containers
Kubernetes MCP servers and skills
There are 167 ways to connect Kubernetes to Claude, ChatGPT, Cursor and other AI assistants; these are the 100 with the highest scores. The most used is Radar Kubernetes MCP Server (3.9k GitHub stars).
Best Kubernetes MCP servers, compared →Most used
Kubernetes MCP server for diagnosis, resource management, GitOps, and RBAC-enforced operations.
A Model Context Protocol (MCP) server for Kubernetes and OpenShift
Model Context Protocol (MCP) server for Kubernetes and OpenShift
Model Context Protocol (MCP) server for Kubernetes and OpenShift
Model Context Protocol (MCP) server for Kubernetes and OpenShift
Model Context Protocol (MCP) server for Kubernetes and OpenShift
MCP servers (32)
- 1Radar Kubernetes MCP Server skyhook-io · Cloud and DevOpsKubernetes MCP server for diagnosis, resource management, GitOps, and RBAC-enforced operations.93
- 2kubernetes-mcp-server containers · Cloud and DevOpsA Model Context Protocol (MCP) server for Kubernetes and OpenShift91
- 3Kubernetes MCP Server Linux Amd64 containers · Cloud and DevOpsModel Context Protocol (MCP) server for Kubernetes and OpenShift91
- 4Kubernetes MCP Server Darwin Arm64 containers · Cloud and DevOpsModel Context Protocol (MCP) server for Kubernetes and OpenShift91
- 5Kubernetes MCP Server Windows Amd64 containers · Cloud and DevOpsModel Context Protocol (MCP) server for Kubernetes and OpenShift91
- 6Kubernetes MCP Server Linux Arm64 containers · Cloud and DevOpsModel Context Protocol (MCP) server for Kubernetes and OpenShift91
- 7Kubernetes MCP Server Darwin Amd64 containers · Cloud and DevOpsModel Context Protocol (MCP) server for Kubernetes and OpenShift91
- 8Kubernetes MCP Server Windows Arm64 containers · Cloud and DevOpsModel Context Protocol (MCP) server for Kubernetes and OpenShift91
- 9Rh Tam Kubernetes MCP Server manusa · Cloud and DevOpsModel Context Protocol (MCP) server for Kubernetes and OpenShift91
- 10MCP Server Kubernetes Flux159 · Cloud and DevOpsMCP server for interacting with Kubernetes clusters via kubectl89
- ADYour product hereThis row is seen by people browsing Kubernetes tools. Book it from $249 a month.See prices →
- 11MCP Server Kubernetes atengk · Cloud and DevOpsModel Context Protocol (MCP) Server for Kubernetes - Cross-platform npm package with native Go binary distribution80
- 12MCP Server Kubernetes Linux X64 atengk · Cloud and DevOpsNative binary of mcp-server-kubernetes for linux-x6477
- 13MCP Server Kubernetes Win32 X64 atengk · Cloud and DevOpsNative binary of mcp-server-kubernetes for win32-x6477
- 14MCP Server Kubernetes Darwin X64 atengk · Cloud and DevOpsNative binary of mcp-server-kubernetes for darwin-x6476
- 15MCP Server Kubernetes Linux Arm64 atengk · Cloud and DevOpsNative binary of mcp-server-kubernetes for linux-arm6476
- 16MCP Server Kubernetes Darwin Arm64 atengk · Cloud and DevOpsNative binary of mcp-server-kubernetes for darwin-arm6476
- 17MCP Kubernetes Ro patrickdappollonio · SecurityA read-only Kubernetes MCP server: list resources, get resource details, retrieve pod logs, discover API resources, and perform base64 encoding/decoding operations - all while maintaining security through read-only access.73
- 18Dsh MCP Kubernetes tudamu · Cloud and DevOpsMCP Kubernetes server toolkit for dsh - clusters via Model Context Protocol. Name reserved; first release in development.73
- 19MimiOps mcp server for Kubernetes sergelogvinov · Cloud and DevOpsMimiOps is an opinionated MCP server for Kubernetes64
- 20K8s MCP xuyun-io · Cloud and DevOpsA Model Context Protocol (MCP) server for Kubernetes with 270+ tools, 8 resources, and 8 prompts for AI assistants51
