mcp-kubernetes
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| K8S_MODE | No | Access mode: read-only, read-write, or admin. Default is read-only. | read-only |
| K8S_DRY_RUN | No | Set to 'true' to validate write/admin tools without calling the Kubernetes API. | false |
| K8S_AUDIT_LOG | No | Set to 'false' to disable JSON audit logging to stderr per guarded operation. | true |
| K8S_ALLOW_EXEC | No | Set to 'true' to enable exec_in_pod (requires admin mode). | false |
| K8S_ALLOW_APPLY | No | Set to 'true' to enable apply_manifest (requires read-write mode). | false |
| KUBECONFIG_PATH | No | Path to the kubeconfig file. If not set, uses the default kubeconfig or in-cluster service account. | |
| K8S_ALLOW_DELETE | No | Set to 'true' to enable delete_resource (requires admin mode). | false |
| K8S_CONTEXT_ALLOWLIST | No | Comma-separated list of kube-config contexts that may be targeted. If not set, all contexts are allowed. | |
| K8S_NAMESPACE_ALLOWLIST | No | Comma-separated list of namespaces allowed for operations. If not set, all namespaces are allowed. | |
| K8S_PROTECTED_NAMESPACES | No | Comma-separated list of namespaces that can be read but never mutated or deleted. | kube-system,kube-public,kube-node-lease |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list_contextsA | List the contexts (clusters) available in the loaded kube-config. |
| list_namespacesA | List namespaces in the cluster. Namespaces outside the allowlist are filtered out. |
| list_podsA | List pods in a namespace with status, readiness, restarts, and node. |
| get_podB | Fetch the full representation of a single pod. |
| get_pod_logsA | Fetch recent logs from a pod container. |
| list_deploymentsA | List deployments in a namespace with replica status. |
| list_servicesA | List services in a namespace with type and cluster IP. |
| list_nodesA | List cluster nodes with readiness and kubelet version. |
| list_eventsA | List recent events in a namespace — useful for diagnosing failures. |
| get_resourceA | Read an arbitrary Kubernetes object by apiVersion/kind/name (e.g. apiVersion=apps/v1, kind=Deployment). |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 10 tools
Each tool targets a distinct resource or action: list contexts, namespaces, pods, deployments, services, nodes, events, and specific getters for pod details, logs, and arbitrary resources. No two tools have overlapping purposes; get_resource is clearly defined as a generic read that complements the specific ones.
All tools follow a consistent verb_resource pattern: list_* for enumerations and get_* for single-object retrieval. Names use lowercase snake_case consistently, with clear pluralization for list operations and singular for get operations, including a mixed get_pod_logs that still fits the pattern.
Ten tools is well-scoped for a Kubernetes read-only server, covering core resource types (pods, deployments, services, nodes, events) plus generic access. Each tool has a clear purpose and the count is neither overwhelming nor too thin.
The server provides comprehensive read coverage for common Kubernetes resources, including list/get operations, logs, events, and arbitrary object retrieval via get_resource. It lacks write operations (create/update/delete), but this appears intentional for a diagnostic-focused tool, leaving only minor gaps like lack of pod exec or resource watches.