diff --git a/manifest/overlays/production/kustomization.yaml b/manifest/overlays/production/kustomization.yaml
index 1e87266..fdf4502 100644
--- a/manifest/overlays/production/kustomization.yaml
+++ b/manifest/overlays/production/kustomization.yaml
@@ -8,6 +8,7 @@ resources:
   - mcpserver-gitea.yaml
   - mcpserver-argocd.yaml
   - mcpserver-kubernetes.yaml
+  - mcp-headless-services.yaml
   - mcp-group-homelab-core.yaml
   - ingressroute.yaml
   - secrets/gitea-mcp-secret.sealed.secret.yaml
@@ -15,4 +16,3 @@ resources:
   - mcp-tool-config-state-docs.yaml
   - mcp-tool-config-ops.yaml
   - mcp-tool-config-dev.yaml
-
diff --git a/manifest/overlays/production/mcp-headless-services.yaml b/manifest/overlays/production/mcp-headless-services.yaml
new file mode 100644
index 0000000..7149cf9
--- /dev/null
+++ b/manifest/overlays/production/mcp-headless-services.yaml
@@ -0,0 +1,56 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: gitea-mcp
+  namespace: toolhive-system
+  labels:
+    app: gitea-mcp
+    toolhive: "true"
+    toolhive-name: gitea-mcp
+spec:
+  clusterIP: None
+  publishNotReadyAddresses: true
+  selector:
+    app: gitea-mcp
+  ports:
+    - name: mcp
+      port: 8080
+      targetPort: 8080
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: argocd-mcp
+  namespace: toolhive-system
+  labels:
+    app: argocd-mcp
+    toolhive: "true"
+    toolhive-name: argocd-mcp
+spec:
+  clusterIP: None
+  publishNotReadyAddresses: true
+  selector:
+    app: argocd-mcp
+  ports:
+    - name: mcp
+      port: 8080
+      targetPort: 8080
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kubernetes-mcp
+  namespace: toolhive-system
+  labels:
+    app: kubernetes-mcp
+    toolhive: "true"
+    toolhive-name: kubernetes-mcp
+spec:
+  clusterIP: None
+  publishNotReadyAddresses: true
+  selector:
+    app: kubernetes-mcp
+  ports:
+    - name: mcp
+      port: 8080
+      targetPort: 8080