One command. Your cluster. Agent-ready.
Starling-EX gives your team and your AI agents a safe way to operate Kubernetes. It's a self-hosted platform with SSO, an operator, a Helm chart, and an MCP server and CLI. It runs in your cluster, under your control.
Simple cluster questions still need five dashboards
"Why is this pod restarting?" and "which services have no network policy?" still need kubectl skills and five dashboards. Giving an AI agent direct cluster credentials is a security review you'd rather not have.
Install, sign in, connect, ask
Install
Starling-EX into your cluster with the installer or the Helm chart.
Sign in
Through Dex SSO, federated to the identity provider you already use.
Connect agents
To the Starling MCP server, or use the Starling CLI from a terminal.
Ask in plain words
Agents get structured, scoped tools instead of raw kubeconfig access, and every call is auditable.
Built for agents that need guardrails
- MCP server and CLI so agents can operate Kubernetes safely
- Read-only by default for local MCP; write tools only when you explicitly enable them
- Dex SSO, a Kubernetes operator and a Helm chart (Starling-EX Community Edition, Apache-2.0)
- Runs in your cluster: your RBAC credentials and workload data stay in your environment
- Feeds Reflexion: the same scoped access Reflexion uses to diagnose incidents
- External features and integrations: in development
Platform teams adopting AI agents
- Platform engineers who want one install for SSO, the operator and agent access
- Teams adopting AI coding agents and MCP clients that need cluster access without broad credentials
- Teams on a Murmuration tier putting their included Starling credits to work
Credits, not seats
- Starling credits are included with every Murmuration tier: 5,000 (Niche), 25,000 (Growth), 75,000 (Scale Partner), custom (Enterprise).
- Top-ups: $1 = 50 credits.
- Community Edition: Apache-2.0.
- Starling-EX plan pricing: talk to us.
Questions
What's the difference between Starling and Starling-EX?
Starling is the MCP server and CLI. Starling-EX is the self-hosted platform around it, with SSO, an operator and a Helm chart.
Can an agent break my cluster through Starling?
Local MCP runs read-only by default. Write tools are only exposed when you explicitly enable them, and calls are audited.
What do credits pay for?
Metered Starling tool calls. Murmuration tiers include a fixed credit grant, and top-ups are $1 = 50 credits.
Is it open source?
The Community Edition is Apache-2.0. The source repo isn't public yet.