CISRE Kubernetes MCP
CISRE’s MCP server gives an agent Kubernetes diagnostics and resource operations with a configurable namespace boundary.
- 766 ★ on the repository
- Last commit
Broad access
Why this level
- The module uses Kubernetes API access and can change cluster resources, services and storage.
- Pod logs can expose secrets and personal data to model context.
Install
- Works in
Manual install
Inspect `mcp_servers/k8s_mcp_server.py` and project dependencies. Prepare minimal RBAC access to a test cluster, then configure the module in your MCP client. Verify state reads first and do not enable mutations without agreement.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The module uses Kubernetes API access and can change cluster resources, services and storage.
- Pod logs can expose secrets and personal data to model context.
This is third-party code. Review the repository files before installing.
What it does
The CISRE Kubernetes MCP module reads pods, events and application state in a cluster. An agent can collect container logs and inspect related resources to investigate a failure. It can request a dependency map before making changes. The server can also restart applications and change replica counts. Other tools change service settings and expand PVC storage. It is a separate FastMCP module in the CISRE repository; the full platform adds change approval and checks whether a resource has recovered.
Who it is for. For operations engineers who want an agent to diagnose their Kubernetes cluster.
Good fit when
- Collect logs and events for a failing pod.
- Inspect deployment state before restarting it.
- Examine service dependencies and network entry points.
- Preview a scaling operation in a test cluster.
Not a fit when
- You need a one-command configuration for every MCP client.
- The process must not receive Kubernetes API permissions.
- You expect direct module calls to inherit every full-platform approval check automatically.
Example request
Use CISRE MCP to inspect the selected pod, its events and related resources without changing the cluster.MCP
- Transport
- stdio
- Authentication
- not required
Environment variables
KUBECONFIG- Path to local Kubernetes configuration outside the cluster.
Limitations
Take the module from the CISRE repository and install the project dependencies; the sources do not list a separate MCP package. Cluster access requires an in-cluster ServiceAccount or local kubeconfig. The allowed-namespace list restricts resource changes; read permissions need separate RBAC limits. A direct FastMCP connection does not include the full platform’s approval and recovery checks: the restart and scaling dry-run modes do not replace those checks.
How to disable. Stop the module process and remove the client configuration. Disconnecting MCP does not undo resource changes already accepted by the Kubernetes API.
FAQ
Where does the module get cluster configuration?
From an in-cluster ServiceAccount first. Local mode uses kubeconfig and a selected context.
How do I restrict namespaces?
Use `ALLOWED_NAMESPACES`, which defaults to `default`. It restricts resource mutations; configure read access through RBAC.
Can a restart be previewed first?
Yes. Restart defaults to `dry_run`, returning a description of the planned operation.
Does scaling limit the replica count?
Yes. The tool accepts values from 0 to 20 and rejects values outside that range.
Is the HTTP gateway required for stdio?
No. The FastMCP module runs separately. The neighboring HTTP gateway is a different route with its own access settings.
Discussion
No questions or reviews yet.
Related
MCP serversMCP server for Kubernetes: the agent reads cluster state, diagnoses pod failures and runs operations through kubectl
K8M MCP gives an agent conversational access to Kubernetes resources, pod logs and operations across multiple connected clusters.
A Go MCP server for Kubernetes and OpenShift: resources, pods, logs, Helm and Tekton straight through the cluster API
Kubernetes MCP
MCP Server Kubernetes
MCP server for managing a Kubernetes cluster through kubectl and Helm, with a non-destructive mode
A CLI and Kubernetes controller for developing, building and deploying MCP servers. For platform teams, written in Go
An MCP server and skills on top of Kubernetes network observability: an agent investigates incidents and queries cluster traffic through an eBPF-built index
README in short
CISRE is moving toward plugins with predefined action types. A documented extension interface does not establish that an integration with your particular product already works.