# Kubernetes Mcp Server > Model Context Protocol (MCP) server for Kubernetes and OpenShift - **Type:** MCP server - **Install:** `agentstack add mcp-containers-kubernetes-mcp-server` - **Verified:** Yes β€” security-reviewed for prompt injection and unsafe behavior - **Seller:** [containers](https://agentstack.voostack.com/s/containers) - **Installs:** 0 - **Category:** [Cloud & Infrastructure](https://agentstack.voostack.com/c/cloud-infrastructure) - **Latest version:** 0.1.0 - **License:** Apache-2.0 - **Upstream author:** [containers](https://github.com/containers) - **Source:** https://github.com/containers/kubernetes-mcp-server ## Install ```sh agentstack add mcp-containers-kubernetes-mcp-server ``` Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent. ## About # Kubernetes MCP Server [](https://github.com/containers/kubernetes-mcp-server/blob/main/LICENSE) [](https://www.npmjs.com/package/kubernetes-mcp-server) [](https://pypi.org/project/kubernetes-mcp-server/) [](https://github.com/containers/kubernetes-mcp-server/releases/latest) [](https://github.com/containers/kubernetes-mcp-server/actions/workflows/build.yaml) [✨ Features](#features) | [πŸš€ Getting Started](#getting-started) | [πŸŽ₯ Demos](#demos) | [βš™οΈ Configuration](#configuration) | [πŸ› οΈ Tools](#tools-and-functionalities) | [πŸ’¬ Community](#community) | [πŸ§‘β€πŸ’» Development](#development) https://github.com/user-attachments/assets/be2b67b3-fc1c-4d11-ae46-93deba8ed98e ## ✨ Features A powerful and flexible Kubernetes [Model Context Protocol (MCP)](https://blog.marcnuri.com/model-context-protocol-mcp-introduction) server implementation with support for **Kubernetes** and **OpenShift**. - **βœ… Configuration**: - Automatically detect changes in the Kubernetes configuration and update the MCP server. - **View** and manage the current [Kubernetes `.kube/config`](https://blog.marcnuri.com/where-is-my-default-kubeconfig-file) or in-cluster configuration. - **βœ… Generic Kubernetes Resources**: Perform operations on **any** Kubernetes or OpenShift resource. - Any CRUD operation (Create or Update, Get, List, Delete). - **βœ… Pods**: Perform Pod-specific operations. - **List** pods in all namespaces or in a specific namespace. - **Get** a pod by name from the specified namespace. - **Delete** a pod by name from the specified namespace. - **Show logs** for a pod by name from the specified namespace. - **Top** gets resource usage metrics for all pods or a specific pod in the specified namespace. - **Exec** into a pod and run a command. - **Run** a container image in a pod and optionally expose it. - **βœ… Namespaces**: List Kubernetes Namespaces. - **βœ… Events**: View Kubernetes events in all namespaces or in a specific namespace. - **βœ… Projects**: List OpenShift Projects. - **☸️ Helm**: - **Install** a Helm chart in the current or provided namespace. - **List** Helm releases in all namespaces or in a specific namespace. - **Uninstall** a Helm release in the current or provided namespace. - **πŸ”§ Tekton**: Tekton-specific operations that complement generic Kubernetes resource management. - **Pipeline**: Start a Tekton Pipeline by creating a PipelineRun. - **PipelineRun**: Restart a PipelineRun with the same spec. - **Task**: Start a Tekton Task by creating a TaskRun. - **TaskRun**: Restart a TaskRun with the same spec, and retrieve TaskRun logs via pod resolution. - **πŸ”­ Observability**: Optional OpenTelemetry distributed tracing and metrics with custom sampling rates. Includes `/stats` endpoint for real-time statistics. See [OTEL.md](docs/OTEL.md). Unlike other Kubernetes MCP server implementations, this **IS NOT** just a wrapper around `kubectl` or `helm` command-line tools. It is a **Go-based native implementation** that interacts directly with the Kubernetes API server. There is **NO NEED** for external dependencies or tools to be installed on the system. If you're using the native binaries you don't need to have Node or Python installed on your system. - **βœ… Lightweight**: The server is distributed as a single native binary for Linux, macOS, and Windows. - **βœ… High-Performance / Low-Latency**: Directly interacts with the Kubernetes API server without the overhead of calling and waiting for external commands. - **βœ… Multi-Cluster**: Can interact with multiple Kubernetes clusters simultaneously (as defined in your kubeconfig files). - **βœ… Cross-Platform**: Available as a native binary for Linux, macOS, and Windows, as well as an npm package, a Python package, and container/Docker image. - **βœ… Configurable**: Supports [command-line arguments](#configuration), [TOML configuration files](docs/configuration.md), and environment variables. - **βœ… Well tested**: The server has an extensive test suite to ensure its reliability and correctness across different Kubernetes environments. - **πŸ“š Documentation**: Comprehensive [user documentation](docs/) including setup guides, configuration reference, and observability. ## πŸš€ Getting Started ### Requirements - Access to a Kubernetes cluster. Claude Code Follow the [dedicated Claude Code getting started guide](docs/getting-started-claude-code.md) in