Skip to main content
Glama

ScorpTech x402 Tools

K8s Manifest Lint

k8s_manifest_lint
Read-onlyIdempotent

Security and reliability audit of Kubernetes YAML (multi-document, List kinds; kubesec / kube-score style): privileged containers, root users, privilege escalation, dangerous capabilities, host namespaces / hostPath / docker.sock mounts, writable root filesystems, seccomp, :latest or untagged images, missing resource limits and probes, literal secrets in env, hostPorts, automounted service-account tokens, risky Services (externalIPs, NodePort), Ingress without TLS, RBAC wildcards / escalate / bind / impersonate / secrets access, cluster-admin and anonymous bindings and committed Secret data. Per-resource findings with a 0-100 score. Price: $0.003 USDC per successful call (x402, Solana). Same tool over HTTPS: POST https://scorptech.it.com/api/x402/v1/k8s-manifest-lint

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "manifest": "<manifest>"
    },
    "name": "k8s_manifest_lint"
  }
}

Input Schema

NameRequiredDescriptionDefault
manifestYesOne or more YAML documents separated by ---

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, so the bar is lower, yet the description still adds real behavioral context: a per-call price ($0.003 USDC via x402 on Solana), an alternate HTTPS endpoint, and the response shape ('per-resource findings with a 0-100 score'). It does not say whether the call fails or returns findings on malformed YAML, which is the remaining gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose is correctly front-loaded in the first clause, but the middle of the description is a long comma-separated enumeration of a dozen-plus check categories that is dense and hard to scan, and much of it could be trimmed without losing selectability. The pricing and endpoint sentences do earn their place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-input read-only linter with no output schema, the description covers what is checked, what comes back (per-resource scores), the cost of the call, and an alternate transport — which is enough for an agent to invoke it correctly. Only error/failure behavior on invalid YAML is left unstated.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is a single required parameter with 100% schema description coverage, so the baseline would be 3. The description earns one step above baseline by clarifying accepted input breadth — multi-document YAML and List kinds — which is meaning the schema's 'separated by ---' only partially conveys.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a precise verb+resource: 'Security and reliability audit of Kubernetes YAML', and enumerates the exact classes of findings (privileged containers, RBAC wildcards, committed Secret data), so an agent knows exactly what it does. It does not differentiate itself from the closely related siblings in this catalog (dockerfile_lint, gha_workflow_lint, container_check, schema_validate), which is what keeps it from a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: the schema's '---' separator convention and the description's 'multi-document, List kinds' note tell the agent it should feed YAML manifests, and the HTTPS/x402 line implies a paid alternative endpoint. There is no explicit statement of when to pick this over container_check or schema_validate, and no prerequisites or exclusions are given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources