mcp-k8s

What is mcp-k8s?

mcp-k8s is a Kubernetes Model Context Protocol server that enables interaction with Kubernetes clusters through MCP tools. It supports resource operations (get, list, create, update, delete), Helm releases and repository management, and connects using a kubeconfig file.

How to use mcp-k8s?

Run the binary with a kubeconfig path and optional flags to enable write operations. It supports three transport modes: stdio (default), SSE, and Streamable HTTP. Example: mcp-k8s --kubeconfig=/path/to/kubeconfig --enable-create. Can be run directly, via go install, or as a Docker container.

Key features of mcp-k8s

• Query Kubernetes API resources including custom resources
• CRUD operations on any Kubernetes resource type
• Helm release management (list, get, install, upgrade, uninstall)
• Helm repository management (list, add, remove)
• Fine-grained control to enable/disable each write operation
• Multiple transport modes: stdio, SSE, Streamable HTTP

Use cases of mcp-k8s

• Manage Kubernetes resources through natural language with an LLM
• Assist operators in cluster management and problem diagnosis
• Quickly create and validate resource configurations for prototyping
• Simplify test environment resource management and cleanup
• Interactive learning of Kubernetes concepts for newcomers

FAQ from mcp-k8s

What transport modes does mcp-k8s support?

It supports stdio (default), SSE (Server-Sent Events), and Streamable HTTP. SSE and Streamable HTTP expose an HTTP endpoint on a configurable host and port.

How do I enable write operations?

Write operations (create, update, delete, Helm install, upgrade, uninstall, repo add/remove) are disabled by default. Enable them individually with flags like --enable-create, --enable-delete, --enable-helm-install, etc.

Does mcp-k8s require a Kubernetes cluster?

Yes, it connects to a Kubernetes cluster using a valid kubeconfig file (specified via --kubeconfig). It uses client-go and Helm v3 libraries.

Can I run mcp-k8s in a Docker container?

Yes, Docker images are available at ghcr.io/silenceper/mcp-k8s:latest. Mount a kubeconfig volume and pass flags like --transport=sse for HTTP modes.

How are security and permissions managed?

Write operations are strictly controlled via configuration flags (disabled by default). The kubeconfig’s RBAC determines actual permissions. User inputs are validated to prevent injection attacks.