kubernetes-mcp-server
Model Context Protocol (MCP) server for Kubernetes and OpenShift
No outside reports on file
This tool gives an AI system powerful control over your Kubernetes infrastructure, so only use it with strict access controls, trusted AI systems, and careful monitoring of what operations it performs.
Based on public adoption and transparency signals as of Oct 26, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesNo local folder access notedLOW
- Command executionRuns shell or system commandsREVIEW
- Network reachLocal or standard API callsLOW
- CredentialsNo API token requiredLOW
- Package sourcenpm (kubernetes-mcp-server)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
npx -y kubernetes-mcp-serverEverything known
We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.
0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30
Popularity grade: D (from public signals such as stars and downloads, not a code review). Graded 2026-10-26.
Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.
About Kubernetes MCP Server
This is a server that connects AI assistants to Kubernetes and OpenShift clusters (tools used to run and manage containerized applications). It lets AI systems read cluster information, manage resources, and potentially execute commands on your infrastructure through the Model Context Protocol standard.
Who it’s for
Developers or platform teams who want AI assistants to help manage Kubernetes clusters, monitor deployments, or automate infrastructure tasks. Not for casual users—requires existing Kubernetes knowledge and access.
Alternatives
- kubectl plugins: Native Kubernetes command-line tools and plugins for direct cluster management
- Kubernetes dashboard: The official web UI for viewing and managing cluster resources
- Helm: Package manager for Kubernetes that helps deploy and manage applications
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README for installation instructions. The package is available on npm as kubernetes-mcp-server and may be installed via standard Node.js package managers, but verify exact setup steps in the official documentation before deploying to production.
Why this grade
Signal-based grade (1/7 points): no public source code found. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- Weekly npm downloads
- 49k
- Listing last refreshed
- 2026-10-30
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Risks to watch for
- Cluster access exposure: The server can read and potentially modify Kubernetes resources, so an attacker gaining access could view secrets, environment variables, or private data stored in your cluster
- Credential leakage: API keys, certificates, or kubeconfig files needed to authenticate with Kubernetes could be exposed if the server is compromised or misconfigured
- Unauthorized commands: If the AI assistant is tricked by prompt injection or malicious input, it might execute unintended kubectl commands that delete workloads, leak data, or disrupt services
- Unvalidated outputs: Responses from the cluster (like pod logs or configuration files) could contain crafted data designed to fool the AI or exfiltrate sensitive information
- Supply chain risk: As a npm-hosted package, updates or compromised dependencies could introduce malicious code into your environment
How to lower the risk
Least-privilege permissions
- Grant the server only the Kubernetes permissions it absolutely needs (read-only access when possible, specific namespaces instead of cluster-wide)
- Use Kubernetes RBAC (role-based access control) to limit which resources can be accessed or modified
Network isolation
- Run the server in a private network or isolated subnet, not exposed to the internet
- Restrict which AI systems or users can connect to it via authentication and firewalls
Monitoring
- Log all operations the server performs and review them regularly for suspicious activity
- Set up alerts if the server attempts to access secrets, delete resources, or run privileged commands
- Monitor for unusual connection attempts or API rate spikes
Red flags to watch for
- Unexpected package updates with large code changes or new dependencies
- Error messages suggesting failed authentication (could indicate someone trying to bypass controls)
- Requests to access namespaces or resources outside the intended scope
Questions
How do I install Kubernetes MCP Server?
Run npx -y kubernetes-mcp-server (or uvx kubernetes-mcp-server) in your terminal, or add the server entry to your claude_desktop_config.json or .cursor/mcp.json as shown in the Setup section on this page. Full setup docs and environment variables are in github.com/containers/kubernetes-mcp-server.
Are there security reports about Kubernetes MCP Server?
No reports found for this package in our research (last checked 2026-10-30). Kubernetes MCP Server currently holds Grade D (High risk signals) based on public adoption and transparency signals. Key risk areas to watch include cluster access exposure, credential leakage, unauthorized commands.
Is Kubernetes MCP Server actively maintained?
Kubernetes MCP Server has 49k weekly npm downloads. Our directory data was last refreshed on 2026-10-30. Check recent commit activity, release tags, and open issues at github.com/containers/kubernetes-mcp-server before pinning it in production.
What are alternatives to Kubernetes MCP Server?
Notable alternatives to Kubernetes MCP Server include kubectl plugins (Native Kubernetes command-line tools and plugins for direct cluster management), Kubernetes dashboard (The official web UI for viewing and managing cluster resources), Helm (Package manager for Kubernetes that helps deploy and manage applications). You can also compare Kubernetes MCP Server side by side with other MCP servers in the Related tools section on this page.
README badge and team notes
Maintain or use Kubernetes MCP Server? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/containers-kubernetes-mcp-server)HTML embed:
<a href="https://agentarmorhq.com/skills/containers-kubernetes-mcp-server"><img src="https://agentarmorhq.com/api/badge/containers-kubernetes-mcp-server" alt="AgentArmorHQ Risk Grade for Kubernetes MCP Server" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "containers-kubernetes-mcp-server"- Compare Kubernetes MCP Server →
- Add to a team allowlist
- Claude and terminal guide →
- Download the PDF guide
Share with your security lead
Need sign-off to use kubernetes-mcp-server? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: kubernetes-mcp-server
- **Listing URL:** https://agentarmorhq.com/skills/containers-kubernetes-mcp-server
- **Type:** App connector
- **Risk Grade:** Grade D (High risk signals)
- **Outside Security Advisories on File:** 0
#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** Runs shell or system commands
- **Network reach:** Local or standard API calls
- **Credentials:** No API token required
- **Package source:** npm (kubernetes-mcp-server)
#### Recommended Hardened Setup
- **Command:** `npx -y --ignore-scripts kubernetes-mcp-server`
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 26, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- App connector
- Publisher
- containers
- Source code
- github.com/containers/kubernetes-mcp-server
- Install command
- npm install kubernetes-mcp-server
- Est. context load
- ~1.2k tokens / turn (~7 tool schemas, 0.6% of 200k context)
- Popularity
- 49k weekly npm downloads
- Last updated
- 2026-10-30
- Last graded
- 2026-10-26
Community
Discussions for Kubernetes MCP Server
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude