Kubectl MCP Server

مجتمعي السحابة وDevOps

Interact with Kubernetes clusters through natural language.

ماذا يمكنك أن تفعل مع Kubectl MCP Server؟

  • 🤖 26 default tools, 209 opt-in - Generic kubectl and Helm by default, ecosystem toolsets on demand
  • 🎯 14 Workflow Prompts - Pre-built workflows for common operations
  • 📊 8 Resources + 6 Templates - Browsable Kubernetes data exposure
  • 🔄 Opt-in ecosystem toolsets - GitOps, cert-manager, policy, Velero, KEDA, Cilium, Rollouts, CAPI, KubeVirt, Istio, kind, vCluster
  • ⚡ Stateless MCP 2026-07-28 - stdio and Streamable HTTP, older clients negotiated automatically
  • 🔐 Security First - Read-only mode, per-call confirmation, Secret redaction, flag-injection guard
  • 🏥 Advanced Diagnostics - AI-powered troubleshooting and cost optimization
  • ☸️ Multi-Cluster - Target any cluster via context parameter in every tool

التثبيت

خطوات التثبيت موجودة في التوثيق أدناه. التوثيق

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. Installation
  2. 📑 Table of Contents
  3. What Can You Do?
  4. Why kubectl-mcp-server?
  5. Live Demos
  6. Installation
  7. Getting Started
  8. Quick Setup with Your AI Assistant
  9. MCP Client Compatibility
  10. All Supported AI Assistants
  11. Complete Feature Set
  12. Using the CLI
  13. Advanced Configuration
  14. Enterprise: OAuth 2.1 Authentication
  15. Security
  16. Stateless MCP (2026-07-28)
  17. Integrations & Ecosystem
  18. In-Cluster Deployment
  19. Architecture
  20. Agent Skills (25 Skills for AI Coding Agents)
  21. Multi-Cluster Support
  22. Development & Testing
  23. Contributing
  24. Support & Community
  25. License
  26. Links & Resources

kubectl-mcp-server**

Control your entire Kubernetes infrastructure through natural language conversations with AI.

Talk to your clusters like you talk to a DevOps expert. Debug crashed pods, optimize costs, deploy applications, audit security, and manage Helm charts, all through natural language.

Part of CNCF Landscape, Next to Terraform


Installation

# Run directly without installation - works instantly!
npx -y kubectl-mcp-server

# Or install globally for faster startup
npm install -g kubectl-mcp-server
Or install with pip (Python)
pip install kubectl-mcp-server

# Or run it isolated with uv
uvx --from kubectl-mcp-server kubectl-mcp

📑 Table of Contents


What Can You Do?

Simply ask your AI assistant in natural language:

💬 "Why is my pod crashing?"

  • Instant crash diagnosis with logs, events, and resource analysis
  • Root cause identification with actionable recommendations

💬 "Deploy a Redis cluster with 3 replicas"

  • Creates deployment with best practices
  • Configures services, persistent storage, and health checks

💬 "Show me which pods are wasting resources"

  • AI-powered cost optimization analysis
  • Resource recommendations with potential savings

💬 "Which services can't reach the database?"

  • Network connectivity diagnostics with DNS resolution
  • Service chain tracing from ingress to pods

💬 "Audit security across all namespaces"

  • RBAC permission analysis
  • Secret security scanning and pod security policies

26 default tools, 209 with every toolset | 14 workflow prompts | 8 resources + 6 resource templates | Stateless MCP 2026-07-28 | Works with all major AI assistants

Why kubectl-mcp-server?

  • 🚀 Stop context-switching - Manage Kubernetes directly from your AI assistant conversations
  • 🧠 AI-powered diagnostics - Get intelligent troubleshooting, not just raw data
  • 💰 Built-in cost optimization - Identify waste and get actionable savings recommendations
  • 🔒 Enterprise-ready - OAuth 2.1 auth with per-tool scopes, read-only mode, Secret redaction, fail-closed network binding
  • ⚡ Zero learning curve - Natural language instead of memorizing kubectl commands
  • 🌐 Universal compatibility - Works with Claude, Cursor, Windsurf, Copilot, and 15+ other AI tools
  • ☸️ Production-grade - Stateless HTTP scales behind any load balancer, Helm chart, 516 passing tests

From debugging crashed pods to optimizing cluster costs, kubectl-mcp-server is your AI-powered DevOps companion.

Live Demos

Claude Desktop

Cursor AI

Windsurf

Installation

# Run directly without installation - works instantly!
npx -y kubectl-mcp-server

# Or install globally for faster startup
npm install -g kubectl-mcp-server
Or install with pip (Python)
pip install kubectl-mcp-server

# Or run it isolated with uv
uvx --from kubectl-mcp-server kubectl-mcp
Install from GitHub Release
# Install specific version directly from GitHub release (replace {VERSION} with desired version)
pip install https://github.com/rohitg00/kubectl-mcp-server/releases/download/v{VERSION}/kubectl_mcp_server-{VERSION}-py3-none-any.whl

# Example: Install v2.0.0
pip install https://github.com/rohitg00/kubectl-mcp-server/releases/download/v2.0.0/kubectl_mcp_server-2.0.0-py3-none-any.whl

# Or install latest from git
pip install git+https://github.com/rohitg00/kubectl-mcp-server.git
Prerequisites
  • Python 3.10+ or uv (for pip/uvx installation)
  • Node.js 18+ (for npx installation)
  • kubectl installed and configured
  • Access to a Kubernetes cluster
Docker
# Pull from Docker Hub
docker pull rohitghumare64/kubectl-mcp-server:latest

# Or pull from GitHub Container Registry
docker pull ghcr.io/rohitg00/kubectl-mcp-server:latest

# Run with stdio transport (the image runs as UID 10001 with HOME=/home/mcp)
docker run -i --rm -v $HOME/.kube:/home/mcp/.kube:ro rohitghumare64/kubectl-mcp-server:latest

# Run stateless HTTP on localhost only. The container listens on 0.0.0.0, so it refuses
# to start without OAuth (MCP_AUTH_ENABLED) or an explicit MCP_ALLOW_UNAUTHENTICATED=true.
docker run --rm -p 127.0.0.1:8000:8000 -v $HOME/.kube:/home/mcp/.kube:ro \
  -e MCP_ALLOW_UNAUTHENTICATED=true \
  rohitghumare64/kubectl-mcp-server:latest --transport http

Getting Started

1. Test the Server (Optional)

Before integrating with your AI assistant, verify the installation:

# Check if kubectl is configured
kubectl cluster-info

# Test the MCP server directly
kubectl-mcp-server info

# List all available tools
kubectl-mcp-server tools

# Try calling a tool
kubectl-mcp-server call kubectl_get '{"resource_type": "pods", "namespace": "kube-system"}'
2. Connect to Your AI Assistant

Choose your favorite AI assistant and add the configuration:

Quick Setup with Your AI Assistant

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "kubernetes": {
      "command": "npx",
      "args": ["-y", "kubectl-mcp-server"]
    }
  }
}
Cursor AI

Add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "kubernetes": {
      "command": "npx",
      "args": ["-y", "kubectl-mcp-server"]
    }
  }
}
Windsurf

Add to ~/.config/windsurf/mcp.json:

{
  "mcpServers": {
    "kubernetes": {
      "command": "npx",
      "args": ["-y", "kubectl-mcp-server"]
    }
  }
}
Using Python Instead of npx
{
  "mcpServers": {
    "kubernetes": {
      "command": "python",
      "args": ["-m", "kubectl_mcp_tool.mcp_server"],
      "env": {
        "KUBECONFIG": "/path/to/.kube/config"
      }
    }
  }
}

More integrations: GitHub Copilot, Goose, Gemini CLI, Roo Code, and 15+ other clients —> see full configuration guide below.

3. Restart Your AI Assistant

After adding the configuration, restart your AI assistant (GitHub Copilot, Claude Code,Claude Desktop, Cursor, etc.) to load the MCP server.

4. Try These Commands

Start a conversation with your AI assistant and try these:

Troubleshooting:

"Show me all pods in the kube-system namespace"
"Why is the nginx-deployment pod crashing?"
"Diagnose network connectivity issues in the default namespace"

Deployments:

"Create a deployment for nginx with 3 replicas"
"Scale my frontend deployment to 5 replicas"
"Roll back the api-server deployment to the previous version"

Cost & Optimization:

"Which pods are using the most resources?"
"Show me idle resources that are wasting money"
"Analyze cost optimization opportunities in the production namespace"

Security:

"Audit RBAC permissions in all namespaces"
"Check for insecure secrets and configurations"
"Show me pods running with privileged access"

Helm:

"List all Helm releases in the cluster"
"Install Redis from the Bitnami chart repository"
"Show me the values for my nginx-ingress Helm release"

Multi-Cluster:

"List all available Kubernetes contexts"
"Switch to the production cluster context"
"Show me cluster information and version"

MCP Client Compatibility

Works seamlessly with all MCP-compatible AI assistants:

ClientStatusClientStatus
Claude Desktop✅ NativeClaude Code✅ Native
Cursor✅ NativeWindsurf✅ Native
GitHub Copilot✅ NativeOpenAI Codex✅ Native
Gemini CLI✅ NativeGoose✅ Native
Roo Code✅ NativeKilo Code✅ Native
Amp✅ NativeTrae✅ Native
OpenCode✅ NativeKiro CLI✅ Native
Antigravity✅ NativeClawdbot✅ Native
Droid (Factory)✅ NativeAny MCP Client✅ Compatible

All Supported AI Assistants

Claude Code

Add to ~/.config/claude-code/mcp.json:

