MCP Server Kubernetes
MCP server that lets Claude, Cursor, VS Code and other agents drive kubectl and Helm against real clusters
Platform, SRE and DevOps engineers who already live in kubectl and want an MCP-driven Claude, Cursor or VS Code copilot to triage pods, drive rollouts and run Helm operations against clusters they already have kubeconfig access to.
Teams that need a hardened, multi-tenant control plane with approvals, audit and RBAC scoping enforced by the tool itself, or non-Kubernetes shops — this is a thin, trust-your-kubeconfig bridge, not a managed platform.
MCP Server Kubernetes (mcp-server-kubernetes) by Flux159 is a Model Context Protocol server that exposes a kubectl- and Helm-shaped toolset to any MCP-compatible client, so an AI assistant like Claude Desktop, Claude Code, Cursor, VS Code Copilot or Codex CLI can inspect and manage a real Kubernetes cluster through natural-language prompts. It reads the local kubeconfig, so whatever context and RBAC the operator already has, the model gets. Once wired up, the assistant can get / list / describe / create / apply / delete / patch arbitrary resources, tail and grep pod logs, exec commands inside containers, drive rollouts and scale deployments, cordon and drain nodes, port-forward services, and clean up pods stuck in bad phases. Helm v3 is a first-class citizen: install, upgrade, uninstall and template charts with custom values files. A built-in /k8s-diagnose prompt walks the model through a systematic pod-troubleshooting flow (events, describe, logs, previous logs, related resources), which is where the project really earns its keep for on-call and platform engineers. For safety the server ships a non-destructive mode that hides mutating tools, plus secrets masking so credential values do not leak back into the chat transcript, and optional OpenTelemetry tracing so every tool call the model makes is auditable. Installation is a single npx invocation, distributed as a TypeScript/Node package on npm, and the codebase is MIT-licensed on GitHub with an active release cadence and a large fork community. It suits SREs, platform teams and Kubernetes-heavy developers who want an LLM copilot for day-2 operations without building their own tooling layer, and who are comfortable trusting an agent with cluster credentials at the permission level the kubeconfig grants.
This is the reference implementation most people think of when they say 'give Claude kubectl'. The tool coverage is genuinely broad, the diagnose prompt is a nice touch, and non-destructive mode plus secrets masking show the author thought about the obvious footguns. Just remember it inherits your kubeconfig's power — point it at a cluster where an over-confident agent can safely be wrong.
— The AI Tool Bible editorial team
Pros
- ✅ Broad kubectl surface — CRUD on any resource, logs, exec, port-forward, rollouts, scale, cordon/drain and stuck-pod cleanup out of the box
- ✅ First-class Helm v3 support including install, upgrade, uninstall and template with custom values
- ✅ Built-in /k8s-diagnose prompt gives the model a structured troubleshooting recipe rather than free-styling kubectl
- ✅ Non-destructive read-only mode and automatic secrets masking reduce the blast radius of an agent going off-script
- ✅ Works with the mainstream MCP clients (Claude Desktop, Claude Code, Cursor, VS Code, Codex CLI) via a single npx command
- ✅ Optional OpenTelemetry tracing on every tool call, so agent actions are auditable in your existing observability stack
- ✅ MIT-licensed, TypeScript, actively released (v4.x line in 2026) with 1.5k+ stars and 270+ forks
Cons
- ⚠️ Runs with whatever RBAC your kubeconfig has — a compromised or over-eager agent can delete production resources unless you enable non-destructive mode
- ⚠️ No native multi-cluster policy layer or approval workflow; safety relies on kubeconfig scoping and the client's tool-approval UI
- ⚠️ Requires kubectl (and Helm for chart operations) preinstalled and on PATH — not a zero-dependency install
- ⚠️ Node.js / npx runtime is another moving part to manage on operator workstations or bastion hosts
- ⚠️ Advanced cluster features (custom operators, service meshes, cloud-provider APIs) are only reachable through generic apply/patch, not first-class tools
Use cases
Explore related
Compare with similar tools
All in MCP Servers →Airtable MCP Server
Model Context Protocol server that gives LLMs full read/write access to your Airtable bases.
Apple Notes MCP
Let Claude read your local Apple Notes over the Model Context Protocol.
AWS MCP Servers
Official AWS Labs collection of Model Context Protocol servers for connecting AI coding assistants and agents to AWS services and documentation.
Azure MCP Server
Official Microsoft MCP server that exposes 40+ Azure services to AI agents under the developer's own Entra ID credentials.
Blender MCP
Give Claude hands inside Blender — an MCP server for natural-language 3D modeling.
Brave Search MCP
Give any MCP client web and local search powered by the Brave Search API.