our [user documentation](docs/). For a secure production setup with dedicated ServiceAccount and read-only access, also review the [Kubernetes setup guide](docs/getting-started-kubernetes.md). ### Claude Desktop #### Using npx If you have npm installed, this is the fastest way to get started with `kubernetes-mcp-server` on Claude Desktop. Open your `claude_desktop_config.json` and add the mcp server to the list of `mcpServers`: ```json { "mcpServers": { "kubernetes": { "command": "npx", "args": ["-y", "kubernetes-mcp-server@latest"] } } } ``` ### VS Code / VS Code Insiders Install the Kubernetes MCP server extension in VS Code Insiders by pressing the following link: [](https://insiders.vscode.dev/redirect?url=vscode%3Amcp%2Finstall%3F%257B%2522name%2522%253A%2522kubernetes%2522%252C%2522command%2522%253A%2522npx%2522%252C%2522args%2522%253A%255B%2522-y%2522%252C%2522kubernetes-mcp-server%2540latest%2522%255D%257D) [](https://insiders.vscode.dev/redirect?url=vscode-insiders%3Amcp%2Finstall%3F%257B%2522name%2522%253A%2522kubernetes%2522%252C%2522command%2522%253A%2522npx%2522%252C%2522args%2522%253A%255B%2522-y%2522%252C%2522kubernetes-mcp-server%2540latest%2522%255D%257D) Alternatively, you can install the extension manually by running the following command: ```shell # For VS Code code --add-mcp '{"name":"kubernetes","command":"npx","args":["kubernetes-mcp-server@latest"]}' # For VS Code Insiders code-insiders --add-mcp '{"name":"kubernetes","command":"npx","args":["kubernetes-mcp-server@latest"]}' ``` ### Cursor Install the Kubernetes MCP server extension in Cursor by pressing the following link: [](https://cursor.com/en/install-mcp?name=kubernetes-mcp-server&config=eyJjb21tYW5kIjoibnB4IC15IGt1YmVybmV0ZXMtbWNwLXNlcnZlckBsYXRlc3QifQ%3D%3D) Alternatively, you can install the extension manually by editing the `mcp.json` file: ```json { "mcpServers": { "kubernetes-mcp-server": { "command": "npx", "args": ["-y", "kubernetes-mcp-server@latest"] } } } ``` ### Goose CLI [Goose CLI](https://blog.marcnuri.com/goose-on-machine-ai-agent-cli-introduction) is the easiest (and cheapest) way to get rolling with artificial intelligence (AI) agents. #### Using npm If you have npm installed, this is the fastest way to get started with `kubernetes-mcp-server`. Open your goose `config.yaml` and add the mcp server to the list of `mcpServers`: ```yaml extensions: kubernetes: command: npx args: - -y - kubernetes-mcp-server@latest ``` ## πŸŽ₯ Demos ### Diagnosing and automatically fixing an OpenShift Deployment Demo showcasing how Kubernetes MCP server is leveraged by Claude Desktop to automatically diagnose and fix a deployment in OpenShift without any user assistance. https://github.com/user-attachments/assets/a576176d-a142-4c19-b9aa-a83dc4b8d941 ### _Vibe Coding_ a simple game and deploying it to OpenShift In this demo, I walk you through the process of _Vibe Coding_ a simple game using VS Code and how to leverage [Podman MCP server](https://github.com/manusa/podman-mcp-server) and Kubernetes MCP server to deploy it to OpenShift. ### Supercharge GitHub Copilot with Kubernetes MCP Server in VS Code - One-Click Setup! In this demo, I'll show you how to set up Kubernetes MCP server in VS code just by clicking a link. ## βš™οΈ Configuration The Kubernetes MCP server can be configured using command line (CLI) arguments. You can run the CLI executable either by using `npx`, `uvx`, or by downloading the [latest release binary](https://github.com/containers/kubernetes-mcp-server/releases/latest). ```shell # Run the Kubernetes MCP server using npx (in case you have npm and node installed) npx kubernetes-mcp-server@latest --help ``` ```shell # Run the Kubernetes MCP server using uvx (in case you have uv and python installed) uvx kubernetes-mcp-server@latest --help ``` ```shell # Run the Kubernetes MCP server using the latest release binary ./kubernetes-mcp-server --help ``` ### Configuration Options | Option | Description | | ------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `--port` | Starts the MCP server in Streamable HTTP mode (path /mcp) and Server-Sent Event (SSE) (path /sse) mode and listens on the specified port . | | `--log-level` | Sets the logging level (values [from 0-9](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-instrumentation/logging.md)). Similar to [kubectl logging levels](https://kubernetes.io/docs/reference/kubectl/quick-reference/#kubectl-output-verbosity-and-debugging). | | `--config` | (Optional) Path to the main TOML configuration file. See [Configuration Reference](docs/configuration.md) for details. | | `--config-dir` | (Optional) Path to drop-in configuration directory. Files are loaded in lexical (alphabetical) order. Defaults to `conf.d` relative to the main config file if `--config` is specified. See [Configuration Reference](docs/configuration.md) for details. | | `--kubeconfig` | Path to the Kubernetes configuration file. If not provided, it will try to resolve the configuration (in-cluster, default location, etc.). | | `--list-output` | Output format for resource list operations (one of: yaml, table) (default "table") | | `--read-only` | If set, the MCP server will run in read-only mode, meaning it will not allow any write operations (create, update, delete) on the Kubernetes cluster. This is useful for debugging or inspecting the cluster without making changes. | | `--disable-destructive` | If set, the MCP server will disable all destructive operations (delete, update, etc.) on the Kubernetes cluster. This is useful for debugging or inspecting the cluster without accidentally making changes. This option has no effect when `--read-only` is used. | | `--stateless` | If set, the MCP server will run in stateless mode, disabling tool and prompt change notifications. This is useful for container deployments, load balancing, and serverless environments where maintaining client state is not desired. | | `--toolsets` | Comma-separated list of toolsets to enable. Check the [πŸ› οΈ Tools and Functionalities](#tools-and-functionalities) section for more information. | | `--disable-multi-cluster` | If set, the MCP server will disable multi-cluster support and will only use the current context from the kubeconfig file. This is useful if you want to restrict the MCP server to a single cluster. | | `--cluster-provider` | Cluster provider strategy to use (one of: kubeconfig, in-cluster, kcp, disabled). If not set, the server will auto-detect based on the environment. | > **Note**: Most CLI options have equivalent TOML configuration fields. The `--disable-multi-cluster` flag is equivalent to setting `cluster_provider_strategy = "disabled"` in TOML. See the [Configuration Reference](docs/configuration.md) for all TOML options. ### TOML Configuration Files For complex or persistent configurations, use TOML configuration files instead of CLI arguments: ```shell kubernetes-mcp-server --config /etc/kubernetes-mcp-server/config.toml ``` **Example configuration:** ```toml log_level = 2 read_only = true toolsets = ["core", "config", "helm", "kubevirt"] # Deny access to sensitive resources [[denied_resources]] group = "" version = "v1" kind = "Secret" [telemetry] endpoint = "http://localhost:4317" ``` For comprehensive TOML configuration documentation, including: - All configuration options and their defaults - Drop-in configuration files for modular settings - Dynamic configuration reload via SIGHUP - Denied resources for restricting access to sensitive resource types - Server instructions for MCP Tool Search - [Custom MCP prompts](docs/prompts.md) - OAuth/OIDC authentication for HTTP mode ([Keycloak](docs/KEYCLOAK_OIDC_SETUP.md), [Microsoft Entra ID](docs/ENTRA_ID_SETUP.md)) See the **[Configuration Reference](docs/configuration.md)**. ## πŸ“Š MCP Logging The server supports the MCP logging capability, allowing clients to receive debugging information via structured log messages. Kubernetes API errors are automatically categorized and logged to clients with appropriate severity levels. Sensitive data (tokens, keys, passwords, cloud credentials) is automatically redacted before being sent to clients. See the **[MCP Logging Guide](docs/logging.md)**. ## πŸ› οΈ Tools and Functionalities The Kubernetes MCP server supports enabling or disabling specific groups of tools and functionalities (tools, resources, prompts, and so on) via the `--toolsets` command-line flag or `toolsets` configuration option. This allows you to control which Kubernetes functionalities are available to your AI tools. Enabling only the toolsets you need can help reduce the context size and improve the LLM's tool selection accuracy. ### Available Toolsets The following sets of tools are available (toolsets marked with βœ“ in the Default column are enabled by default): | Toolset | Description | Default | |----------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|---------| | config | View and manage the current local Kubernetes configuration (kubeconfig) | βœ“ | | core | Most common tools for Kubernetes management (Pods, Generic Resources, Events, etc.) … ## Source & license This open-source MCP server is cataloged on AgentStack and links to its original source β€” we do not rehost the code. - **Author:** [containers](https://github.com/containers) - **Source:** [containers/kubernetes-mcp-server](https://github.com/containers/kubernetes-mcp-server) - **License:** Apache-2.0 Install and usage instructions live in the source repository linked above. ## Pricing - **Free** β€” Free ## Security capabilities Automated source analysis of v0.1.0 β€” what this tool can access: - **Network access:** no - **Filesystem access:** no - **Shell / process execution:** no - **Environment & secrets:** no - **Dynamic code execution:** no *"Yes" means the capability is present in the source β€” more access means more to trust, not that it is unsafe.* ## Versions - **0.1.0** β€” security scan: passed β€” Imported from the upstream source. ## Links - Listing page: https://agentstack.voostack.com/l/mcp-containers-kubernetes-mcp-server - Seller: https://agentstack.voostack.com/s/containers - Browse the marketplace: https://agentstack.voostack.com/browse --- Listed on AgentStack β€” the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.