AI Atlas

Developer Tools · Security

MCP Kubernetes Ro

patrickdappollonio/mcp-kubernetes-ro

mcp-kubernetes-ro is a Model Context Protocol (MCP) server providing read-only access to Kubernetes clusters for AI assistants. It enables AI models to list resources, get resource details, retrieve pod logs, discover API resources, and perform base64 encoding/decoding operations - all while maintaining security through read-only access.

View on GitHub

Install

npx -y @patrickdappollonio/mcp-kubernetes-ro

Client configuration

{
  "mcpServers": {
    "kubernetes-ro": {
      "command": "npx",
      "args": [
        "-y",
        "@patrickdappollonio/mcp-kubernetes-ro"
      ]
    }
  }
}

Environment variables

MCP_KUBERNETES_RO_DISABLED_TOOLSMCP_KUBERNETES_RO_DISABLED_RESOURCESKUBECONFIGMCP_KUBERNETES_RO_ENABLE_PORT_FORWARDING
Author
@patrickdappollonio
Category
Developer Tools, Security
Updated
Oct 6, 2026

About MCP Kubernetes Ro

The server leverages your local kubectl configuration (even when kubectl is not required to be installed) and provides a safe, read-only interface to your Kubernetes clusters, preventing any destructive operations while allowing comprehensive cluster inspection and troubleshooting capabilities.

Features

  • Does not require kubectl: The MCP server uses your local kubectl configuration to connect to your Kubernetes cluster but not the binary, so it works even when kubectl is not installed on your machine.

  • Resource Listing: List any Kubernetes resources by type with optional filtering by labels, fields, and namespaces

  • Resource Details: Get complete details for specific Kubernetes resources

  • Pod Logs: Retrieve pod logs with advanced filtering options including grep patterns, time filtering, and previous logs

  • Container Discovery: List containers within pods for targeted log access

  • API Discovery: Discover available Kubernetes API resources and their capabilities

  • Base64 Utilities: Encode and decode base64 data for Kubernetes secrets and configurations

  • Multiple Transport Modes: Support for stdio, Server-Sent Events (SSE), and stateless Streamable HTTP communication

  • Read-Only Security: Complete prevention of destructive operations while maintaining full inspection capabilities

  • Resource Access Control: Disable access to specific Kubernetes resource types (e.g., Secrets) to prevent AI agents from querying sensitive data

Tools (17)

  • get_resource

    Get specific resource details. metadata.managedFields is omitted by default unless include_managed_fields=true.

  • get_logs

    Get pod logs with advanced filtering options including grep patterns, time filtering, and previous logs

  • get_node_metrics

    Get node metrics (CPU and memory usage)

  • get_pod_metrics

    Get pod metrics (CPU and memory usage)

  • encode_base64

    Encode text data to base64 format

  • decode_base64

    Decode base64 data to text format

  • save_secret_to_file

    (stdio only): Write one Secret value to an owner-only file, in a private temp folder by default, without returning it

  • get_secret_encrypted

    (SSE, Streamable HTTP, or --encrypted-secret-access): Return one Secret value encrypted to a public key you provide, plus the command that decrypts it on your…

  • start_port_forward

    (opt-in): Start port forwarding to a pod with one or more port mappings

  • stop_port_forward

    (opt-in): Stop an active port-forwarding session by ID

  • list_port_forwards

    (opt-in): List all active port-forwarding sessions

  • list_resources

  • get_pod_containers

  • list_api_resources

  • list_contexts

  • MCP_KUBERNETES_RO_DISABLED_TOOLS

    Environment variable for disabled tools (merged with flag values, fallback: DISABLED_TOOLS)

  • MCP_KUBERNETES_RO_DISABLED_RESOURCES

    Environment variable for disabled resources (merged with flag values)

Details on this page are taken from the project's README. Open README

Related MCP servers

More servers
Playwright logo

Playwright

microsoft/playwright

72.2k

Playwright is a framework for web automation and testing. It drives Chromium, Firefox, and WebKit with a single API — in your tests, in your scripts, and as a tool for AI agents.

Developer Tools
repomix logo

repomix

yamadashy/repomix

15.2k

Repomix is a tool that packs a codebase into an AI-friendly format, supporting local and remote repository processing and providing code compression, security checks and multiple output formats.

Developer Tools
UI-TARS-desktop logo

UI-TARS-desktop

bytedance/UI-TARS-desktop

12.9k

TARS is ByteDance's multimodal AI agent stack, shipping two projects: Agent TARS (a CLI and Web UI agent built on MCP) and UI-TARS-desktop (a desktop GUI agent).

Developer Tools
blender logo

blender

ahujasid/blender-mcp

10.6k

formerly blender-mcp — the PyPI package is now mcp-for-blender. Existing setups keep working; no config change is required. Read more.

Developer Tools
Playwright Browser Automation logo

Playwright Browser Automation

microsoft/playwright-mcp

9.2k

A Model Context Protocol (MCP) server that provides browser automation capabilities using Playwright. This server enables LLMs to interact with web pages through structured accessibility snapshots, bypassing the need for screenshots or visually-tuned models.

Developer Tools
2344 logo

2344

comet-ml/opik

7k

Opik is the open-source LLM observability and evaluation platform for AI agent tracing, LLM evaluation, prompt management, and production monitoring. Built by Comet. Apache-2.0 licensed, free to self-host the full platform, with 20,000+ GitHub stars.

Developer Tools