{
  "mcpServers": {
    "kubernetes": {
      "command": "npx",
      "args": ["-y", "kubectl-mcp-server"]
    }
  }
}
GitHub Copilot (VS Code)

Add to VS Code settings.json:

{
  "mcp": {
    "servers": {
      "kubernetes": {
        "command": "npx",
        "args": ["-y", "kubectl-mcp-server"]
      }
    }
  }
}
Goose

Add to ~/.config/goose/config.yaml:

extensions:
  kubernetes:
    command: npx
    args:
      - -y
      - kubectl-mcp-server
Gemini CLI

Add to ~/.gemini/settings.json:

{
  "mcpServers": {
    "kubernetes": {
      "command": "npx",
      "args": ["-y", "kubectl-mcp-server"]
    }
  }
}
Roo Code / Kilo Code

Add to ~/.config/roo-code/mcp.json or ~/.config/kilo-code/mcp.json:

{
  "mcpServers": {
    "kubernetes": {
      "command": "npx",
      "args": ["-y", "kubectl-mcp-server"]
    }
  }
}

Complete Feature Set

Toolsets

Every tool definition costs context on every request, and models pick tools less reliably as the list grows. The server therefore registers only the core and helm toolsets (26 tools) by default. kubectl_get, kubectl_describe, kubectl_logs, kubectl_apply and friends work for every resource kind, including custom resources, so the default set covers most day-to-day work. Everything else is opt-in; tools outside the enabled toolsets are not registered at all, so they cannot be called.

kubectl-mcp-server                                    # core + helm
kubectl-mcp-server --toolsets default,diagnostics,certs
kubectl-mcp-server --toolsets all                     # all 209 tools
MCP_TOOLSETS=default,gitops kubectl-mcp-server        # same, via environment

detect_ecosystem reports which operators are installed and which toolsets cover them. With many toolsets enabled and a client that cannot search tools itself, add --tool-search (MCP_TOOL_SEARCH=true): the server then lists only the default tools plus search_tools and call_tool, and the rest are discovered on demand. Read-only mode, scopes and redaction still apply to every discovered call.

For deep work in one ecosystem, its project-maintained MCP server is usually a better fit than the opt-in toolset:

