kubesearch-mcp
This server gives an LLM (or MCP client) search and code-review access to kubesearch.dev's index of public Kubernetes home-ops repos.
Search HelmReleases/Argo Applications by chart name (e.g. cert-manager), ranked by popularity, with pagination and links to kubesearch.dev.
Inspect a chart's deployments: summary of common values, paginated repo list, or full per-repo
spec.valuesdrill-down.Search container images by repository substring, including tags used in the wild and sample repos.
Grep real-world Helm values for config examples (e.g. a key or value like
cert-manager.io).Check data status: release date, cache directory, and row counts of the cached index.
Clone a repo temporarily (shallow, sandboxed, auto-expiring) to review real manifests.
List, read, and grep files inside a clone, with binary refusal, truncation, glob filters, and line-level matches.
Grep an always-warm pool of top repos in one call, covering resource kinds beyond Helm values.
Clean up clones early or let them auto-expire; repeat clones are deduplicated and refreshed by default.
Use workflow prompts like comparing deployments, adopting a chart, finding config examples, picking an image, or reviewing a repo.
Provides search and review capabilities for Argo Applications, including application search, deployment inspection, and image and values grep across hundreds of public home-ops Kubernetes Git repositories.
Provides search and review capabilities for Flux HelmReleases, including chart search, deployment inspection, and image and values grep across hundreds of public home-ops Kubernetes Git repositories.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@kubesearch-mcpsearch for cert-manager HelmReleases"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
kubesearch-mcp
An MCP server that lets an LLM search kubesearch.dev — a search engine over Flux HelmReleases and Argo Applications across hundreds of public "home-ops" Kubernetes Git repositories.
It reproduces all of kubesearch.dev's search modes as tools, and can temporarily clone a repo so the model can review its actual manifests.
Search tools
Tool | kubesearch.dev equivalent | What it does |
|
| Find charts by name; see who deploys them, ranked by popularity. |
|
| One chart's deployments. |
|
| Container image repositories and the tags used in the wild. |
|
| Full-text grep across real-world Helm values for config examples. |
| — | Report the cached data's release date and row counts. |
All search tools are annotated read-only and return a typed structuredContent
payload alongside the equivalent text. They page with limit/offset and report
has_more, and their result ordering is global (matches are ranked across the whole
result set before the page is cut), so paging never repeats or skips an entry.
In the values view, value_paths accepts the paths printed in the summary view's
common_settings verbatim, array forms like route.hostnames[] included. A single
deployment whose config is too large for one response is always returned when it is
first on the page, so { repo, limit: 1 } reaches any deployment; larger ones later in
a page are reported individually via values_omitted and omitted_count.
Repository review tools (enabled by default; set KUBESEARCH_ENABLE_CLONE=false to disable)
Tool | What it does |
| Temporarily clone a repo (indexed |
| List files in a clone (optional sub-path + glob). |
| Read a text file from a clone (binary refused, large files truncated). |
| Substring-search a clone's text files; returns |
| Substring-search the always-warm pool of top repos in one call, no clone step (see below). |
| Delete a clone early (clones also auto-expire; pool members are refused). |
Clones are sandboxed: shallow (--depth 1, blob-size filtered), run with git via
execFile (no shell) and a scrubbed environment, size/TTL/concurrency-capped, confined to
a per-clone temp dir, with path-traversal and symlink-escape protection. By default any
public host is allowed but private/loopback/link-local/metadata addresses are blocked (see
env vars below).
Lifecycle: a clone is kept while it's being used and auto-deleted after
KUBESEARCH_CLONE_TTL_MINUTES of inactivity (the timer resets on every access). Repeat
repo_clone calls for the same repo+branch are deduplicated to a single working copy and
(by default) refreshed with a shallow git fetch + hard reset to the latest commit, so a
long-lived clone never goes stale — set KUBESEARCH_CLONE_REFRESH_ON_CLONE=false to reuse
without pulling. Reads (repo_read_file/repo_grep/repo_list_files) are served from the
snapshot and do not pull, so an in-progress review stays stable; re-run repo_clone to pull.
Concurrent repo_clone calls for the same repo share a single git invocation, at most
KUBESEARCH_CLONE_MAX_CONCURRENT git subprocesses run at once, and clone directories
stranded by an ungraceful restart are reaped at startup.
Always-warm pool (repo_grep_all). kubesearch_grep_values only sees Helm spec.values
— that is all the upstream dataset contains. To grep across every resource kind
(Kustomizations, HTTPRoutes, ExternalSecrets, Talos configs, …) the server keeps the
KUBESEARCH_POOL_SIZE (default 15) most-starred indexed repos permanently cloned and
repo_grep_all searches them in one call. Ranking by raw stars alone would fill the pool with
CLI tools and Argo-only repos that have nothing greppable, so only repos with at least
KUBESEARCH_POOL_MIN_RELEASES (default 20) indexed HelmReleases are considered; set
KUBESEARCH_POOL_REPOS=onedr0p/home-ops,bjw-s-labs/home-ops,… to pick the membership
yourself. Pool clones live under <cloneDir>/pool/<owner>__<repo>, use the indexed repo name
as their handle (so repo_read_file can follow a hit directly, and repo_clone of a pool
member reuses it), never expire, don't count toward KUBESEARCH_CLONE_MAX_REPOS, and survive
shutdown so the next start adopts them with a shallow git fetch instead of re-cloning
(~4 MB per repo on disk). Membership is recomputed whenever a new dataset release lands and
the copies are refreshed on the KUBESEARCH_REFRESH_HOURS cadence. Warm-up runs in the
background and never blocks startup; while it's in progress repo_grep_all reports
pool.syncing: true and searches whatever is ready. KUBESEARCH_POOL_SIZE=0 disables the
pool and hides the tool.
