth-protected MCP connect straight to the aggregator URL instead.

Flags

NameDescription
--config-pathConfiguration directory. Defaults to ~/.config/muster
--debugEnable general debug logging
--silentDisable console log output. Does not silence OTLP export
--yoloDisable the denylist for destructive tool calls. Use with caution
--enable-eventsEnable Kubernetes event emission (alpha)
--extra-ca-filePEM file whose certificates are appended to the system trust pool at startup

OAuth protection

These flags turn Muster into an OAuth 2.1 protected resource and enable the MCP client proxy for authenticating to remote MCP servers. Full setup needs a configuration file. See Set up OAuth for Muster.

NameDescription
--oauth-serverEnable OAuth 2.1 protection for the Muster server
--oauth-server-base-urlBase URL of the Muster server for OAuth, for example https://muster.<management-cluster>.<base-domain>
--oauth-mcp-clientEnable the OAuth MCP client proxy for remote MCP server authentication
--oauth-mcp-client-public-urlPublicly accessible URL of the Muster server for OAuth callbacks
--oauth-mcp-client-idOAuth client identifier. Auto-derived from the public URL when empty