ToolsetDefaultToolsCoversNames
coreyes18Generic kubectl operations for every resource kind, including CRDskubectl_get, kubectl_describe, kubectl_logs, kubectl_top, kubectl_explain, get_api_resources, kubectl_generic, kubectl_apply, kubectl_patch, delete_resource, kubectl_scale, kubectl_rollout, exec_in_pod, list_contexts, health_check, diagnose_pod_crash, detect_pending_pods, detect_ecosystem
helmyes8Helm release lifecyclehelm_list, helm_status, helm_get, helm_history, install_helm_chart, upgrade_helm_chart, uninstall_helm_chart, helm_rollback
helm_dev16Helm charts and repositories: search, show, template, lint, package, dependencieshelm_show, helm_search_repo, helm_search_hub, helm_repo_list, helm_repo_add, helm_repo_remove, helm_repo_update, helm_test, helm_lint, helm_package, helm_dependency_update, helm_dependency_list, helm_dependency_build, helm_pull, helm_create, helm_template
ops10Maintenance: create, label, annotate, taint, cordon/drain, copy files, wait, cleanupkubectl_create, kubectl_cp, backup_resource, label_resource, annotate_resource, taint_node, wait_for_condition, node_management, cleanup_pods, run_pod
diagnostics9Network, DNS, node and pod health diagnosticscheck_pod_health, get_evicted_pods, diagnose_network_connectivity, check_dns_resolution, trace_service_chain, compare_namespaces, get_nodes_summary, node_logs, node_stats_summary
security5RBAC, pod security and secret hygiene auditsanalyze_pod_security, analyze_network_policies, audit_rbac_permissions, check_secrets_security, get_pod_security_info
cost8Resource right-sizing and cost allocationget_resource_recommendations, get_idle_resources, get_resource_quotas_usage, get_cost_analysis, get_overprovisioned_resources, get_resource_trends, get_namespace_cost_allocation, optimize_resource_requests
multicluster7Kubeconfig contexts and cross-cluster queriesget_context_details, kubeconfig_view, switch_context, set_namespace_for_context, multi_cluster_query, multi_cluster_health, multi_cluster_pod_count
crds5CRD discovery and custom resource inspectiondiscover_crds, search_crds, list_custom_resources, get_custom_resource, describe_crd
gitops6Flux and Argo CDgitops_apps_list, gitops_app_get, gitops_app_sync, gitops_app_status, gitops_sources_list, gitops_source_get
certs8cert-manager certificates and issuerslist_certs, get_cert, list_cert_issuers, get_cert_issuer, renew_cert, explain_cert_status, list_cert_challenges, list_cert_requests
policy5Kyverno and Gatekeeper policiesget_policy_list, get_policy, get_policy_violations, explain_policy_denial, audit_policies
backup10Velero backups and restoreslist_backups, get_backup, create_backup, delete_backup, list_restores, create_restore, get_restore, list_backup_locations, list_backup_schedules, create_backup_schedule
keda6KEDA event-driven autoscalingkeda_scaledobjects_list, keda_scaledobject_get, keda_scaledjobs_list, keda_triggerauths_list, keda_triggerauth_get, keda_hpa_list
cilium7Cilium network policies and Hubble flowscilium_list_policies, cilium_get_policy, cilium_list_endpoints, cilium_list_identities, cilium_list_nodes, cilium_get_status, get_hubble_flows
rollouts10Argo Rollouts and Flagger progressive deliveryget_rollouts_list, get_rollout, get_rollout_status, promote_rollout, abort_rollout, retry_rollout, restart_rollout, get_analysis_runs, get_flagger_canaries, get_flagger_canary
capi10Cluster API lifecyclecapi_list_clusters, capi_get_cluster, capi_list_machines, capi_get_machine, capi_list_machinedeployments, capi_scale_machinedeployment, capi_list_machinesets, capi_list_machinehealthchecks, capi_list_clusterclasses, capi_get_cluster_kubeconfig
kubevirt12KubeVirt virtual machineskubevirt_vms_list, kubevirt_vm_get, kubevirt_vmis_list, kubevirt_vm_start, kubevirt_vm_stop, kubevirt_vm_restart, kubevirt_vm_pause, kubevirt_vm_unpause, kubevirt_vm_migrate, kubevirt_datasources_list, kubevirt_instancetypes_list, kubevirt_datavolumes_list
istio9Istio service meshistio_virtualservices_list, istio_virtualservice_get, istio_destinationrules_list, istio_gateways_list, istio_peerauthentications_list, istio_authorizationpolicies_list, istio_proxy_status, istio_analyze, istio_sidecar_status
kind29kind local clusters (runs docker on the server host)kind_list_clusters, kind_get_nodes, kind_get_kubeconfig, kind_export_logs, kind_cluster_info, kind_node_labels, kind_create_cluster, kind_delete_cluster, kind_load_image, kind_load_image_archive, kind_build_node_image, kind_set_kubeconfig, kind_config_validate, kind_config_generate, kind_config_show, kind_available_images, kind_registry_create, kind_registry_connect, kind_registry_status, kind_node_exec, kind_node_logs, kind_node_inspect, kind_node_restart, kind_network_inspect, kind_port_mappings, kind_ingress_setup, kind_cluster_status, kind_images_list, kind_provider_info
vind11vCluster virtual clusters (runs vcluster on the server host)vind_list_clusters, vind_status, vind_get_kubeconfig, vind_create_cluster, vind_delete_cluster, vind_pause, vind_resume, vind_connect, vind_disconnect, vind_upgrade, vind_describe
MCP Resources

Access Kubernetes data as browsable resources:

Resource URIDescription
kubeconfig://contextsList all available kubectl contexts
kubeconfig://current-contextGet current active context
namespace://currentGet current namespace
namespace://listList all namespaces
cluster://infoGet cluster information
cluster://nodesGet detailed node information
cluster://versionGet Kubernetes version
cluster://api-resourcesList available API resources
manifest://deployments/{ns}/{name}Get deployment YAML
manifest://services/{ns}/{name}Get service YAML
manifest://pods/{ns}/{name}Get pod YAML
manifest://configmaps/{ns}/{name}Get ConfigMap YAML
manifest://secrets/{ns}/{name}Get secret YAML (data masked)
manifest://ingresses/{ns}/{name}Get ingress YAML
MCP Prompts

Pre-built workflow prompts for common Kubernetes operations:

PromptDescription
troubleshoot_workloadComprehensive troubleshooting guide for pods/deployments
deploy_applicationStep-by-step deployment workflow
security_auditSecurity scanning and RBAC analysis workflow
cost_optimizationResource optimization and cost analysis workflow
disaster_recoveryBackup and recovery planning workflow
debug_networkingNetwork debugging for services and connectivity
scale_applicationScaling guide with HPA/VPA best practices
upgrade_clusterKubernetes cluster upgrade planning
cluster_health_checkCluster-wide health review
debug_workloadStep-by-step debugging for a named workload
resource_usageResource consumption and right-sizing review
security_postureNamespace or cluster security posture review
deployment_checklistPre-deployment checklist for an application
incident_responseIncident runbook by incident type

Add your own prompts in ~/.config/kubectl-mcp/prompts.toml; same-named prompts override the built-ins.