Prompts (workflow shortcuts)
Server-provided MCP prompts that chain the tools: kubesearch_compare_deployments,
kubesearch_adopt_chart, kubesearch_find_config_examples, kubesearch_pick_image, and
(when cloning is enabled) kubesearch_review_repo.
How it works
kubesearch.dev has no live API; it publishes its index as SQLite databases on the
whazor/k8s-at-home-search GitHub
releases (a new date-tagged release daily). This server downloads and caches those
databases locally and queries them with SQL — fast, offline-capable, and identical to
what the website shows. Two complementary databases are used and joined on the YAML
file URL:
repos.db(~7 MB) — chart/release/repo metadata.repos-extended.db(~37 MB) — thespec.valuesJSON (powers grep and image search).
Data is refreshed automatically when a newer daily release appears (see
KUBESEARCH_REFRESH_HOURS).
Related MCP server: K8s MCP Server
Quick start (local, stdio)
npm install
npm run buildAdd it to Claude Code:
claude mcp add kubesearch -- node /absolute/path/to/kubesearch-mcp/dist/index.jsOr in a Claude Desktop / MCP client config:
{
"mcpServers": {
"kubesearch": {
"command": "node",
"args": ["/absolute/path/to/kubesearch-mcp/dist/index.js"]
}
}
}The first call downloads the databases into the cache dir (a few seconds); subsequent runs reuse the cache.
Docker deployment (HTTP)
The image defaults to the Streamable HTTP transport, which is what you want for a long-running server that MCP clients connect to over the network.
docker run -d --name kubesearch-mcp \
-p 3000:3000 \
-v kubesearch-data:/data \
-e GITHUB_TOKEN=ghp_xxx \
ghcr.io/perfectra1n/kubesearch-mcp:latestPublished tags: latest (default branch), vX.Y.Z and X.Y (releases), and
sha-<short> for a specific commit. To build it yourself instead, use
docker build -t kubesearch-mcp . and substitute that image name.
Mount /data as shown: it holds the cached databases, so without it every restart
re-downloads ~44 MB.
Or with Compose:
docker compose up -dThe container runs as the unprivileged
nodeuser (uid 1000) and writes cached databases and clones under/data. The named volume indocker-compose.ymlis writable out of the box. If you bind-mount a host directory instead, make it writable by uid 1000 (e.g.chown -R 1000:1000 ./data), orrepo_cloneand refreshes will fail with "Permission denied".
The MCP endpoint is http://<host>:3000/mcp. Two health endpoints are exposed:
GET /healthz— liveness. Always 200 while the process is up. This is what the image'sHEALTHCHECKuses, so a slow initial download can't get the container restarted mid-download.GET /readyz— readiness. 503 until a release is loaded, then 200. Use this for Kubernetes readiness probes and load-balancer checks, so traffic isn't sent to a pod whose first queries would fail.
Point an MCP client at it:
{
"mcpServers": {
"kubesearch": {
"type": "http",
"url": "http://localhost:3000/mcp",
"headers": { "Authorization": "Bearer <MCP_AUTH_TOKEN>" }
}
}
}(The Authorization header is only required when MCP_AUTH_TOKEN is set.)
Securing the HTTP transport
The HTTP transport ships open. Out of the box there is no authentication, CORS is
*, and the image binds 0.0.0.0. That is fine on a trusted network or behind a
reverse proxy that authenticates for you; it is not fine on a public interface. Before
exposing the port beyond a network you control:
Variable | Default | What it does |
| (unset — auth off) | Require |
| (unset — any origin) | Comma-separated |
| (unset — any host) | Comma-separated |
|
| Refuse new sessions past this many concurrent ones. |
|
| Reject larger request bodies with 413. |
The server logs a warning at startup if it binds a non-loopback address with authentication disabled. Terminate TLS at a proxy; the server speaks plain HTTP.
Running the container over stdio instead
If you prefer to have a client spawn the container per session:
docker run -i --rm -v kubesearch-data:/data -e MCP_TRANSPORT=stdio kubesearch-mcpConfiguration
All configuration is via environment variables:
Variable | Default | Description |
|
|
|
|
| HTTP bind host (http transport). |
|
| HTTP listen port. |
| (unset — auth off) | If set, every HTTP request must send |
| (unset — any) |
|
| (unset — any) |
|
|
| Max HTTP request body size; larger bodies get 413. |
|
| Max concurrent HTTP sessions; further |
|
| Close an HTTP session after this long with no requests. |
|
| Minimum log severity to emit: |
|
| Where the SQLite databases are cached. |
|
| How often to check for a newer daily release. |
|
| Wall-clock limit for downloading one database. Downloads also abort after 30s with no data received. |
|
| Reject a database download larger than this. |
| (unset) | Lifts the GitHub API rate limit (60→5000/hr) used to resolve the latest release. Recommended. |
|
| Source repo for the databases (override only for forks/testing). |
|
| Enable the |
| (any) | Comma-separated host allowlist, e.g. |
|
| Permit cloning from private/loopback/link-local/metadata addresses (SSRF guard off). |
|
| Where ephemeral clones live. |
|
| Auto-delete a clone after this much inactivity (timer resets on each access). |
|
| On a repeat clone of the same repo, |
|
| Max concurrent cached clones (LRU-evicted). |
|
| Max |
|
| Reject/clean a clone whose tree exceeds this size. |
|
| Hard timeout for the |
|
| How many top repos to keep permanently cloned for |
|
| Only repos with at least this many indexed HelmReleases are eligible for the star ranking. |
| (unset) | Comma-separated indexed repo names that replace the star ranking entirely (e.g. |
Development
mise pins the toolchain and owns the dev/release lifecycle, so every command below is the same one CI runs. One-time setup:
mise install # installs Node, lefthook, shellcheck; also installs the git hooksThen:
mise tasks # list every task with a description
mise run dev # run from source via tsx
mise run test # vitest (unit + offline integration against a fixture DB)
mise run lint # typecheck + prettier --check + shellcheck
mise run fmt # format in place with prettier
mise run build # bundle to dist/ with tsup
mise run ci # the full local gate: fmt-check, typecheck, test, build
mise run smoke # end-to-end against live upstream data (needs network)
mise run image # build the container image locallyThe underlying npm run <script> commands still work if you'd rather not use mise; mise
is a thin wrapper plus a pinned toolchain. Exact tool versions live in
.mise/config.toml with per-platform checksums in .mise/mise.lock, which CI enforces
via mise install --locked; package.json's engines.node records the minimum
supported runtime.
