"kubernetes" matching MCP servers:

Read-only attack-path tools for cloud and Kubernetes: list the reachable routes from internet exposure to sensitive assets, explain each hop and the evidence behind it, and simulate a fix before recommending it. Connects to a running PerspectiveGraph engine.

Gives AI assistants read-only access to a Kubernetes cluster's observability stack — Loki, Prometheus, Tempo, the Kubernetes API — plus AWS telemetry from CloudTrail, Config, ECR, and RDS. 23 tools for querying logs, metrics, traces, Kubernetes events, deployments, and audit history in plain language.

Enables AI coding agents to run Kubernetes inspection and Terraform plan/apply operations inside ephemeral gVisor-sandboxed jobs with short-lived, narrowly-scoped credentials, while routing destructive changes through a human approval gate.

PolicyPulse connects your AI assistant directly to your Kubernetes policy engines. Instead of switching between three dashboards and two CLIs, you ask in plain English and get answers enriched with CIS Kubernetes, PCI-DSS, NIST 800-53, and SOC 2 framework references.

Read-only MCP server for cloudpin, which pins cloud accounts (Azure, AWS, gcloud, Vercel, GitHub, Kubernetes, Supabase, Cloudflare) to a repository. Its tools tell an agent which account each CLI is using and whether a command would run on the pinned one, before it acts.

CP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the Rad Security API and retrieving security findings, reports, runtime data and many more.

Audits infrastructure configurations (Dockerfiles, GitHub Actions, Kubernetes, Terraform/Compose) against 14 deterministic security rules, returning BLOCK/REVIEW/PASS verdicts and signing attestations. Helps agents verify deployment configs before applying them.

Enables AI assistants like Cursor, Claude, and Codex to interact with Krutrim Cloud, providing discovery and controlled operations for VPCs, compute, storage, networking, Kubernetes, KPods, and IAM, with safety controls such as confirmation and read-only mode.

Enables AI agents to inspect and operate multiple Kubernetes clusters through natural language, providing multi-cluster diagnostics, RBAC analysis, security checks, and app-centric deployment with GitOps and smart workload placement.

A local MCP server for Kubernetes that applies RBAC-style, context-scoped access control to constrain AI agents, with tools for common Kubernetes operations.

Enables an AI assistant to diagnose a broken application on a local Kubernetes cluster by inspecting pods, events, and logs, with server-side guardrails, least-privilege RBAC, and an audit log. It can also restart deployments in allowed namespaces only after a dry-run preview and host approval.

Lets a coding agent lint a Dockerfile or Kubernetes manifest through the Shipshape API, returning an A–F grade, score, pass/fail status, and every finding with its line, fix, and reference. Catches issues like root in the final stage, unpinned base images, curl | sh, secrets in ENV/ARG, and Pod Security Standards, resources, and probes violations before handing work over.

Enables AI agents to perform safe, auditable Kubernetes write actions such as scaling, restarting and rolling back Deployments through a plan → policy-check → approve → apply → audit flow, with server-side guards, single-use plans and scoped RBAC. Read-only planning and Prometheus SLO/alert tools support the same guarded workflow.

Enables agents to audit Kubernetes manifests without a cluster: scanning YAML text or whole directories with file:line evidence, browsing the rule catalogue with why/fix rationale, resolving RoleBindings into each subject's effective permissions, and running a self-check that the rules fire.

Enables agents to run read-only Linux and Kubernetes compliance checks, bundle SOC 2 and ISO 27001 evidence, preview Sprinto monitor uploads, and confirm submission through Sprinto's Upload Evidence API.

Enables deploying production-ready MCP servers with built-in authentication, rate limiting, data desensitization, audit logging, and session isolation, ready for Kubernetes.

Enables management and troubleshooting of cert-manager certificates and resources in Kubernetes, including listing, inspecting, and renewing certificates, managing issuers, and switching Kubernetes contexts.

MCP server for HaltProof's emergency-shutdown orchestration and cryptographic audit-proof layer, enabling AI agents to dry-run or execute cluster halt operations across Slurm, Kubernetes, and IPMI, and verify signed, hash-chained attestation logs.

MCP server for the Red Hat Advanced Cluster Security for Kubernetes API, providing LLM access to all 69 API services and 361 endpoints through six meta-tools for discovery, inspection, and direct API calls.

Enables read-only inspection of Kubernetes resources and Terraform plans, retrieval of policy findings, and schema and policy validation of manifests and patches without applying changes.