Key Capabilities
  • 🤖 26 default tools, 209 opt-in - Generic kubectl and Helm by default, ecosystem toolsets on demand
  • 🎯 14 Workflow Prompts - Pre-built workflows for common operations
  • 📊 8 Resources + 6 Templates - Browsable Kubernetes data exposure
  • 🔄 Opt-in ecosystem toolsets - GitOps, cert-manager, policy, Velero, KEDA, Cilium, Rollouts, CAPI, KubeVirt, Istio, kind, vCluster
  • ⚡ Stateless MCP 2026-07-28 - stdio and Streamable HTTP, older clients negotiated automatically
  • 🔐 Security First - Read-only mode, per-call confirmation, Secret redaction, flag-injection guard
  • 🏥 Advanced Diagnostics - AI-powered troubleshooting and cost optimization
  • ☸️ Multi-Cluster - Target any cluster via context parameter in every tool
  • 🎡 Full Helm v3 - Complete chart lifecycle management
  • 🔧 Powerful CLI - Shell-friendly tool discovery and direct calling
  • 🐳 Cloud Native - Deploy in-cluster with kMCP or kagent

Using the CLI

The built-in CLI lets you explore and test tools without an AI assistant:

# List all tools with descriptions
kubectl-mcp-server tools -d

# Search for pod-related tools
kubectl-mcp-server grep "*pod*"

# Show specific tool schema
kubectl-mcp-server tools kubectl_get

# Call a tool directly
kubectl-mcp-server call kubectl_get '{"resource_type": "pods", "namespace": "kube-system"}'

# Pipe JSON from stdin
echo '{"resource_type": "pods"}' | kubectl-mcp-server call kubectl_get

# Check dependencies
kubectl-mcp-server doctor

# Show/switch Kubernetes context
kubectl-mcp-server context
kubectl-mcp-server context minikube

# List resources and prompts
kubectl-mcp-server resources
kubectl-mcp-server prompts

# Show server info
kubectl-mcp-server info
CLI Features
  • Structured errors: Actionable error messages with suggestions
  • Colorized output: Human-readable with JSON mode for scripting (--json)
  • NO_COLOR support: Respects NO_COLOR environment variable
  • Stdin support: Pipe JSON arguments to commands

Advanced Configuration

Transport Modes
# stdio (default) - Claude Desktop, Cursor, Windsurf, Claude Code
kubectl-mcp-server

# Streamable HTTP, stateless, at http://127.0.0.1:8000/mcp
kubectl-mcp-server --transport http --port 8000

# SSE - deprecated by the MCP spec (SEP-2596), session-bound; kept for old clients
kubectl-mcp-server --transport sse --port 8000

Server options (every flag also reads an environment variable):

FlagEnvDefaultDescription
--transportMCP_SERVER_TRANSPORTstdiostdio, http / streamable-http, sse
--hostMCP_SERVER_HOST127.0.0.1Bind address for network transports
--portMCP_SERVER_PORT8000Port for network transports
--allow-unauthenticatedMCP_ALLOW_UNAUTHENTICATEDoffPermit a non-loopback bind without OAuth
--toolsetsMCP_TOOLSETSdefaultToolsets to register (default, all, or names; see Toolsets)
--tool-searchMCP_TOOL_SEARCHoffList default tools plus search_tools/call_tool; discover the rest on demand
--read-onlyMCP_SAFETY_MODE=read-onlyoffHide and block every tool that changes state
--disable-destructiveMCP_SAFETY_MODE=disable-destructiveoffAllow create/update, block deletes
--confirm-destructiveMCP_SAFETY_MODE=confirmoffAsk the user before each destructive call
--statelessMCP_STATELESS_MODEoffDo not cache Kubernetes API clients
--watch-kubeconfigMCP_KUBECONFIG_WATCHoffReload kubeconfig when it changes
--configTOML config file
Environment Variables

Core Settings:

VariableDescriptionDefault
KUBECONFIGPath to kubeconfig file~/.kube/config
MCP_DEBUGEnable verbose loggingfalse
MCP_LOG_FILELog file pathNone (stdout)

Authentication (Enterprise):

VariableDescriptionDefault
MCP_AUTH_ENABLEDEnable OAuth 2.1 authenticationfalse
MCP_AUTH_ISSUEROAuth 2.0 Authorization Server URL-
MCP_AUTH_JWKS_URIJWKS endpoint URLAuto-derived
MCP_AUTH_AUDIENCEExpected token audiencekubectl-mcp-server
MCP_AUTH_REQUIRED_SCOPESScopes every token must carrymcp:tools
MCP_AUTH_RESOURCE_URLPublic URL advertised in RFC 9728 metadata-

Security and scaling:

VariableDescriptionDefault
MCP_SAFETY_MODEread-only, disable-destructive, confirm, normal (invalid values stop startup)normal
MCP_MASK_SECRETSRedact Secret values, bearer tokens and JWTs from tool outputtrue
MCP_ALLOWED_HOSTS / MCP_ALLOWED_ORIGINSComma-separated Host / Origin allowlists for HTTPloopback
MCP_REQUEST_STATE_KEY>= 32 byte key shared by replicas so confirmation rounds can land on any replicaper-process

Enterprise: OAuth 2.1 Authentication

Secure your MCP server with OAuth 2.1 authentication (RFC 9728).

export MCP_AUTH_ENABLED=true
export MCP_AUTH_ISSUER=https://your-idp.example.com
export MCP_AUTH_AUDIENCE=kubectl-mcp-server
kubectl-mcp-server --transport http --port 8000

Supported Identity Providers: Okta, Auth0, Keycloak, Microsoft Entra ID, Google OAuth, and any OIDC-compliant provider.

