Evaluation record · mcp-server-kubernetes

MCP Kubernetes Server

v1.0.0

Community

MCPkubernetesorchestrationmcpmodel-context-protocol

Strong

About This MCP

Community-maintained MCP servers for Kubernetes cluster management; there is still no single official upstream Kubernetes MCP server. Two implementations lead: containers/kubernetes-mcp-server (Go-native, talks directly to the Kubernetes API, supports OpenShift, Red Hat-backed, in the Red Hat Ecosystem Catalog) and Flux159/mcp-server-kubernetes (TypeScript, wraps kubectl/helm). Enables pod management, deployment orchestration, service configuration, and cluster resource monitoring.

Last Evaluated: July 9, 2026

Official Website

Trust Vector Analysis

Dimension Breakdown

🚀Performance & Reliability

k8s api reliability

API stability analysis

Evidence

Kubernetes API — Built on stable Kubernetes API with mature implementation

highVerified: 2026-07-09

resource operation success

Operation success testing

Evidence

Kubernetes MCP Server — High success rate for pod, deployment, and service operations

highVerified: 2026-07-09

cluster state accuracy

State synchronization testing

Evidence

Kubernetes Watch API — Accurate real-time cluster state tracking

highVerified: 2026-07-09

multi cluster performance

Multi-cluster performance testing

Evidence

Implementation Review — Performance varies with cluster size and network latency

mediumVerified: 2026-07-09

error recovery

Error handling testing

Evidence

Implementation Review — Handles Kubernetes API errors with retry and reconciliation

mediumVerified: 2026-07-09

🛡️Security

rbac enforcement

Authorization testing

Evidence

Kubernetes RBAC — Respects Kubernetes RBAC but requires careful role configuration

highVerified: 2026-07-09

kubeconfig exposure risk

Credential security analysis

Evidence

MCP Security Model — Kubeconfig credentials stored locally; AI has cluster access

highVerified: 2026-07-09

destructive operation risk

Operation risk assessment

Evidence

Security Analysis — AI can delete pods, deployments, and modify cluster resources

highVerified: 2026-07-09

namespace isolation

Isolation boundary testing

Evidence

Kubernetes Namespaces — Namespace isolation depends on RBAC configuration

mediumVerified: 2026-07-09

secret access risk

Secrets management assessment

Evidence

Kubernetes Secrets — Can access Kubernetes secrets if RBAC permits

highVerified: 2026-07-09

audit logging

Audit logging review

Evidence

Kubernetes Audit Logs — All API operations logged in Kubernetes audit system

highVerified: 2026-07-09

🔒Privacy & Compliance

cluster metadata exposure

Data flow analysis

Evidence

MCP Data Flow — Cluster configurations, pod specs, and resource metadata sent to LLM

highVerified: 2026-07-09

pod log privacy

Log privacy assessment

Evidence

Privacy Analysis — Pod logs may contain sensitive application data

highVerified: 2026-07-09

secret exposure risk

Secret privacy assessment

Evidence

Security Analysis — Kubernetes secrets accessible if RBAC permits

mediumVerified: 2026-07-09

third party data sharing

Data sharing analysis

Evidence

LLM Provider Policies — Cluster data shared with LLM provider per their privacy policy

highVerified: 2026-07-09

configmap data privacy

Configuration privacy assessment

Evidence

Kubernetes ConfigMaps — ConfigMaps may contain sensitive configuration data

mediumVerified: 2026-07-09

👁️Trust & Transparency

documentation quality

Documentation completeness review

Evidence

Kubernetes MCP Docs — Good documentation but community-maintained with evolving coverage

mediumVerified: 2026-07-09

operation visibility

Logging and traceability assessment

Evidence

Kubernetes Audit Logs — All operations logged in Kubernetes audit trail and MCP logs

highVerified: 2026-07-09

open source transparency

Source code review

Evidence

GitHub Repository — Open source community implementation

containers/kubernetes-mcp-server — Leading Go-native open-source implementation (Kubernetes and OpenShift) interacting directly with the Kubernetes API; Red Hat ships hardened container builds via its Ecosystem Catalog. Flux159/mcp-server-kubernetes (TypeScript, kubectl/helm wrapper) remains an active alternative

highVerified: 2026-07-09

security best practices

Security documentation review

Evidence

Security Documentation — Limited security guidance for production deployments

mediumVerified: 2026-07-09

⚙️Operational Excellence

ease of setup

Setup complexity assessment

Evidence

Setup Documentation — Requires kubeconfig setup and appropriate RBAC configuration

mediumVerified: 2026-07-09

api performance

Performance benchmarking

Evidence

Kubernetes API Performance — Performance depends on cluster size and network (typically 100-500ms)

mediumVerified: 2026-07-09

reliability

Reliability analysis

Evidence

Kubernetes Stability — Built on mature Kubernetes API with high reliability

highVerified: 2026-07-09

resource coverage

Feature coverage assessment

Evidence

Kubernetes MCP Server — Covers pods, deployments, services, configmaps, and secrets

highVerified: 2026-07-09

community support

Community support assessment

Evidence

GitHub Community — Community-maintained with moderate activity and support

Red Hat Developer - Kubernetes MCP server — Red Hat backing of containers/kubernetes-mcp-server (including Red Hat Ecosystem Catalog distribution) has strengthened maintenance and enterprise support for the ecosystem

mediumVerified: 2026-07-09

Strengths

+Comprehensive Kubernetes resource management and orchestration
+Built on stable and mature Kubernetes API
+Excellent for cloud-native application deployment automation
+Full operation auditability through Kubernetes audit logs
+Open source community implementations (Go-native containers/kubernetes-mcp-server with Red Hat backing; TypeScript Flux159/mcp-server-kubernetes)
+OpenShift support and Red Hat Ecosystem Catalog distribution for the containers implementation
+Supports RBAC for granular access control

Limitations

!Cluster configurations and pod specs exposed to LLM provider
!AI can delete resources and modify critical cluster configurations
!Pod logs and Kubernetes secrets accessible if RBAC permits
!Requires careful RBAC configuration to limit access
!Community-maintained with variable support quality
!ConfigMaps and secrets may contain sensitive data
!No official upstream (CNCF/Kubernetes project) MCP server; teams must choose among community implementations

Metadata

license: Apache-2.0 (containers/kubernetes-mcp-server); MIT (Flux159/mcp-server-kubernetes)

supported platforms

0: Linux

1: macOS

2: Windows

programming languages

0: Go (containers/kubernetes-mcp-server)

1: TypeScript (Flux159/mcp-server-kubernetes)

mcp version: 1.0

github repo: https://github.com/containers/kubernetes-mcp-server

alternative repo: https://github.com/Flux159/mcp-server-kubernetes

api dependency: Kubernetes API

authentication: kubeconfig, Service Account tokens

first release: 2024-11

maintained by: Community (containers org with Red Hat backing; Flux159)

Use Case Ratings

code generation

Excellent for Kubernetes manifest generation and GitOps automation

customer support

Good for troubleshooting Kubernetes deployments and cluster issues

content creation

Limited applicability; mainly for infrastructure documentation

data analysis

Good for analyzing cluster metrics, resource utilization, and scaling patterns

research assistant

Useful for researching Kubernetes patterns and cluster configurations

legal compliance

High risk due to cluster access; requires strict RBAC controls

healthcare

Risk of exposing healthcare infrastructure; not recommended without strong controls

financial analysis

Moderate risk for financial infrastructure management

education

Excellent for teaching Kubernetes, container orchestration, and cloud-native architecture

creative writing

Low relevance to creative writing workflows