A lefthook pre-commit hook formats staged files with prettier
and re-stages them, and runs shellcheck on shell scripts. It deliberately doesn't run
tests or the typechecker — that's CI's job, so committing stays fast. mise install
wires the hook; lefthook install re-syncs it if needed.
Tests run fully offline against a small fixture database that mirrors the real schema.
They cover the domain logic, the download/refresh paths (with a stubbed fetch), the
HTTP transport end to end, and the tools themselves through an in-memory MCP client —
which means the SDK validates every response against its declared outputSchema. The
releaseKey/mergeHelmURL slug logic is ported verbatim from upstream and locked with
test vectors so generated /hr/<id> links match the real site.
typecheck and test run on every push and pull request, and the container image is
only published if they pass.
Renovate keeps dependencies current: .github/workflows/renovate.yml
runs it every 12 hours (and on dependency-dashboard or PR checkbox edits) with the policy in
.renovaterc.json5, which extends the shared
home-operations/renovate-config preset.
It authenticates as a GitHub App so that CI runs on the PRs it opens.
Credits
All data comes from kubesearch.dev /
whazor/k8s-at-home-search. To include
your own cluster, make the repo public and add the k8s-at-home or kubesearch GitHub
topic.
License
MIT
Available Tools
11 toolskubesearch_get_releaseGet HelmRelease detailsARead-onlyIdempotent
Get details for one chart by its kubesearch.dev release id (the id from kubesearch_search_releases, e.g. 'ghcr.io-home-operations-charts-mirror-cert-manager'). Three views, controlled by view:
summary(default): a compact digest of how the community configures the chart — the most commonly-setspec.valuespaths with their typical values, plus a couple of full example configs. Start here.deployments: the paginated list of every repo deploying the chart (no values) — use it to find a repo to drill into.values: the full parsedspec.valuesfor selected deployments — narrow withrepoand/orvalue_pathsto fetch just the config (or subtree) you care about. This is the drill-down; prefersummaryfirst. Note:chart_source_urlis the normalized kubesearch.dev grouping key, not necessarily the pullable chart. ForchartRef/OCIRepository releases the real chart is insource_urls(group) and each deployment'ssource_url+source_tag;resolved_chartsurfaces the true chart name when it differs fromchart. Confirm by cloning the deployment's repo (repo_clone) and reading its OCIRepository source.yaml.
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | The release id / slug, e.g. 'ghcr.io-home-operations-charts-mirror-cert-manager'. | |
| top | No | `summary` view: number of common value paths to return. | |
| repo | No | `values` view: restrict to one repo (e.g. 'onedr0p/home-ops'). | |
| view | No | summary = community config digest (default); deployments = paginated repo list; values = full config drill-down. | summary |
| limit | No | Page size for `deployments`/`values` views. | |
| offset | No | Pagination offset for `deployments`/`values` views. | |
| examples | No | `summary` view: number of full example configs to include. | |
| value_paths | No | `values` view: only return these value-path subtrees, e.g. ['server.persistentVolume','server.retentionPeriod']. Paths from the summary view's common_settings work as-is, including array forms like 'route.hostnames[]'. |
Output Schema
| Name | Required | Description |
|---|---|---|
| id | Yes | |
| view | Yes | |
| chart | Yes | |
| shown | No | |
| offset | No | |
| has_more | No | |
| next_step | No | |
| top_repos | No | |
| deployments | No | |
| source_urls | Yes | |
| matched_repos | No | |
| omitted_count | No | |
| kubesearch_url | Yes | |
| resolved_chart | Yes | |
| values_summary | No | |
| chart_source_url | Yes | |
| deployment_count | Yes | |
| chart_source_ambiguous | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnlyHint=true and idempotentHint=true, so the safety profile is covered. The description adds behavioral nuance: the three-view behavior, pagination handling, and the note about `chart_source_url` being a normalized grouping key rather than a pullable chart, plus the `resolved_chart` clarification and the advice to confirm via repo cloning. It does not contradict annotations and enriches the agent's understanding of edge cases.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is longer than average (~180 words) but well-structured with a lead sentence, a three-bullet section, and a note. Every sentence adds functional information; there is no filler. It is front-loaded with the main purpose and then details, which lets the agent quickly grasp the tool's core. It could be slightly tightened but remains efficient for the complexity involved.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 8 parameters, 3 views, and pagination, the description covers all usage aspects: parameter-to-view mapping, defaults, pagination, and the subtlety of `chart_source_url` vs `source_url`s. It even provides a verification step via `repo_clone`. With an output schema present (though not shown here), the return value details are not required, and the description fills all necessary gaps for an agent to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema description coverage, the baseline is 3. The description adds extra meaning for parameters: it clarifies that `top` and `examples` apply only to `summary`, `repo` and `value_paths` to `values`, and `limit`/`offset` to `deployments`/`values`. It also explains that `value_paths` paths from `summary` work as-is, including array forms like 'route.hostnames[]'. This goes beyond the schema's terse descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Get details for one chart') and the resource (by release id), and explains three distinct views (summary, deployments, values) that give it a precise scope. It references the sibling tool `kubesearch_search_releases` as the source of the id, which differentiates it from search. No ambiguity in what it does.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit guidance on when to use each view: 'Start here' for summary, 'use it to find a repo to drill into' for deployments, and 'prefer summary first' for values. It also tells the user to confirm via `repo_clone` when needed. However, it does not explicitly say when to avoid this tool in favor of others (e.g., when to use `kubesearch_grep_values` instead), so it misses a direct exclusion but still offers clear usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kubesearch_grep_valuesGrep HelmRelease valuesARead-onlyIdempotent
