Which integrations are available for this server?

Provides tools for auditing Kubernetes manifests using kube-linter checks, including security, resource, availability, and configuration analysis.

How do I use k8s-manifest-audit?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@k8s-manifest-audit audit my deployment.yaml" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

k8s-manifest-audit

k8s-manifest-audit — static audit of Kubernetes manifests via MCP. Powered by kube-linter. Part of the Unbearable Labs audit shop.

Built by Unbearable Labs. Pay-per-event pricing — only billed when a tool is actually called.

What it does

Point any MCP-capable client (Claude Desktop, Cursor, n8n, Make, Zapier, custom agents) at this server, hand it a Kubernetes manifest or directory of manifests, get back a structured report:

Severity — high / medium / low / info
Check ID — kube-linter check name (e.g. privileged-container, unset-cpu-requirements)
Category — security / resources / availability / network / rbac / images / config
Message — what kube-linter found and where
Remediation hint — what to do about it
Object location — kind, name, namespace of the offending resource

63 checks total (31 enabled by default). Covers Deployment, Service, Ingress, ConfigMap, Secret, StatefulSet, DaemonSet, Job, CronJob, NetworkPolicy, RBAC, HPA, PDB, and more.

Related MCP server: hallumark

Tools

Tool	Pricing	Purpose
`audit_manifest(yaml_content)`	$0.02	Audit a single YAML string (may contain multi-doc `---`)
`audit_directory(files)`	$0.02	Audit multiple files — cross-file checks work correctly
`list_checks(enabled_only=False)`	$0.005	Browse the full 63-check catalog with severity + category
`explain_check(check_id)`	$0.005	Get description + remediation for one specific check

Quick start

{
  "mcpServers": {
    "k8s-manifest-audit": {
      "url": "https://unbearable-dev--k8s-manifest-audit.apify.actor/mcp",
      "headers": { "Authorization": "Bearer <YOUR_APIFY_TOKEN>" }
    }
  }
}

Check catalog (sample — 63 checks total)

Check ID	Category	Severity (mapped)
`privileged-container`	security	high
`privilege-escalation-container`	security	high
`run-as-non-root`	security	high
`env-var-secret`	security	high
`host-pid` / `host-ipc` / `host-network`	security	high
`wildcard-in-rules`	rbac	high
`cluster-admin-role-binding`	rbac	high
`unset-cpu-requirements`	resources	medium
`unset-memory-requirements`	resources	medium
`no-liveness-probe` / `no-readiness-probe`	availability	medium
`latest-tag`	images	medium
`minimum-three-replicas`	availability	medium
`no-rolling-update-strategy`	availability	medium
`dangling-service` / `dangling-ingress`	config	low
`use-namespace`	config	low

Use list_checks to get the full, up-to-date catalog.

Pricing

Event	USD
`audit_manifest` or `audit_directory` call	$0.02
`list_checks` or `explain_check` call	$0.005

Powered by kube-linter (MIT, StackRox/Red Hat).

Built by Noel @ Unbearable Labs — more like this in the weekly newsletter.

This server cannot be deployed

RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

Maintenance

ActivityInactive

ResponsivenessNo issues

Resources

Need Help?

Related Servers

Related MCP Connectors

MCP Surface Lint A
io.github.DLeibner
Statically audits MCP tool surfaces for token cost, schema quality, and design issues.
Developer Tools Code Analysis
11
IAC Audit PackOAuth
io.github.UnbearableDev
Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.
Code Analysis Security
2
osv-advisory-mcp-server A
io.github.cyanheads
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Penetration Testing Developer Tools Security
421
Compuute MCP Security Scanner A
io.github.Compuute
Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
Security Code Analysis Version Control
12

Related MCP Servers

kube-lint-mcp
Developer Tools CI/CD & DevOps Testing & QA Tools
sophotechlabs
A
license
Not graded
quality
A
maintenance
MCP server to lint and validate Kubernetes-related manifests(Helm, FluxCD, ArgoCD, Kustomize, etc.)
Updated 2 days ago (2026-09-10 16:02 UTC)
MIT
hallumark
RAG Systems Testing & QA Tools AI & Machine Learning
cognis-digital
F
license
Not graded
quality
C
maintenance
MCP-native auditor for LLM hallucination and grounding issues in RAG systems. Provides prioritized findings in table, JSON, or SARIF format for CI gating and AI agent integration.
Updated 2 months ago (2026-06-30 03:29 UTC)
-
mcp-gateway-scan
Security Code Analysis Testing & QA Tools
willianpinho
A
license
A
quality
B
maintenance
Static scanner for MCP/agent-gateway readiness anti-patterns, providing a 7-dimension R/Y/G score by scanning code and config for common failure modes.
Updated 2 months ago (2026-07-15 14:37 UTC)
1
80
2
MIT
bouncer
Legal & Compliance Code Analysis
nugehs
A
license
Not graded
quality
C
maintenance
Static compliance-controls checker that verifies regulatory required controls exist in code, running deterministic rule packs via MCP tools for compliance checks, rule listing, and explanation.
Updated 3 months ago (2026-06-16 12:17 UTC)
124
MIT