MCP server for interacting with Kubernetes clusters via kubectl
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
When Vitest UI server is listening, arbitrary file can be read and executed
JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases
process.env. You'll be asked to provide them before it can run.ALLOWED_TOOLS— "kubectl_get,kubectl_describe" npx mcp-server-kubernetesALLOW_KUBECTL_UNSAFE_FLAGSALLOW_ONLY_NON_DESTRUCTIVE_TOOLS— true npx mcp-server-kubernetesALLOW_ONLY_READONLY_TOOLS— true npx mcp-server-kubernetesDNS_REBINDING_ALLOWED_HOST— mcp.example.com ENABLE_UNSAFE_STREAMABLE_HTTP_TRANSPORT=1 PORT=3001 HOST=0.0.0.0 npx flux159/mcp-server-kubernetesDNS_REBINDING_PROTECTION— false ENABLE_UNSAFE_STREAMABLE_HTTP_TRANSPORT=1 PORT=3001 HOST=0.0.0.0 npx flux159/mcp-server-kubernetesENABLE_TELEMETRYENABLE_UNSAFE_SSE_TRANSPORT— To enable [SSE transport](https://modelcontextprotocol.io/docs/concepts/transports#server-sent-events-sse) for mcp-server-kubernetes, use the environment variable.ENABLE_UNSAFE_STREAMABLE_HTTP_TRANSPORT— To enable [Streamable HTTP transport](https://modelcontextprotocol.io/specification/2025-06-18/basic/transports#streamable-http) for mcp-server-kubernetes, use the environment variable.HOST— ENABLE_UNSAFE_STREAMABLE_HTTP_TRANSPORT=1 PORT=3001 =0.0.0.0 npx flux159/mcp-server-kubernetesK8S_CA_DATA— export ='LS0tLS1CRUdJTi...' # optional, base64-encoded CA certificateK8S_CONTEXT— export ='my-specific-context' # Override kubeconfig contextK8S_NAMESPACE— export ='my-namespace' # Override default namespaceK8S_SERVER— 3. + K8S_TOKEN – Minimal env-based configK8S_SKIP_TLS_VERIFY— export ='false' # optional, defaults to falseK8S_TOKEN— 3. K8S_SERVER + – Minimal env-based configKUBECONFIG— 6. – Standard kubeconfig env varKUBECONFIG_JSON— 2. – Full config as JSON stringKUBECONFIG_PATH— 5. – Custom kubeconfig file pathKUBECONFIG_YAML— 1. – Full config as YAML stringMASK_SECRETS— false npx mcp-server-kubernetesMCP_AUTH_TOKEN— my-secret-token ENABLE_UNSAFE_STREAMABLE_HTTP_TRANSPORT=1 npx mcp-server-kubernetesOTEL_CAPTURE_RESPONSE_METADATAOTEL_EXPORTER_OTLP_ENDPOINTOTEL_RESOURCE_ATTRIBUTESOTEL_SERVICE_NAMEOTEL_SERVICE_VERSIONOTEL_TRACES_SAMPLEROTEL_TRACES_SAMPLER_ARGPORT— ENABLE_UNSAFE_STREAMABLE_HTTP_TRANSPORT=1 =3001 HOST=0.0.0.0 npx flux159/mcp-server-kubernetesSPAWN_MAX_BUFFER— "": "5242880" // 5MB = 102410245. Default is 1MB in Node.js[](https://m8ven.ai/mcp/mcp-server-kubernetes-05n7al)