istio-mcp-server

概述

Istio MCP 服务器使 AI 助手能够通过安全、非破坏性接口查询 Istio 配置，包括虚拟服务、目标规则和 Envoy 代理配置。它涵盖核心 Istio 资源和可观察性功能，可全面访问 Envoy 代理配置。该服务器支持多种协议（STDIO、SSE、HTTP），专门为与各种 AI 助手的 MCP 集成而设计。

试试问 AI

装完之后，这里有 5 个你可以让 AI 做的事：

• get-virtual-service

  Get a specific Virtual Service configuration by name

  试试:Show me the virtual service named payment-service试试:What is the configuration for my-app-virtual-service?
• get-destination-rule

  Get a specific Destination Rule configuration by name

  试试:Display the destination rule for user-service试试:What traffic policies are defined for product-service-destination?
• get-service-mesh-hosts

  List all services and hosts in the service mesh for a namespace

  试试:Show all hosts in the production namespace试试:What services are in the mesh for the dev environment?
• discover-istio-namespaces

  Discover namespaces with Istio sidecars ranked by injection density

  试试:Which namespaces have the most Istio sidecars?试试:List all namespaces with Istio injection
• check-external-dependency-availability

  Check if an external dependency is properly configured

  试试:Is the payment gateway accessible from our services?试试:Check if database.example.com is properly configured
• get-pods-by-service

  Find all pods backing a specific Kubernetes service

  试试:Show me the pods for the user-service试试:Which pods are backing the product-api service?
• get-proxy-clusters

  Get Envoy cluster configuration from a pod

  试试:Show the cluster config for payment-service pod试试:What clusters are configured in user-service-xyz-123?
• get-proxy-listeners

  Get Envoy listener configuration from a pod

  试试:Display listener configuration for gateway-pod试试:Show all listeners in the api-gateway
• get-proxy-routes

  Get Envoy route configuration from a pod

  试试:What routes are defined in the cart-service?试试:Show the route configuration for product-service
• get-proxy-endpoints

  Get Envoy endpoint configuration from a pod

  试试:Display endpoints for user-service试试:What endpoints are configured for the payment service?
• get-proxy-status

  Get proxy status information

  试试:What's the health status of all proxies in production?试试:Check the status of the api-gateway proxy
• get-proxy-config-dump

  Get full Envoy configuration dump from a pod

  试试:Show complete config dump for payment-service试试:Display full configuration of the gateway proxy

可对比工具

安装

npm install -g istio-mcp-server

git clone https://github.com/krutsko/istio-mcp-server.git
cd istio-mcp-server
make build

{
  "mcpServers": {
    "istio": {
      "command": "npx",
      "args": [
        "-y",
        "istio-mcp-server@latest"
      ]
    }
  }
}

FAQ

这个服务器在生产环境中使用是否安全？

是的，该服务器默认以只读模式运行，确保不会对您的 Istio 资源执行任何破坏性操作。

这个服务器在 Kubernetes 中需要哪些权限？

服务器只需要对 Istio 资源的只读访问权限。所需权限最小，遵循最小权限原则。

istio-mcp-server 对比