A Model Context Protocol (MCP) server that provides safe, read-only access to Kubernetes resources for debugging and inspection. Built with security in mind, it offers comprehensive cluster visibility without modification capabilities.

• 🔒 Read-only security: Safely inspect Kubernetes resources without modification capabilities
• 🎯 CRD support: Works seamlessly with any Custom Resource Definitions in your cluster
• 🔍 Smart discovery: Find resources by API group substring (e.g., "flux" for FluxCD, "argo" for ArgoCD)
• ⚡ High performance: Efficient resource querying with filtering and pagination
• 🛠️ Comprehensive toolset:
  • list_resources: List and filter Kubernetes resources with advanced options
  • describe_resource: Get detailed information about specific resources
  • get_pod_logs: Retrieve pod logs with sophisticated filtering capabilities
  • list_events: List and filter Kubernetes events for debugging and monitoring

• Kubernetes cluster access with a valid kubeconfig file
• Go 1.24+ (for building from source)

go install github.com/kkb0318/kubernetes-mcp@latest

The binary will be available at $GOPATH/bin/kubernetes-mcp (or $HOME/go/bin/kubernetes-mcp if GOPATH is not set).

git clone https://github.com/kkb0318/kubernetes-mcp.git
cd kubernetes-mcp
go build -o kubernetes-mcp .

Add the server to your MCP configuration:

Uses ~/.kube/config automatically:

{
  "mcpServers": {
    "kubernetes": {
      "command": "/path/to/kubernetes-mcp"
    }
  }
}

{
  "mcpServers": {
    "kubernetes": {
      "command": "/path/to/kubernetes-mcp",
      "env": {
        "KUBECONFIG": "/path/to/your/kubeconfig"
      }
    }
  }
}

Note: Replace /path/to/kubernetes-mcp with your actual binary path.

# Default kubeconfig (~/.kube/config)
./kubernetes-mcp

# Custom kubeconfig path
KUBECONFIG=/path/to/your/kubeconfig ./kubernetes-mcp

Important: Ensure you have appropriate read permissions for the Kubernetes resources you want to inspect.

List and filter Kubernetes resources with advanced capabilities.

Examples:

// List pods with label selector
{
  "kind": "Pod",
  "namespace": "default",
  "labelSelector": "app=nginx"
}

// Discover FluxCD resources
{
  "kind": "all",
  "groupFilter": "flux"
}

Get detailed information about a specific Kubernetes resource.

Example:

{
  "kind": "Pod",
  "name": "nginx-pod",
  "namespace": "default"
}

Retrieve pod logs with sophisticated filtering options.

Example:

{
  "name": "nginx-pod",
  "namespace": "default",
  "tail": 50,
  "since": "5m",
  "timestamps": true
}

List and filter Kubernetes events with advanced filtering options for debugging and monitoring.

Examples:

// List recent warning events
{
  "eventType": "Warning",
  "since": "30m"
}

// List events for a specific pod
{
  "object": "nginx-pod",
  "namespace": "default"
}

// List failed scheduling events
{
  "reason": "FailedScheduling",
  "limit": 50
}

Automatically discovers and works with any CRDs in your cluster. Simply use the CRD's Kind name with list_resources or describe_resource tools.

Use the groupFilter parameter to discover resources by API group substring:

Built with security as a primary concern:

• ✅ Read-only access - No resource creation, modification, or deletion
• ✅ Production safe - Secure for use in production environments
• ✅ Minimal permissions - Only requires read access to cluster resources
• ✅ No destructive operations - Cannot harm your cluster

We welcome contributions! Please ensure all changes maintain the read-only nature of the server and include appropriate tests.

This project is licensed under the MIT License - see the LICENSE file for details.