MCP Kubernetes Server
mcp-kubernetes-server · by feiskyer
A Model Context Protocol (MCP) server that enables AI assistants to interact with Kubernetes clusters. It serves as a bridge between AI tools (like Claude, Cursor, and GitHub Copilot) and Kubernetes, translating natural language requests into Kubernetes operations and returning the results in a format the AI tools can understand.
2 open CVEs
Apache-2.0 license
Stale
Last commit 204d ago
Works with most clients
Transport: stdio, sse, http
6 tools · ~817 tok
Grade B · 0.4% of 200K ctx
MCPpedia last refreshed this data
This server has been archived and is no longer actively maintained.
MCP Kubernetes Server is an MCP server that a Model Context Protocol (MCP) server that enables AI assistants to interact with Kubernetes clusters. It serves as a bridge between AI tools (like Claude, Cursor, and GitHub Copilot) and Kubernetes, translating natural language requests into Kubernetes operations and returning the results in a format the AI tools can understand. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 55/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"kubernetes": {
"args": [
"run",
"-i",
"--rm",
"--mount",
"type=bind,src=/home/username/.kube/config,dst=/home/mcp/.kube/config",
"ghcr.io/feiskyer/mcp-kubernetes-server"
],
"command": "docker"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/mcp-kubernetes-server)
Read me
What Mcp Kubernetes Server does
The mcp-kubernetes-server is a server implementing the Model Context Protocol (MCP) to enable AI assistants (such as Claude, Cursor, and GitHub Copilot) to interact with Kubernetes clusters. It acts as a bridge, translating natural language requests from these assistants into Kubernetes operations and returning the results.
Test This Server
This server supports HTTP transport. Be the first to test it — help the community know if it works.
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
55/100across 5 weighted dimensions
0255075100
14
16
15
10
−45
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev2 open
CVE-2025-59376mediumCVSS 5.3
mcp-kubernetes-server has a Command Injection vulnerability
`mcp-kubernetes-server` does not correctly enforce the `--disable-write` / `--disable-delete` protections when commands are chained. The server only inspects the first token to decide whether an operation is write/delete, which allows a read-like command to be followed by a write action using shell metacharacters (e.g., `kubectl version; kubectl delete pod <name>`). A remote attacker who can invoke the server may therefore bypass the intended write/delete restrictions and perform state-changing
Affected:
>= 0source →CVE-2025-59377criticalCVSS 9.8
mcp-kubernetes-server has an OS Command Injection vulnerability
`feiskyer/mcp-kubernetes-server` through **0.1.11** allows **OS command injection** via the `/mcp/kubectl` endpoint. The handler constructs a shell command with user-supplied arguments and executes it with `subprocess` using `shell=True`, enabling injection through shell metacharacters (e.g., `;`, `&&`, `$()`), even when the server is running in **read-only** mode. A remote, unauthenticated attacker can execute arbitrary OS commands on the host, resulting in full compromise of confidentiality,
Affected:
>= 0source →Inventory
Tools (6)
Click any tool to inspect its schema.
~817 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Mcp Kubernetes Server safe to use?
- Mcp Kubernetes Server has 4 known CVEs tracked by MCPpedia. You can verify these on OSV.dev by searching for "mcp-kubernetes-server". Review the Security section above for details before installing.
- How do I install Mcp Kubernetes Server?
- Mcp Kubernetes Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can Mcp Kubernetes Server do?
- Mcp Kubernetes Server provides 6 tools: kubectl, helm, k8s_get, k8s_describe, k8s_logs and 1 more. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with Mcp Kubernetes Server?
- Mcp Kubernetes Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is Mcp Kubernetes Server actively maintained?
- Mcp Kubernetes Server is less actively maintained — last commit was 204 days ago. It has 20 GitHub stars.
Related
Similar servers
Others in devops / cloud
G
Mcp Gitlab96MCP server for using the GitLab API
1.9k 12
Observability MCP94MCP Server for GCP environment for interacting with various Observability APIs.
892 1
K
Komodo MCP Server93MCP server for Komodo - manage Docker containers, servers, stacks, and deployments via AI
19 11
Tachyon93💫 Tachyon MCP Runtime for Java and Kotlin - Model Context Protocol (MCP) server with Streamable HTTP, native Netty transports, tools, tasks, resources, prompts, completions, resumable sessions, and stateless deployment support.
30 6
MCP Security Weekly
Get CVE alerts and security updates for Mcp Kubernetes Server and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.