istio-mcp-server

Overview

The Istio MCP Server enables AI assistants to query Istio configurations including Virtual Services, Destination Rules, and Envoy proxy configurations through a safe, non-destructive interface. It covers core Istio resources and observability features with comprehensive access to Envoy proxy configurations. The server supports multiple protocols (STDIO, SSE, HTTP) and is designed specifically for MCP integration with various AI assistants.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• get-virtual-service

  Get a specific Virtual Service configuration by name

  Try:Show me the virtual service named payment-serviceTry:What is the configuration for my-app-virtual-service?
• get-destination-rule

  Get a specific Destination Rule configuration by name

  Try:Display the destination rule for user-serviceTry:What traffic policies are defined for product-service-destination?
• get-service-mesh-hosts

  List all services and hosts in the service mesh for a namespace

  Try:Show all hosts in the production namespaceTry:What services are in the mesh for the dev environment?
• discover-istio-namespaces

  Discover namespaces with Istio sidecars ranked by injection density

  Try:Which namespaces have the most Istio sidecars?Try:List all namespaces with Istio injection
• check-external-dependency-availability

  Check if an external dependency is properly configured

  Try:Is the payment gateway accessible from our services?Try:Check if database.example.com is properly configured
• get-pods-by-service

  Find all pods backing a specific Kubernetes service

  Try:Show me the pods for the user-serviceTry:Which pods are backing the product-api service?
• get-proxy-clusters

  Get Envoy cluster configuration from a pod

  Try:Show the cluster config for payment-service podTry:What clusters are configured in user-service-xyz-123?
• get-proxy-listeners

  Get Envoy listener configuration from a pod

  Try:Display listener configuration for gateway-podTry:Show all listeners in the api-gateway
• get-proxy-routes

  Get Envoy route configuration from a pod

  Try:What routes are defined in the cart-service?Try:Show the route configuration for product-service
• get-proxy-endpoints

  Get Envoy endpoint configuration from a pod

  Try:Display endpoints for user-serviceTry:What endpoints are configured for the payment service?
• get-proxy-status

  Get proxy status information

  Try:What's the health status of all proxies in production?Try:Check the status of the api-gateway proxy
• get-proxy-config-dump

  Get full Envoy configuration dump from a pod

  Try:Show complete config dump for payment-serviceTry:Display full configuration of the gateway proxy

Comparable tools

Installation

npm install -g istio-mcp-server

git clone https://github.com/krutsko/istio-mcp-server.git
cd istio-mcp-server
make build

{
  "mcpServers": {
    "istio": {
      "command": "npx",
      "args": [
        "-y",
        "istio-mcp-server@latest"
      ]
    }
  }
}

FAQ

Is this server safe to use in production environments?

Yes, the server operates in read-only mode by design, ensuring no destructive operations can be performed on your Istio resources.

What permissions does this server require in Kubernetes?

The server requires read-only access to Istio resources. The specific permissions needed are minimal and follow the principle of least privilege.

Compare istio-mcp-server with