Full-text grep across the Helm spec.values of every indexed HelmRelease/Application (substring match). Great for finding real-world examples of a config key or value, e.g. 'cert-manager.io', 'nodeSelector', 'gatus'. Returns the matched key path, a snippet, and the source file. Mirrors the kubesearch.dev /grep search.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max number of matching files to return. | |
| query | Yes | Substring to grep for in values (keys or values), e.g. 'cert-manager.io'. | |
| offset | No | Skip this many matches (results are ranked by repo stars). | |
| case_sensitive | No | Match case-sensitively. |
Output Schema
| Name | Required | Description |
|---|---|---|
| query | Yes | |
| shown | Yes | |
| offset | Yes | |
| results | Yes | |
| grep_url | Yes | |
| has_more | Yes | |
| total_files | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish read-only and idempotent behavior. The description adds meaningful context by specifying the scope ('every indexed HelmRelease/Application'), the substring-match nature, and the result shape (matched key path, snippet, source file). No contradictions with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three concise sentences front-load the core operation, provide concrete examples, and mention the output format. Every sentence earns its place without unnecessary detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a straightforward grep tool with full schema coverage, annotations, and an output schema, the description covers scope, semantics, use cases, and result content. Nothing essential is missing for an agent to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the schema fully documents query, limit, offset, and case_sensitive. The description adds useful examples and clarifies the query targets config keys/values, but does not materially expand parameter semantics beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('grep') and resource ('Helm spec.values of every indexed HelmRelease/Application'), clearly distinguishing this from file-based repo grep tools. It also states the substring-match behavior and the return payload, leaving no ambiguity about what the tool does.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context for when to use it: finding real-world examples of config keys or values, with concrete examples. It does not explicitly name alternative tools or exclusion cases, but the Helm-values-specific scope makes the intended use obvious.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kubesearch_search_imagesSearch container imagesARead-onlyIdempotent
Search kubesearch.dev for container image repositories used across public home-ops clusters (substring match on the image repository, case-insensitive). Returns each matching image repository, the tags seen in the wild, how many deployments use it, and a few sample repos. Equivalent to the kubesearch.dev /image search.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max number of image repositories to return. | |
| query | Yes | Image repository substring, e.g. 'cert-manager', 'ghcr.io/home-operations', 'postgres'. | |
| offset | No | Skip this many results (ranked by usage count). |
Output Schema
| Name | Required | Description |
|---|---|---|
| query | Yes | |
| shown | Yes | |
| offset | Yes | |
| results | Yes | |
| has_more | Yes | |
| image_url | Yes | |
| total_matches | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only/idempotent behavior, so the description adds value by disclosing the search semantics (substring, case-insensitive), the data source (public home-ops clusters), and the exact return contents (repositories, tags, deployment counts, sample repos). This goes beyond the annotations and enriches the agent's understanding.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two focused sentences with no fluff. The first sentence front-loads the core action and scope, the second describes return values and equivalence. Every clause earns its place, making it easy to parse quickly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the output schema exists, the description doesn't need to detail return types. It covers the essential context: what the tool does, what data it searches, matching behavior, and result granularity. With annotations handling safety and schema handling parameters, the description is complete for this tool's complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% with clear parameter descriptions, so the baseline is 3. The description adds extra meaning by explaining the query parameter's matching semantics ('substring match, case-insensitive') and what the results represent (tag counts, deployment usage, sample repos), which complements the schema without redundancy.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Search') and resource ('container image repositories'), and adds key semantics like substring match and case-insensitivity. It clearly distinguishes from sibling tools (search_releases, grep_values) by focusing on image repositories, and even references the equivalent kubesearch.dev /image search.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly states the context (searching image repos across public home-ops clusters) and the matching behavior. However, it lacks explicit 'when not to use' or alternative tool references, though sibling names make the distinction obvious. This is close to a 5 but missing an explicit exclusion.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kubesearch_search_releasesSearch HelmReleasesARead-onlyIdempotent
Search kubesearch.dev for Flux HelmReleases / Argo Applications by chart name (substring, case-insensitive). Mirrors the kubesearch.dev homepage search (e.g. 'cert-manager'). Results are grouped by chart source and ranked by how many public home-ops repos deploy them. Each result includes an id you can pass to kubesearch_get_release for full details, plus a kubesearch.dev link.
