LUMINO MCP Server (spre-sre/lumino-mcp-server) is an MCP server listed on the M8ven Trust Index. It scores 58 out of 100, grade D. It declares 41 tools. No publisher has claimed this listing.

D
Caution
58/100

LUMINO MCP Server

An open source MCP server empowering SREs with intelligent observability, predictive analytics, and AI-driven automation across Kubernetes, OpenShift, and Tekton environments.

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

spre-sre

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 3 credentials: PROMETHEUS_TOKEN, OPENSHIFT_TOKEN, OC_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// tools this server exposes41 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

list_namespaces

List all namespaces in the Kubernetes cluster.

list_pipelineruns

List Tekton PipelineRuns in a namespace with status and timing details.

list_taskruns

List Tekton TaskRuns in a namespace, optionally filtered by a specific PipelineRun.

list_pods_in_namespace

List all pods in a Kubernetes namespace with status and placement info.

get_kubernetes_resource

Retrieve details about a Kubernetes/Tekton resource.

get_pipelinerun_logs

Fetch logs from all pods in a Tekton PipelineRun with adaptive volume management.

check_resource_constraints

Check for resource constraints in a namespace that may impact pipelines.

detect_anomalies

Detect anomalies in Tekton PipelineRuns/TaskRuns using z-score statistical analysis.

smart_get_namespace_events

Adaptive event analysis for a namespace with automatic volume management.

analyze_logs

Analyze log text to extract error patterns and insights.

analyze_failed_pipeline

Perform root cause analysis on a failed Tekton PipelineRun.

list_recent_pipeline_runs

List recent Tekton PipelineRuns across all accessible namespaces, sorted by start time.

find_pipeline

Find Tekton pipelines matching a pattern across all accessible namespaces.

get_tekton_pipeline_runs_status

Get cluster-wide status summary of all Tekton PipelineRuns and TaskRuns.

detect_log_anomalies

Detect anomalies in log data using error frequency, pattern repetition, and timestamp analysis.

search_resources_by_labels

Search Kubernetes resources by labels across multiple resource types and namespaces.

prometheus_query

Execute PromQL queries against Prometheus for cluster metrics.

smart_summarize_pod_logs

Adaptive pod log analysis with automatic volume management and multi-pass processing.

investigate_tls_certificate_issues

Investigate TLS/certificate issues across the cluster with targeted search and analysis.

conservative_namespace_overview

Conservative namespace analysis optimized for large namespaces with strict token limits.

adaptive_namespace_investigation

Adaptive namespace investigation with progressive analysis and token budget management.

get_etcd_logs

Retrieve etcd pod logs from Kubernetes/OpenShift with flexible time and line filtering.

stream_analyze_pod_logs

Stream and analyze pod logs in chunks with progressive pattern detection.

analyze_pod_logs_hybrid

Hybrid log analyzer with intelligent strategy selection and caching.

progressive_event_analysis

Progressive event analysis with multiple detail levels and correlation detection.

advanced_event_analytics

Advanced ML-powered event analytics with log/metrics integration and runbook suggestions.

automated_triage_rca_report_generator

Generate automated Root Cause Analysis (RCA) report for pipeline/pod failures.

check_cluster_certificate_health

Scan for expiring certificates across the cluster to prevent service disruptions.

ci_cd_performance_baselining_tool

Establish performance baselines for pipelines and flag runs deviating from historical norms.

pipeline_tracer

Trace a logical operation (commit, PR, image) as it flows through pipelines.

get_machine_config_pool_status

Monitor OpenShift Machine Config Pools for node configuration and update rollouts.

get_openshift_cluster_operator_status

Check health and status of OpenShift cluster operators for platform functionality.

live_system_topology_mapper

Generate real-time dependency graph of Kubernetes/Tekton components and their interconnections.

predictive_log_analyzer

Predict failures using ML analysis of historical log patterns before critical outages occur.

manage_prediction_training_data

Manage training data for the predictive log analyzer.

resource_bottleneck_forecaster

Forecast resource bottlenecks by analyzing utilization trends and predicting exhaustion points.

semantic_log_search

Search logs using natural language queries with semantic understanding beyond keyword matching.

what_if_scenario_simulator

Simulate impact of configuration changes before applying to live system with risk assessment.

query_kubearchive

Query archived Kubernetes resources from KubeArchive (historical data no longer on the cluster).

templatize_pod_logs

Cluster pod logs into unique structural templates using Drain3 parse-tree mining.

deep_analyze_pod_logs

Classify pod logs into golden signals and fault categories using ML (zero-shot transformer).

// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configKUBERNETES_NAMESPACEexport =my-namespace
configK8S_NAMESPACEAlternative namespace variable - Alternative to KUBERNETES_NAMESPACE
configKUBEARCHIVE_ENABLEDEnable/disable KubeArchive integration true Set to false to disable KubeArchive queries entirely
configKUBEARCHIVE_HOSTExplicit KubeArchive API endpoint URL Auto-detected Custom KubeArchive endpoint or non-standard deployment
configKUBECONFIGPath to kubeconfig file ~/.kube/config Multiple clusters or custom kubeconfig location
configKUBERNETES_SERVICE_HOST
🔐 secretPROMETHEUS_TOKENBearer token for Prometheus/Thanos authentication Auto-detected Explicit auth token when auto-detection fails
🔐 secretOPENSHIFT_TOKENOpenShift bearer token for Prometheus/Thanos Auto-detected Alternative to PROMETHEUS_TOKEN for OpenShift clusters
🔐 secretOC_TOKENOpenShift CLI token fallback Auto-detected Last-resort token fallback for Prometheus/Thanos auth
configTHANOS_URLThanos Query endpoint URL (highest priority for metrics) Auto-detected Custom Thanos Query endpoint; takes precedence over PROMETHEUS_URL
configPROMETHEUS_URLPrometheus server URL for metrics Auto-detected Custom Prometheus endpoint or non-standard port
configLOGAN_DISABLE_PANDARALLEL
configTOKENIZERS_PARALLELISM
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

41/41 tools missing one or more hints — list_namespaces (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_pipelineruns (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_taskruns (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +38 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Destructive tools are labelled

2 tools perform destructive updates without destructiveHint — templatize_pod_logs deletes at line 12771 (shutil.rmtree(tmpdir,ignore_errors=True)); deep_analyze_pod_logs deletes at line 12877 (shutil.rmtree(tmpdir,ignore_errors=True))

Add destructiveHint:true to any tool whose handler calls .delete(), .upsert(), .update(), unlink, rm, DELETE, DROP, REPLACE INTO, or any operation that overwrites existing data.

Tool inputs are validated

40/41 tool handlers declare input schemas (98%)

Declare an inputSchema with zod/joi/yup on every tool definition.

Tests exist

No test files found

Add tests that exercise each declared tool.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/spre-sre/lumino-mcp-server?variant=verified)](https://m8ven.ai/mcp/spre-sre/lumino-mcp-server)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: b6c24f27064748c1adb3d0129d068ff86888816e
code hash: 2595928ade02d01900a6a1aa3b016e87d2b317103908b17b55c1fae86bdf82d2
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client