Scopes: tokens with mcp:tools or mcp:admin can call every tool. Set MCP_AUTH_REQUIRED_SCOPES=mcp:read to issue narrower tokens: read-only tools then need mcp:read, tools that change state need mcp:write.

Security

  • Network exposure fails closed. HTTP binds 127.0.0.1 by default. Binding any other address requires OAuth or --allow-unauthenticated; the Helm chart refuses to render without one of the two.
  • Read-only mode hides write tools. With --read-only (or MCP_SAFETY_MODE=read-only) every tool whose readOnlyHint is false is removed from tools/list and rejected if called.
  • Confirmation works on the stateless protocol. --confirm-destructive returns an MRTR InputRequiredResult to 2026-07-28 clients and falls back to elicitation for older ones. The approval is bound to the exact operation.
  • Secrets are redacted. Secret data, stringData, the last-applied-configuration annotation, bearer tokens and JWTs are replaced with [REDACTED] in every tool result.
  • No flag injection. Identifier arguments (name, namespace, chart, context, label keys, ...) that start with - are rejected before any CLI runs, so name="--server=https://attacker" never reaches kubectl or helm. kubectl_generic only runs read verbs and blocks credential, connection and raw-output flags.
  • No shell. Every subprocess call uses an argument list; nothing runs through sh -c. CVE-2025-69902 (shell injection in kubectl-mcp-tool <= 1.1.1) was fixed in 1.2.0; upgrade anything older.

Report vulnerabilities privately; see SECURITY.md.

Stateless MCP (2026-07-28)

The server speaks the 2026-07-28 specification: no initialize handshake, no Mcp-Session-Id, server/discover for capabilities, and per-request _meta. Clients on 2025-era revisions are negotiated automatically from the same process, over stdio and HTTP.

Because no request depends on an earlier one, HTTP replicas scale behind a round-robin load balancer with no sticky sessions or shared store. Set MCP_REQUEST_STATE_KEY to the same value on every replica if you use --confirm-destructive.

curl -s http://127.0.0.1:8000/mcp \
  -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' \
  -H 'MCP-Protocol-Version: 2026-07-28' -H 'Mcp-Method: server/discover' \
  -d '{"jsonrpc":"2.0","id":1,"method":"server/discover","params":{"_meta":{"io.modelcontextprotocol/protocolVersion":"2026-07-28","io.modelcontextprotocol/clientCapabilities":{}}}}'

Integrations & Ecosystem

Docker MCP Toolkit

Works with Docker MCP Toolkit:

docker mcp server add kubectl-mcp-server mcp/kubectl-mcp-server:latest
docker mcp server configure kubectl-mcp-server --volume "$HOME/.kube:/home/mcp/.kube:ro"
docker mcp server enable kubectl-mcp-server
docker mcp client connect claude
agentregistry

Install from the centralized agentregistry:

# Install arctl CLI
curl -fsSL https://raw.githubusercontent.com/agentregistry-dev/agentregistry/main/scripts/install.sh | bash

# Install kubectl-mcp-server
arctl mcp install io.github.rohitg00/kubectl-mcp-server

Available via: PyPI (uvx), npm (npx), OCI (docker.io/rohitghumare64/kubectl-mcp-server)

agentgateway

Route to multiple MCP servers through agentgateway:

# Start stateless Streamable HTTP
kubectl-mcp-server --transport http --port 8000

# Configure gateway
cat > gateway.yaml <<EOF
binds:
- port: 3000
  listeners:
  - routes:
    - backends:
      - mcp:
          targets:
          - name: kubectl-mcp-server
            mcp:
              host: http://localhost:8000/mcp
EOF

# Start gateway
agentgateway --config gateway.yaml

Connect clients to http://localhost:3000/mcp.

In-Cluster Deployment

Deploy with kMCP - a control plane for MCP servers:

# Install kMCP
curl -fsSL https://raw.githubusercontent.com/kagent-dev/kmcp/refs/heads/main/scripts/get-kmcp.sh | bash
kmcp install

# Deploy kubectl-mcp-server (easiest)
kmcp deploy package --deployment-name kubectl-mcp-server \
   --manager npx --args kubectl-mcp-server

# Or with Docker image
kmcp deploy --file deploy/kmcp/kmcp.yaml --image rohitghumare64/kubectl-mcp-server:latest

See kMCP quickstart for details.