Note: chart_source_url is a NORMALIZED grouping key (it matches kubesearch.dev's /hr/<id> grouping and intentionally collapses related registries, e.g. all bjw-s variants into 'oci://ghcr.io/bjw-s-labs/charts/'). For chartRef/OCIRepository releases the actual pullable chart is in source_urls (group) and each repo's source_url (+ source_tag); resolved_chart flags when the real chart name differs from chart.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max number of chart groups to return. | |
| query | Yes | Chart name or substring to search for, e.g. 'cert-manager', 'authentik', 'plex'. | |
| offset | No | Pagination offset into the ranked results. |
Output Schema
| Name | Required | Description |
|---|---|---|
| query | Yes | |
| shown | Yes | |
| offset | Yes | |
| results | Yes | |
| has_more | Yes | |
| search_url | Yes | |
| total_matches | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and idempotentHint, so the bar for extra value is high. The description adds substantial behavioral detail beyond annotations: case-insensitive substring matching, grouping by chart source, ranking by public repo usage, normalized `chart_source_url` behavior, and the `resolved_chart` flag. This gives the agent accurate expectations about how results are structured and why grouping keys may differ from actual pullable sources.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The first sentence is front-loaded with the core purpose, followed by result-grouping context and the id-to-detail linkage. The second paragraph is a dense but necessary note about normalization, and every sentence earns its place with no filler. The structure is well organized and appropriately sized for the tool's complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is complete for an agent deciding whether to invoke this tool and how to interpret results. It covers search semantics, result grouping, ranking, how to follow up for full details, and the important normalization caveat. The output schema exists, so return-value details do not need to be restated, and annotations already cover safety and idempotency.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds meaning beyond the schema by clarifying that `query` is a case-insensitive substring over chart names, giving concrete examples ('cert-manager', 'authentik'), and explaining that `chart_source_url` is a normalized grouping key rather than a literal registry URL. This supplements the schema's field descriptions usefully.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Search kubesearch.dev for Flux HelmReleases / Argo Applications by chart name.' It clearly differentiates from sibling tools by noting the returned `id` can be passed to `kubesearch_get_release` and by describing the homepage-search mirror, so an agent can distinguish it from `kubesearch_search_images` and other siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context for when to use the tool: searching chart names/substrings across HelmReleases and Argo Applications. It also names the follow-up tool (`kubesearch_get_release`) for full details, but it does not explicitly state when NOT to use this versus the sibling image-search tool, so it falls just short of full exclusion guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kubesearch_statusKubesearch data statusARead-onlyIdempotent
Report the freshness and size of the locally cached kubesearch.dev data: the release tag (date), when it was loaded, the cache directory, and row counts. Useful to confirm how current the search data is.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| tag | Yes | |
| cacheDir | Yes | |
| loadedAt | Yes | |
| helmReleases | Yes | |
| releaseFiles | Yes | |
| reposIndexed | Yes | |
| valueDocuments | Yes | |
| ociRepositories | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and idempotentHint, so the safety profile is covered. The description adds value by disclosing exactly what status information is returned (release tag, load time, cache directory, row counts), which goes beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no filler. The first sentence front-loads the action and output fields; the second provides a succinct use case. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only status tool with no parameters and an output schema, the description fully covers purpose, output content, and usage context. It is entirely adequate given the tool's low complexity and sibling context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With zero parameters, the baseline for parameter semantics is 4. The description correctly avoids inventing parameter details, and the input schema confirms no parameters exist, so nothing is missing.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reports freshness and size of cached data, enumerating specific fields (release tag, load time, cache directory, row counts). This unambiguously distinguishes it from sibling search tools, which perform queries rather than status inspection.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly notes the tool is 'useful to confirm how current the search data is', giving a clear use case. However, it doesn't explicitly mention when not to use it or name alternatives, though sibling tools imply those are for searching, not status checking.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repo_cleanupDelete a cloned repositoryAIdempotent
Delete a temporary clone created by repo_clone (frees disk before its TTL). Clones are also auto-deleted after inactivity, so this is optional but polite.
| Name | Required | Description | Default |
|---|---|---|---|
| handle | Yes | The clone handle from repo_clone. |
Output Schema
| Name | Required | Description |
|---|---|---|
| handle | Yes | |
| removed | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide idempotentHint=true and readOnlyHint=false. The description adds valuable lifecycle context: clones are temporary, have a TTL, and are auto-deleted. This goes beyond annotations to explain why the tool is optional, and does not contradict destructiveHint=false since the clone is temporary.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the action ('Delete a temporary clone'), and both sentences serve a purpose: the first states the action and rationale, the second clarifies optionality. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter tool with an output schema and strong annotations, the description covers the purpose, usage context, and lifecycle behavior (TTL, auto-deletion). It is fully sufficient for an agent to decide when and why to invoke it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with the parameter 'handle' described as 'The clone handle from repo_clone.' The tool description merely references this relationship without adding new meaning, so the schema carries the full semantic burden.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses the verb 'Delete' with a specific resource ('temporary clone created by repo_clone') and clearly distinguishes this from sibling tools like repo_clone, which creates clones. The qualifier 'temporary' adds necessary scope.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly states when to use it (to free disk before TTL) and when not to (since clones auto-delete after inactivity, making it optional). The alternative is effectively doing nothing, which the description implies by calling it 'polite'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repo_cloneClone a repository (temporary)A
Temporarily clone a public Git repository so you can review its actual files. Accepts an indexed home-ops repo name (e.g. 'onedr0p/home-ops' — resolved to its real clone URL and branch) or a full https Git URL. The clone is shallow, sandboxed, size/time-limited, and auto-deleted after a TTL. Returns a handle to use with repo_list_files, repo_read_file, and repo_grep, plus a curated file tree to get you started. Call repo_cleanup when done.
