SkillFoxx

Type a name, a task or a service

Kubernetes MCP Server

A Go MCP server for Kubernetes and OpenShift: resources, pods, logs, Helm and Tekton straight through the cluster API

MCP serverEditors’ pickHigh risk

containers/kubernetes-mcp-serverAuthor: containers

Install

claude mcp add-json kubernetes-mcp-server \
  '{"command":"npx","args":["-y","kubernetes-mcp-server@latest","--read-only"],"env":{"KUBECONFIG":"'${HOME}'/.kube/mcp-viewer.kubeconfig"}}' \
  -s user

Example from the Claude Code guide: read-only mode and a dedicated kubeconfig.

This is third-party code. Review the repository files before installing.

What it does

The server gives the agent access to a Kubernetes or OpenShift cluster through kubeconfig or in-cluster config. The agent can create, read, update and delete any resource, inspect pods, logs, events and resource usage, and exec into containers. Optional toolsets add Helm, Tekton, KubeVirt, Kiali and kcp. It talks to the cluster API directly instead of shelling out to kubectl or helm, and handles several contexts at once.

Who it is for. For DevOps engineers and developers who troubleshoot clusters together with an agent.

Good fit when

  • You need to find out why a pod crashes from its logs and events
  • You need a quick look at resources across several clusters
  • You want to manage Helm releases or Tekton pipelines from an agent chat

Not a fit when

  • You have no Kubernetes cluster access
  • The agent must not write to a production cluster and read-only mode is not enough

Example request

Check events in the payments namespace and explain why the deployment will not come up

Limitations

The agent gets exactly the permissions of the kubeconfig account. The authors recommend a dedicated ServiceAccount and the --read-only flag; --disable-destructive and denied resource types such as Secret are also available. HTTP mode with OAuth/OIDC needs extra setup.

How to disable. Remove the kubernetes block from the MCP client config or run claude mcp remove kubernetes-mcp-server.

MCP

Transport
stdio, http
Authentication
not required
Environment variables
KUBECONFIG
secret		Path to a kubeconfig; without it the server resolves configuration itself.

Security check

  • Can modify and delete cluster resources and exec into pods
  • Uses kubeconfig credentials

README in short

The README lists capabilities for resources, pods, namespaces, events and OpenShift projects, plus Helm, Tekton, KubeVirt, Kiali, NetObserv and kcp toolsets. The server ships as a binary, an npm package, a PyPI package and a container image. Setup examples cover Claude Desktop, VS Code, Cursor and Goose, with a separate Claude Code guide. It is configured with CLI flags and TOML files and supports Streamable HTTP and OpenTelemetry. Apache-2.0 licensed.

FAQ

Do I need kubectl installed?

No. The server talks to the cluster API itself; the native binary does not even need Node or Python.

How do I stop the agent from deleting resources?

Run the server with --read-only or --disable-destructive; the TOML config can also deny specific resource types.

Editors’ pick

An MCP server built into the Netdata agent: metrics, logs, alerts and live process, service and container data for an AI assistant

MCP serverMedium risk80.5K
Editors’ pick

GitHub's official MCP server: code, issues, pull requests, Actions and security alerts straight from the agent

MCP serverHigh risk32.9K
Editors’ pick

AWS's official MCP server suite: docs, IaC, containers, serverless, databases, cost and monitoring

MCP serverHigh risk9.7K
Editors’ pick

A GitHub Action that runs Claude Code in pull requests and issues: answers mentions, reviews and makes changes

PluginHigh risk8.9K