- 21mcp-kubernetes dockndevai · Cloud and DevOpsKubernetes monitoring & ops for AI agents — safe-by-default access modes and guards.45
- 22Kubernetes MCP mmtr-tech · Cloud and DevOpsModel Context Protocol server for Kubernetes (read-only: pods, logs, configs)45
- 23mcp-k8s-ro your-ko · Cloud and DevOpsRead-only Kubernetes MCP server: inspect resources, logs, events, and metrics. Secrets are masked.39
- 24K8s MCP Server (Go) kaneg · Cloud and DevOpsSafe Kubernetes access for AI agents via MCP. Read-only by default, with explicit permission modes.38
- 25Kubernetes MCP Server Linux Arm64 tomleb666 · Cloud and DevOpsModel Context Protocol (MCP) server for Kubernetes and OpenShift36
- 26k8s-removed-api-lint jmshinhwa · Cloud and DevOps15 checks for the apiVersions kubectl no longer serves, on the manifest open in your editor35
- 27Rh Tam Kubernetes MCP Server Linux Amd64 seasonny · Cloud and DevOpsModel Context Protocol (MCP) server for Kubernetes and OpenShift34
- 28Rh Tam Kubernetes MCP Server Darwin Amd64 seasonny · Cloud and DevOpsModel Context Protocol (MCP) server for Kubernetes and OpenShift31
- 29k8s AIops AIops-tools · Cloud and DevOpsGoverned Kubernetes ops — 55 MCP tools with audit, budget, undo, risk-tier audit labels.30
- 30K8gentS — Kubernetes RCA MCP Server JDoornink · Cloud and DevOpsKubernetes RCA agent that sandboxes its own AI with OPA Gatekeeper. MCP-ready for any client.29
- 31Kubernetes Troubleshoot NanaGyamfiPrempeh30 · Cloud and DevOpsRead-only Kubernetes diagnostics: pods, logs, events, workloads, services, PVCs and nodes.27
- 32Kubernetes kind token, manifest discarded sadri-dridi · Cloud and DevOpsKubernetes kind token, manifest discarded25
Skills (68)
- 1dev-rules kubernetes-sigs · Cloud and DevOpsEnforces project-specific development rules and conventions.83
- 2kueue-pr-issue-workflow kubernetes-sigs · Cloud and DevOpsOpen or update Kueue pull requests and issues following the required templates, labels, titles, and AI disclosure rules.79
- 3illogical-structure kubernetes-sigs · Cloud and DevOpsFlag code organization that a future maintainer will struggle to follow, modify, or extend.77
- 4nil-safety kubernetes-sigs · Cloud and DevOpsFlag unguarded dereferences of optional pointer fields reachable from a malformed CR, and goroutines without recover (CWE-476).77
- 5visibility-exports kubernetes-sigs · Cloud and DevOpsReview that newly exported functions have callers outside the package, lowercasing those that don't.77
- 6information-disclosure kubernetes-sigs · Cloud and DevOpsFlag information-disclosure patterns — full-object logging, request echoing, credentials in status/annotations, kubeconfig logging, secret-bearing status (CWE-200, CWE-522, CWE-532, CWE-552).77
- 7cis-k8s-v200-5.5.1 CyberStrikeus · Cloud and DevOpsConfigure Image Provenance using ImagePolicyWebhook admission controller (Manual)72
- 8cis-k8s-v1110-5.1.6 CyberStrikeus · Cloud and DevOpsEnsure that Service Account Tokens are only mounted where necessary (Manual)72
- 9cis-k8s-v200-5.2.12 CyberStrikeus · Cloud and DevOpsMinimize the admission of containers which use HostPorts (Manual)72
- 10cis-k8s-v200-5.4.1 CyberStrikeus · Cloud and DevOpsPrefer using secrets as files over secrets as environment variables (Manual)72
- 11cis-k8s-v1110-5.7.2 CyberStrikeus · Cloud and DevOpsEnsure that the seccomp profile is set to docker/default in your pod definitions (Manual)72
- 12cis-k8s-v1110-5.2.3 CyberStrikeus · Cloud and DevOpsMinimize the admission of containers wishing to share the host process ID namespace (Manual)72
