mcp-kubernetes
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| K8S_MODE | No | Access mode: read-only, read-write, or admin. Default is read-only. | read-only |
| K8S_DRY_RUN | No | Set to 'true' to validate write/admin tools without calling the Kubernetes API. | false |
| K8S_AUDIT_LOG | No | Set to 'false' to disable JSON audit logging to stderr per guarded operation. | true |
| K8S_ALLOW_EXEC | No | Set to 'true' to enable exec_in_pod (requires admin mode). | false |
| K8S_ALLOW_APPLY | No | Set to 'true' to enable apply_manifest (requires read-write mode). | false |
| KUBECONFIG_PATH | No | Path to the kubeconfig file. If not set, uses the default kubeconfig or in-cluster service account. | |
| K8S_ALLOW_DELETE | No | Set to 'true' to enable delete_resource (requires admin mode). | false |
| K8S_CONTEXT_ALLOWLIST | No | Comma-separated list of kube-config contexts that may be targeted. If not set, all contexts are allowed. | |
| K8S_NAMESPACE_ALLOWLIST | No | Comma-separated list of namespaces allowed for operations. If not set, all namespaces are allowed. | |
| K8S_PROTECTED_NAMESPACES | No | Comma-separated list of namespaces that can be read but never mutated or deleted. | kube-system,kube-public,kube-node-lease |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list_contextsA | List the contexts (clusters) available in the loaded kube-config. |
| list_namespacesA | List namespaces in the cluster. Namespaces outside the allowlist are filtered out. |
| list_podsA | List pods in a namespace with status, readiness, restarts, and node. |
| get_podA | Fetch the full representation of a single pod. |
| get_pod_logsA | Fetch recent logs from a pod container. |
| list_deploymentsA | List deployments in a namespace with replica status. |
| list_servicesA | List services in a namespace with type and cluster IP. |
| list_nodesA | List cluster nodes with readiness and kubelet version. |
| list_eventsB | List recent events in a namespace — useful for diagnosing failures. |
| get_resourceA | Read an arbitrary Kubernetes object by apiVersion/kind/name (e.g. apiVersion=apps/v1, kind=Deployment). |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/dockndevai/mcp-kubernetes'
If you have feedback or need assistance with the MCP directory API, please join our Discord server