Container orchestration in one binary — containerd, its own eBPF datapath, Let's Encrypt TLS, GitOps, autoscaling, and an MCP server. No Kubernetes.
Kanea is a lightweight container orchestration platform written in Go. Services run on containerd, networking and load balancing are Kanea's own eBPF datapath, TLS comes from Let's Encrypt, a per-node CA, or certificates you already have, and it ships a real-time shadcn/ui dashboard, an MCP server for AI agents, GitOps pipelines (rootless BuildKit), eBPF-driven autoscaling, and encrypted S3-backed state replication with backup and restore.
Website · PRD · Threat model · DR runbook
The installer fetches the binary, verifies it, and stops. Checksum verification is mandatory and there is no flag to skip it; the Sigstore signature is verified too when cosign is on PATH. It generates no keys and starts nothing.
kanea init then installs the runtime — containerd, runc and rootless buildkitd — at versions pinned by SHA-256 in the binary (PRD §5.2.12). The network layer needs no component: the eBPF datapath is compiled into kanea itself (§5.2.5). It installs under its own prefix on its own socket, so a node that ran Docker yesterday runs it tomorrow.
Prefer to do it by hand? Every release publishes kanealinux.tar.gz, checksums.txt, and a keyless cosign signature over the checksums:
There is no long-lived signing key to guard: the signature is bound by Sigstore to the release workflow in this repository, and the proof is in a public transparency log.
Homebrew ships the CLI, not the node (PRD §5.2.12): on macOS you get the authoring half — kanea plan validates job specs with file-and-line diagnostics, no daemon needed — while the platform itself runs on Linux. On a Linux machine
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/m18h--kanea.html)
Keyboard-first terminal dashboard for Coolify: deployments, live logs across your whole fleet, and an MCP server for your agent
mkk2026/agentregDNS for AI agents: a self-hosted registry to register, discover, and health-check MCP agents. One Go binary.
valtors/relayAll-in-one MCP server. Agents get memory, tools, and coordination in one binary.
bybit-exchange/kaasTurn scattered notes, docs and transcripts into a queryable Markdown wiki — an LLM knowledge-base compiler with MCP access, no embeddings, self-hosted.
HalemoGPA/whatsapp-mcp-serverAuthenticated, self-hosted WhatsApp MCP server that serves 96 tools for the token cost of 29, with a labeled eval for tool-retrieval accuracy. Go bridge + Python FastMCP.
saltmd/salt.mdThe open-source workspace for people and AI agents. Docs, databases and realtime collaboration with an MCP server in the same binary, so agents work in the same workspace on the same permissions. One
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.