- 13cis-k8s-v200-5.6.2 CyberStrikeus · Cloud and DevOpsEnsure that the seccomp profile is set to docker/default in your pod definitions (Manual)72
- 14cis-k8s-v1110-5.2.5 CyberStrikeus · Cloud and DevOpsMinimize the admission of containers wishing to share the host network namespace (Manual)72
- 15cis-k8s-v200-5.2.5 CyberStrikeus · Cloud and DevOpsMinimize the admission of containers wishing to share the host network namespace (Manual)72
- 16cis-k8s-v1111-5.1.11 CyberStrikeus · Cloud and DevOpsMinimize access to the approval sub-resource of certificatesigningrequests objects (Manual)72
- 17bump-ubuntu-image kubernetes-sigs · Cloud and DevOpsBump the Ubuntu version of the VM images used by the e2e and conformance jobs. Use when moving to a new Ubuntu LTS (e.g. from 2204 to 2404) or when image-builder drops the current target. Handles the CAPG_UBUNTU_VERSION pin in gcp-ci.yaml and the docs that name the image.71
- 18cis-k8s-v1110-5.1.11 CyberStrikeus · Cloud and DevOpsMinimize access to the approval sub-resource of certificatesigningrequests objects (Manual)70
- 19cis-k8s-v1110-5.7.3 CyberStrikeus · SecurityApply Security Context to Your Pods and Containers (Manual)69
- 20cis-k8s-v1111-5.6.4 CyberStrikeus · Cloud and DevOpsThe default namespace should not be used (Manual)69
- 21cis-k8s-v1111-5.1.9 CyberStrikeus · Cloud and DevOpsMinimize access to create persistent volumes (Manual)69
- 22cis-k8s-v1120-3.2.1 CyberStrikeus · Cloud and DevOpsEnsure that a minimal audit policy is created (Manual)69
- 23review-security-k8s-agents-main gke-labs · SecurityOrchestrates comprehensive Kubernetes security audits specifically tailored for AI agent workloads.62
- 24review-security-k8s-agents-prompt-injection gke-labs · SecurityReviews AI agent architectures (API gateways, WAFs, input sanitization) for prompt injection risks.60
- 25review-security-k8s-gateway gke-labs · SecurityReviews Kubernetes Gateway API configs (Gateway, HTTPRoute, etc.) for security risks.60
- 26review-security-k8s-agents-data-exfil gke-labs · SecurityReviews Kubernetes configurations to prevent data exfiltration by AI agents.60
- 27review-security-k8s-agents-sandbox gke-labs · SecurityReviews AI agent execution sandboxes for code escape and lateral movement risks.60
- 28review-security-k8s-agents-credentials gke-labs · SecurityReviews AI agent Kubernetes configurations for credentials exposed to agents.60
- 29review-security-k8s-agents-firewall gke-labs · SecurityReviews Kubernetes network and firewall configurations specifically for AI agent execution sandboxes.60
- 30review-security-k8s-network gke-labs · SecurityReviews Kubernetes network configurations (NetworkPolicies, Services, Ingress) for isolation and exposure risks.60
- 31review-security-k8s-main gke-labs · SecurityOrchestrates comprehensive Kubernetes security reviews.59
- 32k8s_skill openocta · Cloud and DevOps当用户问题涉及 Kubernetes 集群运维、Workload 排障、资源与事件分析时加载本技能。54
- 33k8s-openapi jinnovation · Cloud and DevOpsReference the Kubernetes API. Useful for understanding what is possible via the Kubernetes REST API.50
- 34pwn-plugins-k8s 0dayInc · Cloud and DevOpsDrive PWN::Plugins::K8s from pwn_eval.47
- 35bug openstack-k8s-operators · Cloud and DevOpsPlan bug fixes for openstack-k8s-operators operators — alias for /feature with bug-focused context45
- 36Find deprecated Kubernetes APIs in manifests and live resources before upgrades with Pluto agentskillexchange · Cloud and DevOpsScan Helm charts, YAML, or live clusters for Kubernetes API versions scheduled for removal before an upgrade window.42