Option 2: Standard Kubernetes

Deploy with kubectl/kustomize:

# Using kustomize (recommended)
kubectl apply -k deploy/kubernetes/

# Or individual manifests
kubectl apply -f deploy/kubernetes/namespace.yaml
kubectl apply -f deploy/kubernetes/rbac.yaml
kubectl apply -f deploy/kubernetes/deployment.yaml
kubectl apply -f deploy/kubernetes/service.yaml

# Access via port-forward
kubectl port-forward -n kubectl-mcp svc/kubectl-mcp-server 8000:8000

See deploy/ directory for all manifests and configuration options.

Option 3: kagent (AI Agent Framework)

Integrate with kagent - a CNCF Kubernetes-native AI agent framework:

# Install kagent
brew install kagent
kagent install --profile demo

# Register as ToolServer
kubectl apply -f deploy/kagent/toolserver-stdio.yaml

# Open dashboard
kagent dashboard

Your AI agents can now use the server's enabled toolsets. See kagent quickstart.

Architecture

┌─────────────────┐     ┌──────────────────┐     ┌─────────────────┐
│   AI Assistant  │────▶│   MCP Server     │────▶│  Kubernetes API │
│ (Claude/Cursor) │◀────│ (kubectl-mcp)    │◀────│    (kubectl)    │
└─────────────────┘     └──────────────────┘     └─────────────────┘

The MCP server implements the Model Context Protocol, translating natural language requests into kubectl operations.

Modular Structure
kubectl_mcp_tool/
├── mcp_server.py          # Main server (FastMCP, transports)
├── middleware.py          # Safety mode, flag-injection guard, scopes, redaction, metrics
├── toolsets.py            # Toolset registry, server instructions
├── tools/                  # MCP tools, grouped into toolsets
│   ├── kubectl.py         # Generic get/logs/top/scale for every kind, detect_ecosystem
│   ├── pods.py            # Pod exec & diagnostics
│   ├── cluster.py         # Context/cluster management
│   ├── networking.py      # Network and DNS diagnostics
│   ├── security.py        # RBAC, pod security, secret hygiene audits
│   ├── helm.py            # Complete Helm v3 operations
│   ├── operations.py      # kubectl apply/patch/describe/etc
│   ├── diagnostics.py     # Metrics, namespace comparison
│   ├── cost.py            # Resource optimization & cost analysis
│   ├── gitops.py          # GitOps (Flux/ArgoCD)
│   ├── certs.py           # Cert-Manager
│   ├── policy.py          # Policy (Kyverno/Gatekeeper)
│   ├── backup.py          # Backup (Velero)
│   ├── keda.py            # KEDA autoscaling
│   ├── cilium.py          # Cilium/Hubble network observability
│   ├── rollouts.py        # Argo Rollouts/Flagger
│   ├── capi.py            # Cluster API
│   ├── kubevirt.py        # KubeVirt VMs
│   ├── kiali.py           # Istio/Kiali service mesh
│   ├── vind.py            # vCluster (virtual clusters)
│   ├── kind.py            # kind local clusters
│   └── custom_resources.py # CRD discovery
├── resources/              # 8 MCP Resources for data exposure
├── prompts/                # 14 MCP Prompts for workflows
└── cli/                    # CLI interface

Agent Skills (25 Skills for AI Coding Agents)

Extend your AI coding agent with Kubernetes expertise using the skills in kubernetes-skills/. Skills provide specialized knowledge and workflows that agents load on demand, and each one names the toolsets it needs.

Quick Install
# Any agent (Claude Code, Codex, Cursor, OpenCode, Gemini CLI, ...) via the skills CLI
npx skills add rohitg00/kubectl-mcp-server

# A single skill for a single agent
npx skills add rohitg00/kubectl-mcp-server --skill k8s-helm --agent claude-code

# OpenClaw, from ClawHub (synced from this repo on every merge)
openclaw skills install @rohitg00/k8s-helm

# Or copy into Claude Code directly
cp -r kubernetes-skills/claude/* ~/.claude/skills/

Browse them on ClawHub or list them with npx skills add rohitg00/kubectl-mcp-server --list.

Available Skills (25)
CategorySkills
Core Resourcesk8s-core, k8s-networking, k8s-storage
Workloadsk8s-deploy, k8s-operations, k8s-helm
Observabilityk8s-diagnostics, k8s-troubleshoot, k8s-incident
Securityk8s-security, k8s-policy, k8s-certs
GitOpsk8s-gitops, k8s-rollouts
Scalingk8s-autoscaling, k8s-cost, k8s-backup
Multi-Clusterk8s-multicluster, k8s-capi, k8s-kubevirt
Developmentk8s-vind, k8s-kind
Networkingk8s-service-mesh, k8s-cilium
Toolsk8s-cli
Convert to Other Agents

Use SkillKit to convert skills to your preferred AI agent format:

npm install -g skillkit

# Convert to Cursor format
skillkit translate kubernetes-skills/claude --to cursor --output .cursor/rules/

# Convert to Codex format
skillkit translate kubernetes-skills/claude --to codex --output ./

Supported agents: Claude, Cursor, Codex, Gemini CLI, GitHub Copilot, Goose, Windsurf, Roo, Amp, and more.