| Name | Required | Description | Default |
|---|---|---|---|
| repo | Yes | An indexed repo name like 'onedr0p/home-ops', or a full https:// Git URL. |
Output Schema
| Name | Required | Description |
|---|---|---|
| tree | Yes | |
| branch | Yes | |
| handle | Yes | |
| pinned | Yes | |
| reused | Yes | |
| size_mb | Yes | |
| updated | Yes | |
| file_count | Yes | |
| resolved_url | Yes | |
| expires_in_minutes | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses substantial behavioral details beyond the annotations: the clone is shallow, sandboxed, size/time-limited, auto-deleted after a TTL, resolves indexed names to real clone URLs and branches, and requires eventual cleanup. This is exactly the kind of context an agent needs for a stateful, non-read-only operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose, then adds precise operational details in compact sentences. Every sentence earns its place, covering input format, clone behavior, return value, companion functions, and cleanup without filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is complete for a tool with one parameter, meaningful annotations, and an output schema. It explains what the caller receives, how the temporary resource is governed, and what follow-up actions are expected. Nothing essential for correct invocation is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema description coverage, the schema already documents the `repo` parameter, and the description adds meaningful extra context: it gives an example, explains that indexed names are resolved to the real clone URL and branch, and states which URL forms are accepted. This goes beyond the schema without being redundant.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource: temporarily clone a public Git repository to review actual files. It clearly distinguishes itself from siblings by explaining that it returns a handle consumed by repo_list_files, repo_read_file, and repo_grep, and that repo_cleanup should be called afterward.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly conveys when to use the tool: when actual repository files need to be inspected, rather than relying only on metadata. It also names the companion tools and cleanup routine, but it does not explicitly state when not to use it or contrast it directly with the kubesearch_* alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repo_grepGrep a cloned repositoryARead-onlyIdempotent
Search the text contents of a previously cloned repository (by handle) for a substring. Optionally restrict to files matching a glob. Returns file paths, line numbers, and matching lines. If truncated is set, narrow the search with a longer query or a glob rather than paging.
| Name | Required | Description | Default |
|---|---|---|---|
| glob | No | Optional glob filter, e.g. '**/*.yaml'. | |
| limit | No | Max number of matching lines to return. | |
| query | Yes | Substring to search for across the repo's text files. | |
| handle | Yes | The clone handle from repo_clone. | |
| case_sensitive | No | Match case-sensitively. |
Output Schema
| Name | Required | Description |
|---|---|---|
| query | Yes | |
| handle | Yes | |
| matches | Yes | |
| truncated | Yes | |
| total_matches | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already signal readOnly, idempotent, and closed-world behavior. The description adds valuable behavioral details: search scope ('text contents'), optional glob filtering, return format ('file paths, line numbers, and matching lines'), and truncation handling. This goes beyond annotation basics and helps the agent predict tool output.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, all informative. The first sentence captures the core action, the second adds an optional parameter, and the third provides practical usage advice. No filler or repetition; front-loaded and efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a search tool with output schema and rich annotations, the description covers key contextual aspects: prerequisite (cloned repository), optional filter, return format, and behavior on truncation. It doesn't mention case_sensitive or limit explicitly, but the schema fully documents those, and the truncation guidance substitutes for deeper pagination details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, with each parameter including a description, so the baseline is 3. The description does not significantly expand on parameter meaning beyond what the schema provides—it only restates 'by handle' and 'glob' in narrative form. No new parameter-level insight is added.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Search') and a specific resource ('text contents of a previously cloned repository'), immediately distinguishing it from sibling tools like repo_list_files (list files) and repo_read_file (read one file). It also specifies the output (file paths, line numbers, matching lines), making the tool's purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the prerequisite of a prior repo_clone operation via 'previously cloned repository (by handle)', and offers explicit guidance for handling truncated results: 'narrow the search with a longer query or a glob rather than paging.' It does not explicitly mention when to use this over kubesearch_grep_values, but given sibling list and context, the usage is clear enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repo_grep_allGrep the always-warm pool of top reposARead-onlyIdempotent
Substring-search the actual files of the most popular indexed home-ops repositories at once — no clone step needed. The server keeps these repos permanently cloned, so this covers every resource kind (Kustomizations, Ingress/HTTPRoute, ExternalSecrets, Talos configs, …), not just Helm values like kubesearch_grep_values. Hits are grouped by repo, most-starred first, and each group carries a handle you can pass straight to repo_read_file / repo_list_files / repo_grep for the follow-up. pool reports which repos were searchable: while pool.syncing is true and ready is below size the pool is still warming up, so an empty result is not final — retry after a short pause.
