mcp-kubernetes

Overview

mcp-kubernetes is a comprehensive Model Context Protocol server developed by Azure that bridges AI assistants with Kubernetes environments. It provides secure access levels (readonly, readwrite, admin) and supports both a unified kubectl tool and specialized tools for different Kubernetes operations. The server allows AI tools to query resources, execute commands, manage clusters, and diagnose Kubernetes states through natural language interactions, making it particularly valuable for DevOps teams using AI assistants.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• call_kubectl

  Execute kubectl commands to interact with Kubernetes clusters

  Try:Show me all pods in the default namespaceTry:Apply a deployment from deployment.yamlTry:Scale my web deployment to 5 replicas
• kubectl_resources

  Manage Kubernetes resources (CRUD operations and node management)

  Try:Get all pods in all namespacesTry:Apply a configuration from fileTry:Drain a worker node (admin only)
• kubectl_workloads

  Manage workload deployments including scaling and rollouts

  Try:Scale deployment/nginx to 3 replicasTry:Check rollout status of deployment/web
• kubectl_metadata

  Update labels, annotations, and other metadata on resources

  Try:Add label 'app=web' to nginx-podTry:Set image for deployment/nginx to nginx:latest
• kubectl_diagnostics

  Debug and monitor Kubernetes resources

  Try:View logs for nginx-podTry:Execute 'ls /app' in pod/nginx
• kubectl_cluster

  View cluster information and API discovery

  Try:Get cluster informationTry:Explain pod.spec recursively
• kubectl_config

  Configuration and security operations including kubectl context management

  Try:Check if I can create podsTry:Switch to production contextTry:List all kubectl contexts
• call_helm

  Run Helm commands for managing Kubernetes applications

  Try:List all Helm releases in all namespacesTry:Install a new Helm chart
• call_cilium

  Run Cilium commands for network policies and observability

  Try:Check Cilium statusTry:List Cilium network policies
• call_hubble

  Run Hubble commands for network monitoring and debugging

  Try:Check Hubble statusTry:Observe network traffic from app=web in backend-jobs namespace

Comparable tools

Installation

{
  "mcpServers": {
    "kubernetes": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--mount",
        "type=bind,src=/home/username/.kube/config,dst=/home/mcp/.kube/config",
        "ghcr.io/azure/mcp-kubernetes"
      ]
    }
  }
}

{
  "mcpServers": {
    "kubernetes": {
      "command": "<path of binary 'mcp-kubernetes'>",
      "args": ["--transport", "stdio"],
      "env": {
        "KUBECONFIG": "<your-kubeconfig-path>"
      }
    }
  }
}

FAQ

What access levels does mcp-kubernetes support?

The server supports three access levels: 'readonly' (default) for read-only operations, 'readwrite' for read and write operations, and 'admin' for all operations including admin commands like cordon, drain, and taint.

How can I switch between unified and legacy tools?

By default, mcp-kubernetes uses a unified 'call_kubectl' tool. To use legacy mode with multiple specialized tools, set the environment variable USE_LEGACY_TOOLS to 'true'.

Compare mcp-kubernetes with