kubeguard-mcp
Related Servers
Alternatives to kubeguard-mcp
No user-submitted related servers found.
Related Servers
- AlicenseAqualityCmaintenanceEnables agents and users to validate Kubernetes manifests (YAML/JSON, multi-document) against the API of a chosen Kubernetes version without needing a cluster. It reports removed or deprecated APIs with replacements, unknown or misspelt fields, misconfigurations the API server would reject, Pod Security Standard violations, and common risks, each with file, line, and fix.31MIT
- AlicenseNot gradedqualityCmaintenanceEnables MCP clients to audit, generate, debug, and learn Kubernetes, OpenShift, ROSA, Helm, and RHACS/StackRox configurations through read-only-first tools, playbooks, cited local knowledge, and hardened manifest generation that runs offline unless network access is explicitly enabled.Apache 2.0
- AlicenseAqualityBmaintenanceEnables analyzing Salesforce deployment logs, validating metadata manifests, assessing permission risks, and generating remediation plans through deterministic, local-only rules.4MIT
- AlicenseNot gradedqualityBmaintenanceEnables read-only inspection of Kubernetes resources and Terraform plans, retrieval of policy findings, and schema and policy validation of manifests and patches without applying changes.MIT
- AlicenseNot gradedqualityCmaintenanceEnables safe, local DevOps inspection through a JSON-lines server with schema validation, path isolation, and redaction, supporting read-only Git operations, Kubernetes YAML validation, Terraform plan summaries, and sanitized log analysis.MIT
- AlicenseAqualityCmaintenanceEnables AI agents to audit Kubernetes manifests for configuration traps that pass linters but silently break production, via read-only tools to audit YAML, list known traps, and explain trap details.3MIT
TDQS
Scored across 5 tools
kubeguard_scan (inline manifest text) and kubeguard_scan_path (directory of YAML files) share the auditing purpose but have clearly different inputs, and the descriptions make that distinction explicit. kubeguard_demo also produces an audit but is framed as sample generation, so it is unlikely to be misselected. Only the scan/scan_path pair presents mild ambiguity.
All tools use a uniform kubeguard_ snake_case prefix, which makes the family immediately recognizable. The suffix style mixes verbs (scan, scan_path, demo) with nouns (rules, rbac), a minor deviation from a pure verb_noun pattern but still readable and predictable.
Five tools is well-scoped for a focused Kubernetes manifest auditor, and each tool covers a distinct capability: text scan, directory scan, rule catalog, RBAC analysis, and demo. There is no redundant or filler tool.
The set covers the core audit lifecycle: discovering rules, scanning inputs in two forms, analyzing RBAC, and a demo entry point for onboarding. Gaps are minor for a read-only auditor, but there is no way to apply or export fixes, suppress/config rules, or scan a live cluster, so agents must handle remediation outside the server.