- 37Polaris Kubernetes Best Practices Validator agentskillexchange · Cloud and DevOpsValidate Kubernetes resource configurations against best practice policies using Fairwinds Polaris. Runs as a CLI for CI/CD, a dashboard for cluster-wide audits, or a validating webhook for admission control.42
- 38vault-k8s-auth mitodl · Cloud and DevOpsWire Vault Kubernetes authentication for a service using hvac. Use this skill when adding or modifying Vault auth in any Kubernetes-deployed service — always read the Vault role and mount path from environment variables, never hardcode them.42
- 39Run Kubernetes cluster operations through MCP agentskillexchange · Cloud and DevOpsUse mcp-server-kubernetes so an MCP-capable agent can inspect, troubleshoot, and manage Kubernetes resources through a configured kubeconfig.40
- 40Kubernetes CrashLoop Diagnostician agentskillexchange · Cloud and DevOpsDiagnoses CrashLoopBackOff pods using the Kubernetes client-go API and kubectl debug. Analyzes container exit codes, OOMKill events, and liveness probe failures with automated remediation suggestions.40
- 41Kubernetes Diagnostics Agent agentskillexchange · Cloud and DevOpsPerforms deep cluster troubleshooting using the Kubernetes API server /debug/pprof endpoints and kubectl-debug ephemeral containers. Analyzes resource pressure via the Metrics Server API and kube-state-metrics.40
- 42Kubernetes Rollback Runbook agentskillexchange · Cloud and DevOpsExecutes structured Kubernetes rollback procedures using kubectl and the kubernetes/client-go library. Monitors rollout status via the apps/v1 Deployment API and triggers PagerDuty incidents through the PagerDuty Events API v2.40
- 43Kubernetes Pod Diagnostic Agent agentskillexchange · Cloud and DevOpsDiagnoses Kubernetes pod failures using kubectl and the Kubernetes API server endpoints. Analyzes CrashLoopBackOff, OOMKilled, and ImagePullBackOff states by querying /api/v1/namespaces/{ns}/pods/{pod}/log and /api/v1/events resources.40
- 44validate-and-deploy-kubernetes ByronScottJones · Cloud and DevOpsUse when validating, diffing, applying, rolling back, or health-checking Kubernetes manifests. Defaults to read-only validation and dry-run behavior; cluster mutations require explicit confirmation.39
- 45kubernetes mnarrell · SecurityUse for Kubernetes manifests, controllers, Helm, Helmfile, Kustomize, networking, security, and debugging.37
- 46not-k8s-upgrade centerionware · Cloud and DevOpsPlan or implement a not-k8s Kubernetes version upgrade using an upstream-backed compatibility ledger, cross-component tests, and conformance evidence.35
- 47not-k8s-ci centerionware · Cloud and DevOpsSelect, monitor, and report not-k8s CI checks using exact commit and run IDs, with cost-aware workflow selection and constrained-host artifact handling.35
- 48kubernetes plurigrid · Cloud and DevOpsSet up and manage local Kubernetes clusters using KIND (Kubernetes IN Docker). Use when testing Kubernetes applications locally or developing cloud-native workloads.35
- 49k8s-operator fisker086 · Cloud and DevOpsKubernetes read-only operations for cluster inspection and monitoring33
- 50fh-kubernetes nickolashkraus · Cloud and DevOpsFunction Health GKE kubeconfig generation. Use when you need to generate or refresh `~/.kube/function.yaml` for the `dev`, `prod`, or `sandbox` clusters via `generate-fh-kubeconfig`. TRIGGER when: user needs kubectl access to an FH cluster, refresh of FH kubeconfig, or hits an auth/expiry error against the FH GKE control plane.32
- 51k8s-cni-network gesh75 · Cloud and DevOpsDesign and triage Kubernetes networking with Cilium or Calico, NetworkPolicy, and egress control. Use when pods cannot reach a service, a NetworkPolicy is too open, or a node drops overlay traffic.32