See kubernetes-skills/README.md for full documentation.

Multi-Cluster Support

Seamlessly manage multiple Kubernetes clusters through natural language. Every tool supports an optional context parameter to target any cluster without switching contexts.

Context Parameter (v1.15.0)

Most kubectl-backed tools accept an optional context parameter to target specific clusters. Note: vCluster (vind) and kind tools run via their local CLIs and do not accept the context parameter.

Talk to your AI assistant:

"List pods in the production cluster"
"Get deployments from staging context"
"Show logs from the api-pod in the dev cluster"
"Compare namespaces between production and staging clusters"

Direct tool calls with context:

# Target a specific cluster context
kubectl-mcp-server call kubectl_get '{"resource_type": "pods", "namespace": "default", "context": "production"}'

# Get deployments from staging
kubectl-mcp-server call kubectl_get '{"resource_type": "deployments", "namespace": "app", "context": "staging"}'

# Install Helm chart to production cluster
kubectl-mcp-server call install_helm_chart '{"name": "redis", "chart": "bitnami/redis", "namespace": "cache", "context": "production"}'

# Compare resources across clusters
kubectl-mcp-server call compare_namespaces '{"namespace1": "prod-ns", "namespace2": "staging-ns", "context": "production"}'
Context Management

Talk to your AI assistant:

"List all available Kubernetes contexts"
"Switch to the production cluster"
"Show me details about the staging context"
"What's the current cluster I'm connected to?"

Or use the CLI directly:

kubectl-mcp-server context                    # Show current context
kubectl-mcp-server context production         # Switch context
kubectl-mcp-server call list_contexts         # List all contexts via MCP
How It Works
  • If context is omitted, the tool uses your current kubectl context
  • If context is specified, the tool targets that cluster directly
  • Response includes "context": "production" or "context": "current" for clarity
  • Works with all kubeconfig setups and respects KUBECONFIG environment variable
  • No need to switch contexts for cross-cluster operations

Development & Testing

Setup Development Environment
# Clone the repository
git clone https://github.com/rohitg00/kubectl-mcp-server.git
cd kubectl-mcp-server

# Create virtual environment
python -m venv venv
source venv/bin/activate  # On Windows: venv\Scripts\activate

# Install development dependencies
pip install -r requirements-dev.txt
Running Tests
# Run all tests
pytest tests/ -v

# Run specific test file
pytest tests/test_tools.py -v

# Run with coverage
pytest tests/ --cov=kubectl_mcp_tool --cov-report=html

# Run only unit tests
pytest tests/ -v -m unit
Test Structure
tests/
├── __init__.py          # Test package
├── conftest.py          # Shared fixtures and mocks
├── test_tools.py        # Unit tests for all MCP tools
├── test_stateless_security.py # Both protocol eras, confirmation, redaction, injection guard
├── test_resources.py    # Tests for 8 MCP Resources
├── test_prompts.py      # Tests for 8 MCP Prompts
└── test_server.py       # Server initialization tests

555 tests covering: tool registration, resource exposure, prompt generation, both MCP protocol eras end to end, safety modes, confirmation rounds, Secret redaction, flag injection, network exposure, CLI commands, and ecosystem tools.

Code Quality
# Format code
black kubectl_mcp_tool tests

# Sort imports
isort kubectl_mcp_tool tests

# Lint
flake8 kubectl_mcp_tool tests

# Type checking
mypy kubectl_mcp_tool

Contributing

We ❤️ contributions! Whether it's bug reports, feature requests, documentation improvements, or code contributions.

Ways to contribute:

  • 🐛 Report bugs via GitHub Issues
  • 💡 Suggest features or improvements
  • 📝 Improve documentation
  • 🔧 Submit pull requests
  • ⭐ Star the project if you find it useful!

Development setup: See Development & Testing section above.

Before submitting a PR:

  1. Run tests: pytest tests/ -v
  2. Format code: black kubectl_mcp_tool tests
  3. Check linting: flake8 kubectl_mcp_tool tests

Support & Community

License

MIT License - see LICENSE for details.

Package Repositories:

Project:

Ecosystem:


Made with ❤️ for the Kubernetes and AI community

If kubectl-mcp-server makes your DevOps life easier, give it a ⭐ on GitHub!

الأسئلة الشائعة

ما هو Kubectl MCP Server؟

Interact with Kubernetes clusters through natural language.

كيف أثبّت Kubectl MCP Server؟

اتبع خطوات التثبيت في توثيقه المعروض في هذه الصفحة وفي مستودعه.

هل Kubectl MCP Server مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص MIT.

من يصون Kubectl MCP Server؟

ينشره rohitg00. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من القوائم المجتمعية awesome-mcp-servers ومستودع المشروع على GitHub. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.