Mcp Kubernetes Ro

Created By
patrickdappollonioa year ago
mcp-kubernetes-ro is a Model Context Protocol (MCP) server providing read-only access to Kubernetes clusters for AI assistants. It enables AI models to list resources, get resource details, retrieve pod logs, discover API resources, and perform base64 encoding/decoding operations - all while maintaining security through read-only access. The server leverages your local kubectl configuration (even when kubectl is not required to be installed) and provides a safe, read-only interface to your Kubernetes clusters, preventing any destructive operations while allowing comprehensive cluster inspection and troubleshooting capabilities.
Overview

What is Mcp Kubernetes Ro?

Mcp Kubernetes Ro is a Model Context Protocol (MCP) server that provides read-only access to Kubernetes clusters for AI assistants, enabling them to interact with Kubernetes resources securely.

How to use Mcp Kubernetes Ro?

To use Mcp Kubernetes Ro, install it via Homebrew or Docker, and run the command mcp-kubernetes-ro --kubeconfig=/path/to/kubeconfig to connect to your Kubernetes cluster.

Key features of Mcp Kubernetes Ro?

  • No need for kubectl installation; uses local configuration.
  • List and get details of Kubernetes resources.
  • Retrieve pod logs with advanced filtering options.
  • Discover available API resources and perform base64 encoding/decoding.
  • Supports multiple transport modes (stdio and SSE).
  • Ensures read-only access to prevent destructive operations.

Use cases of Mcp Kubernetes Ro?

  1. Troubleshooting Kubernetes clusters by inspecting resources and logs.
  2. Resource discovery and auditing without risk of modification.
  3. AI-assisted operations for diagnosing cluster issues and providing suggestions.

FAQ from Mcp Kubernetes Ro?

  • Can I use Mcp Kubernetes Ro without kubectl?

Yes, it uses your local kubeconfig without requiring the kubectl binary.

  • Is it safe to use in production?

Yes, it provides read-only access, preventing any accidental changes to the cluster.

  • What are the prerequisites?

A valid Kubernetes configuration file and appropriate RBAC permissions for read operations are required.

Server Config

{
  "mcpServers": {
    "kubernetes-ro": {
      "command": "mcp-kubernetes-ro",
      "args": [
        "--kubeconfig=/path/to/kubeconfig"
      ],
      "env": {}
    }
  }
}
Project Info
Created At
a year ago
Updated At
a year ago
Author Name
patrickdappollonio
Star
-
Language
-
License
-

Recommend Servers

View All
AI Work Market — USDC settlement rails for AI labor on Base Mainnet)
@Dario (DME)

AI Work Market is a USDC escrow protocol on Base Mainnet, designed for autonomous AI agents to find work, post jobs, and settle payments without humans in the loop. This MCP server exposes 10 tools: **Escrow lifecycle** - `create_intent_quote` — get calldata + gas estimate for funding a new escrow intent - `submit_proof_quote` — get calldata for the seller to submit a proof URI - `release_funds_quote` — get calldata for the buyer to release payment (or claim/refund) **x402 single-call binding** - `x402_consume` — replaces the 5-step x402 flow with one HMAC-signed POST that returns a delivery URL **Onboarding & discovery** - `agent_onboard` — generate a signed agent card with marketplace attestation - `agent_search` — tf-idf search over the live agent catalog - `agent_reputation` — server-side reputation from on-chain Released/Refunded/Disputed events **Live state** - `system_status` — live on-chain state (nextIntentId, accumulatedFees, contract balance, owner) - `escrow_rules` — contract semantics, lifecycle, call guides, failure modes - `events_subscribe` — SSE stream of new on-chain intent events All endpoints are serverless (Vercel) and return their schema on GET. No browser, no wallet UI required for an agent to integrate. The protocol takes a 1% commission on every settlement; the rest goes to the seller. The full AgentCard is at `/.well-known/agent-card.json` (A2A-compatible). The OpenAPI 3.0.3 spec is at `/.well-known/openapi.json` with `components.securitySchemes` (none, hmacX402). `robots.txt` allows GPTBot, ClaudeBot, anthropic-ai, PerplexityBot, Google-Extended, Applebot-Extended, CCBot, Amazonbot.

21 hours ago