Quickstart
Prerequisites
Section titled “Prerequisites”- Kubernetes cluster 1.28+ — any distribution (EKS, GKE, AKS, k0s, k3s, kind)
- kubectl 1.28+ — configured to access your cluster
- Docker 20+ — for building tentacle images
- Deno 2.x — for running the engine locally and tests
- Helm 3+ — for installing the MCP server
Install the CLI
Section titled “Install the CLI”Recommended
Section titled “Recommended”curl -fsSL https://raw.githubusercontent.com/randybias/tentacular/main/install.sh | shThis installs the tntc binary to ~/.local/bin and the Deno engine to ~/.tentacular/engine.
Build from Source
Section titled “Build from Source”git clone git@github.com:randybias/tentacular.gitcd tentacularmake install # builds with version info, installs to ~/.local/bin/tntc version # verifyNote:
make installembeds version, commit, and build date via ldflags. A barego build ./cmd/tntcproduces a dev build withversion=dev. Building from source requires Go 1.22+.
Install the MCP Server (One-Time Per Cluster)
Section titled “Install the MCP Server (One-Time Per Cluster)”The MCP server is the in-cluster control plane. The CLI routes all cluster operations through it.
# Clone the MCP server repogit clone git@github.com:randybias/tentacular-mcp.git
# Generate a token and install via HelmTOKEN=$(openssl rand -hex 32)kubectl create namespace tentacular-supporthelm install tentacular-mcp ./tentacular-mcp/charts/tentacular-mcp \ --namespace tentacular-system --create-namespace \ --set auth.token="${TOKEN}"Save the token for CLI configuration:
mkdir -p ~/.tentacularecho "${TOKEN}" > ~/.tentacular/mcp-tokenchmod 600 ~/.tentacular/mcp-tokenSee MCP Server Setup for full details and Helm values.
Configure the CLI
Section titled “Configure the CLI”# Set defaults (registry, runtime class)tntc configure --registry registry.example.com
# Add MCP endpoint to ~/.tentacular/config.yaml:Edit ~/.tentacular/config.yaml to add your environment:
environments: dev: image: registry.example.com/tentacular-engine:latest runtime_class: gvisor mcp_endpoint: http://<node-ip>:30080/mcp mcp_token_path: ~/.tentacular/mcp-tokenSee Cluster Configuration for the full config reference.
# Verify cluster connectivitytntc cluster check
# Generate a cluster profile (helps agents design tentacles)tntc cluster profile --saveInitialize the Workspace
Section titled “Initialize the Workspace”tntc init-workspace # creates ~/tentacles with shared secrets poolcd ~/tentaclesCreate Your First Tentacle
Section titled “Create Your First Tentacle”From Scratch
Section titled “From Scratch”tntc init my-first-tentaclecd my-first-tentacleThis scaffolds:
workflow.yaml— tentacle definitionnodes/hello.ts— a starter nodetests/fixtures/hello.json— test fixture
From a Scaffold
Section titled “From a Scaffold”# Browse available scaffoldstntc scaffold list
# Create a tentacle from a scaffoldtntc scaffold init word-counter my-first-tentacle --no-paramscd my-first-tentacleDevelop Locally
Section titled “Develop Locally”# Validate the workflow spectntc validate
# Run the local dev server with hot-reloadtntc dev
# In another terminal, trigger the tentaclecurl -X POST http://localhost:8080/run
# Run teststntc testProvision an Enclave
Section titled “Provision an Enclave”Every tentacle lives inside an enclave. If you haven’t provisioned one yet:
# Provision an enclave (this creates the namespace, Postgres, S3, RBAC, and network policies)tntc enclave provision --name my-team --owner you@example.com \ --channel-id C08XXXXXXX --channel-name my-team
# Verify it's activetntc enclave info my-teamIf you’re using The Kraken Slack bot, you can provision an enclave by messaging it in your Slack channel instead — see Your First Enclave.
Deploy to Kubernetes
Section titled “Deploy to Kubernetes”# Set up secrets (if the tentacle needs them)tntc secrets init# Edit .secrets.yaml with your values
# Build the engine imagetntc build -r registry.example.com --push
# Deploy into your enclavetntc deploy --enclave my-team -r registry.example.com
# Verifytntc status my-first-tentacletntc logs my-first-tentacle --tail 20Trigger and Monitor
Section titled “Trigger and Monitor”# Trigger manuallytntc run my-first-tentacle
# List all deployed tentacles (scoped to your enclave)tntc list --enclave my-team
# Check healthtntc status my-first-tentacle --detail
# Security audittntc audit my-first-tentacleClean Up
Section titled “Clean Up”tntc undeploy my-first-tentacle --yesNext Steps
Section titled “Next Steps”- Your First Tentacle — detailed walkthrough of building a tentacle from scratch
- Cluster Configuration — full config.yaml reference
- MCP Server Setup — detailed MCP server installation
- CLI Reference — complete command reference
- Security — understand the defense-in-depth model
- Catalog Templates — browse and use pre-built templates