- 52kubernetes-helper inbharatai · Cloud and DevOpsAuthor Kubernetes manifests — Deployments, Services, Ingress, ConfigMaps, Secrets, HPA, and Helm charts.32
- 53k8s-audit-kubeconfig kubestellar · Cloud and DevOpsAudit kubeconfig clusters and recommend cleanup30
- 54k8s-rbac kubestellar · Cloud and DevOpsAnalyze RBAC permissions for a subject30
- 55k8s-manifest-generator trinhquocviet · SecurityCreate production-ready Kubernetes manifests for Deployments, Services, ConfigMaps, and Secrets following best practices and security standards. Use when generating Kubernetes YAML manifests, creating K8s resources, or implementing production-grade Kubernetes configurations.30
- 56deploy-k8s chengxuniucode · Cloud and DevOpsKubernetes 部署配置生成30
- 57k8s-rollout-check LarrySequino · Cloud and DevOpsVerify a Kubernetes rollout actually finished: replica readiness, restart loops, probe failures, pending pods, and the cluster events emitted while the deploy was running. Use right after shipping to a cluster, or when a deploy reports success and the service is still misbehaving. NOT for authoring the manifests (use helm-chart-author instead).29
- 58kubernetes-ops FutureJJ · Cloud and DevOpsKubernetes operations including deployments, services, HPA, RBAC, debugging, Helm charts, and cluster management. Trigger when users deploy to Kubernetes, debug pod issues, configure scaling, set up RBAC, or write Helm charts.28
- 59k8s-logs agenticdevops · Cloud and DevOpsKubernetes log retrieval and analysis27
- 60kubernetes-secret-architecture cvsz · Cloud and DevOpskubernetes-secret-architecture skill27
- 61fix-uds-core-k8s-workload cyberphor · Cloud and DevOpsTroubleshoots Kubernetes workloads that integrate with UDS Core. Use when asked assess or troubleshoot Kubernetes workloads that integrate with UDS Core.27
- 62kubernetes-specialist agisota · Cloud and DevOpsUse when a task needs Kubernetes manifest review, rollout safety analysis, or cluster workload debugging.27
- 63gcp-kubernetes-deployment ai-automation-tools · Cloud and DevOpsDeploy containerized applications to Google Kubernetes Engine with CI/CD, monitoring, and auto-scaling.27
- 64k8s-ops Clovel · Cloud and DevOpsKubernetes troubleshooting, deployment, and operations. Use when debugging pods, checking cluster health, or working with manifests.26
- 65infra-k8s fiq · Cloud and DevOpsProduce the smallest useful Kubernetes skeleton with kubeconform validation wired into project infra-check.26
- 66cis-k8s-v1110-5.1.3 node011 · Cloud and DevOpsMinimize wildcard use in Roles and ClusterRoles (Manual)26
- 67kubernetes mazsola2k · Cloud and DevOpsInstall, uninstall, or check status of the upstream Kubernetes control plane on a RHEL/Fedora host via k8s-redhat-kubernetes-controller.yaml. Foundation layer that KubeVirt, the GPU stack, Vault, OTel and all VMs depend on. Use to set up, tear down, or inspect the base cluster.25
- 68cloud-kubernetes-scheduling-advanced Sandeeprdy1729 · Cloud and DevOpsMaster cloud kubernetes scheduling advanced with comprehensive coverage of concepts, implementation, optimization, and production best practices. Essential skill for professionals working in cloud.25
Questions
Is there an official Kubernetes MCP server?
Check the publisher on each listing: servers published by Kubernetes itself are the official ones. The most used Kubernetes server here is Radar Kubernetes MCP Server by skyhook-io.
How do I connect Kubernetes to Claude?
Pick a server below, open its page and copy the install command for Claude Code, or the config block for Claude Desktop. Most Kubernetes servers need an API key or token from your Kubernetes account.