--- title: "Kubernetes MCP Server: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/mcp-servers/kubernetes/ description: "Exposes Kubernetes and OpenShift resource inspection and management using kubeconfig or in-cluster credentials." --- # Kubernetes MCP Server: review, setup & limitations · Undominated.ai > Exposes Kubernetes and OpenShift resource inspection and management using kubeconfig or in-cluster credentials. [← Explore all mcp servers](/mcp-servers/) CLUSTER OPERATIONS / containers project # Kubernetes MCP Server Exposes Kubernetes and OpenShift resource inspection and management using kubeconfig or in-cluster credentials. See setup guidance ↓Original source ↗ SOURCE REVIEW Reviewed 2026-09-21 Evidence 6 linked sources Publisher containers project Licence Apache-2.0 ↗ Revision 6fd66fb432d3 Read what was—and wasn’t—checked ↓ “Kubernetes MCP Server” containers project · upstream description ↗ Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - Supports generic Kubernetes resources, making its role broader than a fixed set of pod commands. - Documents toolsets, read-only configuration and a restricted service-account setup. ### A good fit for - Inspecting pod failures and resource state in a deliberately limited cluster context. ### Weigh up before choosing - The configuration defaults read_only to false; enabled tools can create, update or delete resources. - The selected kubeconfig context and Kubernetes RBAC determine the reachable cluster and resources. - Enabling HTTP defaults the bind address to 0.0.0.0, with TLS/OAuth requiring configuration. A separate metrics listener, if enabled, has neither TLS nor OAuth. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - README.md (installation, capability and permission sections) - go.mod - cmd/kubernetes-mcp-server/main.go - LICENSE - pkg/http/http.go - docs/configuration.md ### Our findings - The Go entrypoint and manifest establish the implementation language despite npx/uvx launchers. - HTTP authentication has dedicated OAuth/OIDC guidance; local kubeconfig access remains a separate credential boundary. - The current HTTP implementation serves Streamable HTTP at /mcp; legacy SSE was not established and is not listed. - Runtime restrictions are TOML settings. The shown command now requires an explicit configuration file rather than launching the write-capable default silently. ### Not established by this review - Server startup, authentication and tool execution were not tested. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Connect a server deliberately. Upstream setup instructions ↗ DOCUMENTED COMMAND npx kubernetes-mcp-server@latest --config ./mcp-config.toml Copy command ↗ Copying does not execute this command. It may retrieve a newer version than the reviewed source. - Create mcp-config.toml containing read_only = true for exploration, and select a kubeconfig/service account restricted to the intended cluster resources. read_only and toolsets are TOML settings, not launch flags. - Start the documented launcher with --config pointing to that file; use an absolute file path in client configurations when their working directory differs. - For HTTP mode, explicitly set bind_address = "127.0.0.1" for local access or configure the documented OAuth/TLS and network controls before sharing the listener. ### Before you start - Node.js for the launcher and Kubernetes/OpenShift access through kubeconfig or in-cluster configuration. - A prepared mcp-config.toml at the command’s path; its read_only = true setting is recommended for the shown exploration setup. ### Compatibility An MCP client supporting stdio or Streamable HTTP. · Node.js for the launcher and Kubernetes/OpenShift access through kubeconfig or in-cluster configuration. ### Implementation Go ### Transports stdio · Streamable HTTP ### Cluster operations / Configured credentials or local access - Reads cluster resources and logs; enabled operations can mutate or delete resources and use administrative tools. ### Cost model Cluster hosting and any resources created through enabled tools determine cost. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - Official documentation ↗ Checked 2026-09-21 https://github.com/containers/kubernetes-mcp-server/blob/6fd66fb432d393ad662714e7baad5bdce5369870/README.md Supports: summary, whySelected, bestFor, limitations, install, access, compatibility, transports - Applicable source licence ↗ Checked 2026-09-21 https://github.com/containers/kubernetes-mcp-server/blob/6fd66fb432d393ad662714e7baad5bdce5369870/LICENSE Supports: license - Implementation: go.mod ↗ Checked 2026-09-21 https://github.com/containers/kubernetes-mcp-server/blob/6fd66fb432d393ad662714e7baad5bdce5369870/go.mod Supports: language, review - Implementation: cmd/kubernetes-mcp-server/main.go ↗ Checked 2026-09-21 https://github.com/containers/kubernetes-mcp-server/blob/6fd66fb432d393ad662714e7baad5bdce5369870/cmd/kubernetes-mcp-server/main.go Supports: language, review - Implementation: pkg/http/http.go ↗ Checked 2026-09-21 https://github.com/containers/kubernetes-mcp-server/blob/6fd66fb432d393ad662714e7baad5bdce5369870/pkg/http/http.go Supports: review, transports - Implementation: docs/configuration.md ↗ Checked 2026-09-21 https://github.com/containers/kubernetes-mcp-server/blob/6fd66fb432d393ad662714e7baad5bdce5369870/docs/configuration.md Supports: review, limitations, transports, install, access KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Grafana MCP Server ↗ Connects dashboards, logs, metrics and related Grafana data sources to an assistant, with separate controls for writes and query execution.](/mcp-servers/grafana/)[### MCP Toolbox for Databases ↗ Serves prebuilt database tools or a configured set of SQL-backed tools and resources to MCP clients.](/mcp-servers/toolbox/)[### Terraform MCP Server ↗ Looks up Terraform Registry documentation and can manage HCP Terraform or Terraform Enterprise workspaces and runs.](/mcp-servers/terraform/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)