| Name | Required | Description | Default |
|---|---|---|---|
| glob | No | Optional path glob, e.g. '**/*.yaml' or 'kubernetes/apps/**'. | |
| limit | No | Max matching lines returned overall. | |
| query | Yes | Substring to search for, e.g. 'gatus.io/enabled' or 'kind: HTTPRoute'. | |
| max_per_repo | No | Max matching lines returned per repo. | |
| case_sensitive | No | Match case-sensitively. |
Output Schema
| Name | Required | Description |
|---|---|---|
| pool | Yes | |
| query | Yes | |
| repos | Yes | |
| truncated | Yes | |
| total_matches | Yes | |
| repos_searched | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark it read-only, open-world=false, and idempotent, and the description adds several behavioral details beyond those: the server keeps repos permanently cloned, results are grouped by repo and star-ranked, each group carries a handle for follow-up tools, and the pool object's syncing/ready/size indicates warming with non-final empty results. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but every sentence adds a distinct operational fact: scope, no-clone behavior, resource coverage, grouping/handle for follow-up, and pool-warming retry semantics. It is front-loaded with the core purpose and remains compact enough for the amount of context it provides.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only search tool with 100% schema parameter coverage, an output schema, and clear annotations, the description covers the key selection and invocation concerns: what it searches, how results are grouped, how to follow up, and when an empty result is not final. No critical operational gap is apparent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3 and the schema already documents query/glob/limit/max_per_repo/case_sensitive. The description reinforces that query is a substring and that grouping is by repo, but it does not add syntax or parameter-format details beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific action ('Substring-search') and resource ('actual files of the most popular indexed home-ops repositories'), and immediately distinguishes it from 'kubesearch_grep_values' by scope. It also notes no clone step is needed, making it clear this is a pre-warmed cross-repo search rather than a repo-local grep.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly contrasts with kubesearch_grep_values ('not just Helm values like...') and tells the agent that returned handles are intended for repo_read_file/repo_list_files/repo_grep follow-ups. It also gives retry guidance while pool.syncing is true. This is clear contextual guidance, though it stops short of an explicit 'use X instead' exclusion statement.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repo_list_filesList files in a cloned repositoryARead-onlyIdempotent
List files in a previously cloned repository (by handle). Optionally scope to a sub-path and/or filter with a glob (e.g. '/*.yaml', 'kubernetes/'). Use the handle returned by repo_clone.
| Name | Required | Description | Default |
|---|---|---|---|
| glob | No | Optional glob filter applied to file paths, e.g. '**/*.yaml'. | |
| path | No | Sub-path within the repo to list (default: repo root). | . |
| handle | Yes | The clone handle from repo_clone. |
Output Schema
| Name | Required | Description |
|---|---|---|
| path | Yes | |
| handle | Yes | |
| entries | Yes | |
| truncated | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and idempotentHint, covering the safety profile. The description adds useful behavioral context beyond annotations: the handle must come from repo_clone, and listing can be scoped via sub-path and glob. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the core purpose, followed by optional parameters and a necessary prerequisite. Every phrase earns its place with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple list files tool with an output schema, the description covers the prerequisite (handle from repo_clone) and options (path, glob). It does not explicitly state whether the listing is recursive, but the glob pattern '**/*.yaml' implies recursive behavior, and the output schema likely clarifies return structure. No major gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with each parameter (handle, path, glob) fully described in the input schema. The description restates these options but adds no new semantic detail beyond examples already present in the schema, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific action and resource: 'List files in a previously cloned repository (by handle)'. This distinguishes it from sibling tools like repo_read_file and repo_grep, which operate on file contents. The optional path and glob filters are additional specificity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives a clear prerequisite via 'Use the handle returned by repo_clone' and explains optional scoping/filtering with path and glob. It does not explicitly name alternatives or when-not-to-use conditions, but the context is strong enough for an agent to understand when this tool applies.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
repo_read_fileRead a file from a cloned repositoryARead-onlyIdempotent
Read a text file from a previously cloned repository (by handle and relative path). Binary files are refused and large files are truncated. Use the handle returned by repo_clone.
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Relative path to the file within the repo, e.g. 'kubernetes/apps/cert-manager/helmrelease.yaml'. | |
| handle | Yes | The clone handle from repo_clone. | |
| max_bytes | No | Max bytes to return. |
Output Schema
| Name | Required | Description |
|---|---|---|
| path | Yes | |
| bytes | Yes | |
| handle | Yes | |
| content | Yes | |
| truncated | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only and idempotent hints. The description adds behavioral details about binary files being refused and large files being truncated, which goes beyond the structured annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the action, and each sentence earns its place without unnecessary elaboration.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With a rich output schema and good annotations, the description covers the key prerequisites and constraints (prerequisite handle, binary refusal, truncation) sufficiently for an agent to use the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema covers 100% of parameters with descriptions. The description reinforces the handle's origin but doesn't add significant new semantic information beyond what the schema already provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reads a text file from a cloned repository using a handle and relative path. It also mentions binary refusal and truncation, which distinguishes it from sibling tools like repo_list_files and repo_grep.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context: it works on previously cloned repos and instructs to use the handle from repo_clone. It doesn't explicitly name alternatives, but the usage context is unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v1.2.0- Changed
kubesearch_get_release28 fields changed- removed
Output schema / properties / deployments / items / properties / chart_version / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / deployments / items / properties / chart_version / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / deployments / items / properties / namespace / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / deployments / items / properties / namespace / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / deployments / items / properties / repo_url / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / deployments / items / properties / repo_url / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / deployments / items / properties / resolved_chart / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / deployments / items / properties / resolved_chart / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / deployments / items / properties / source_kind / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / deployments / items / properties / source_kind / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / deployments / items / properties / source_tag / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / deployments / items / properties / source_tag / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / resolved_chart / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / resolved_chart / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / top_repos / items / properties / chart_version / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / top_repos / items / properties / chart_version / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / top_repos / items / properties / namespace / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / top_repos / items / properties / namespace / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / top_repos / items / properties / repo_url / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / top_repos / items / properties / repo_url / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / top_repos / items / properties / resolved_chart / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / top_repos / items / properties / resolved_chart / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / top_repos / items / properties / source_kind / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / top_repos / items / properties / source_kind / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / top_repos / items / properties / source_tag / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / top_repos / items / properties / source_tag / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / values_summary / properties / examples / items / properties / chart_version / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / values_summary / properties / examples / items / properties / chart_version / typeAdded value: +[ + "string", + "null" +]
- Changed
kubesearch_grep_values8 fields changed- removed
Output schema / properties / results / items / properties / chart / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / results / items / properties / chart / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / results / items / properties / matched_key / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / results / items / properties / matched_key / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / results / items / properties / repo / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / results / items / properties / repo / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / results / items / properties / stars / anyOfRemoved value: -[ - { - "type": "number" - }, - { - "type": "null" - } -] - added
Output schema / properties / results / items / properties / stars / typeAdded value: +[ + "number", + "null" +]
- Changed
kubesearch_search_releases12 fields changed- removed
Output schema / properties / results / items / properties / resolved_chart / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / results / items / properties / resolved_chart / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / results / items / properties / top_repos / items / properties / chart_version / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / results / items / properties / top_repos / items / properties / chart_version / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / results / items / properties / top_repos / items / properties / namespace / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / results / items / properties / top_repos / items / properties / namespace / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / results / items / properties / top_repos / items / properties / resolved_chart / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / results / items / properties / top_repos / items / properties / resolved_chart / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / results / items / properties / top_repos / items / properties / source_kind / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / results / items / properties / top_repos / items / properties / source_kind / typeAdded value: +[ + "string", + "null" +] - removed
Output schema / properties / results / items / properties / top_repos / items / properties / source_tag / anyOfRemoved value: -[ - { - "type": "string" - }, - { - "type": "null" - } -] - added
Output schema / properties / results / items / properties / top_repos / items / properties / source_tag / typeAdded value: +[ + "string", + "null" +]
- Changed
repo_clone2 fields changed- added
Output schema / properties / pinnedAdded value: +{ + "type": "boolean" +} - changed
Output schema / requiredPrevious value: -[ - "handle", - "resolved_url", - "branch", - "file_count", - "size_mb", - "expires_in_minutes", - "reused", - "updated", - "tree" -]New value: +[ + "handle", + "resolved_url", + "branch", + "file_count", + "size_mb", + "expires_in_minutes", + "reused", + "updated", + "pinned", + "tree" +]
- Added
repo_grep_all
10 tool updates
v0.1.0- First observed
kubesearch_get_release - First observed
kubesearch_grep_values - First observed
kubesearch_search_images - First observed
kubesearch_search_releases - First observed
kubesearch_status - First observed
repo_cleanup - First observed
repo_clone - First observed
repo_grep - First observed
repo_list_files - First observed
repo_read_file
TDQS
Scored across 11 tools
Each tool has a clearly distinct role: kubesearch_* handles index-wide searches and details, while repo_* handles cloned repository file operations. Even the three grep-like tools are cleanly separated by scope (indexed values across all repos, all files in popular repos, and a specific cloned repo).
Names largely follow a domain-prefix plus action pattern: kubesearch_search_*, kubesearch_get_*, repo_clone, repo_read_file, repo_grep. Minor deviations exist (repo_cleanup is noun-first, kubesearch_grep_values uses a verb-noun pairing not mirrored elsewhere), but the convention is predictable enough.
Eleven tools is a well-scoped set for the server's purpose: search the kubesearch.dev index, retrieve release details, and inspect real repositories. Each tool covers a distinct operation and none feel redundant or ornamental.
The surface covers the full workflow: search releases/images/values, get detailed release information, clone repos, list/read/grep files, and clean up clones. The only minor nicety might be explicit pagination on release search, but detailed deployment pagination is already covered via kubesearch_get_release.
Maintenance
Related MCP Connectors
Code intelligence for LLMs. Analyze, search, and retrieve code from any public git repository.
Read and write KukGit repositories, files, issues and pull requests from an AI assistant.
Give your AI assistant access to real Helm chart data. No more hallucinated values.yaml files.
Fail-closed policy guardrails for AI agents running kubectl, terraform, helm, and argocd.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables AI agents to fetch, search, and retrieve markdown content from remote Git repositories. Supports both public and private repositories with authentication, allowing AI assistants to access documentation and notes stored in Git.MIT
- AlicenseNot gradedqualityDmaintenanceEnables LLMs like Claude to securely execute Kubernetes CLI tools (kubectl, helm, istioctl, argocd) across multiple clusters through dynamic kubeconfig support, allowing natural language Kubernetes management and operations.5MIT
- AlicenseNot gradedqualityAmaintenanceProvides AI assistants with real Helm chart data from repositories, enabling accurate queries of chart values, versions, dependencies, and search without hallucination.MIT
- FlicenseNot gradedqualityBmaintenanceExposes Kubernetes cluster management tools to LLMs, enabling querying pods, deployments, logs, metrics, and managing port forwards via natural language.1-