LUMINO MCP Server (spre-sre/lumino-mcp-server) is an MCP server listed on the M8ven Trust Index. It scores 58 out of 100, grade D. It declares 41 tools. No publisher has claimed this listing.
An open source MCP server empowering SREs with intelligent observability, predictive analytics, and AI-driven automation across Kubernetes, OpenShift, and Tekton environments.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
spre-sre
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
list_namespacesList all namespaces in the Kubernetes cluster.
list_pipelinerunsList Tekton PipelineRuns in a namespace with status and timing details.
list_taskrunsList Tekton TaskRuns in a namespace, optionally filtered by a specific PipelineRun.
list_pods_in_namespaceList all pods in a Kubernetes namespace with status and placement info.
get_kubernetes_resourceRetrieve details about a Kubernetes/Tekton resource.
get_pipelinerun_logsFetch logs from all pods in a Tekton PipelineRun with adaptive volume management.
check_resource_constraintsCheck for resource constraints in a namespace that may impact pipelines.
detect_anomaliesDetect anomalies in Tekton PipelineRuns/TaskRuns using z-score statistical analysis.
smart_get_namespace_eventsAdaptive event analysis for a namespace with automatic volume management.
analyze_logsAnalyze log text to extract error patterns and insights.
analyze_failed_pipelinePerform root cause analysis on a failed Tekton PipelineRun.
list_recent_pipeline_runsList recent Tekton PipelineRuns across all accessible namespaces, sorted by start time.
find_pipelineFind Tekton pipelines matching a pattern across all accessible namespaces.
get_tekton_pipeline_runs_statusGet cluster-wide status summary of all Tekton PipelineRuns and TaskRuns.
detect_log_anomaliesDetect anomalies in log data using error frequency, pattern repetition, and timestamp analysis.
search_resources_by_labelsSearch Kubernetes resources by labels across multiple resource types and namespaces.
prometheus_queryExecute PromQL queries against Prometheus for cluster metrics.
smart_summarize_pod_logsAdaptive pod log analysis with automatic volume management and multi-pass processing.
investigate_tls_certificate_issuesInvestigate TLS/certificate issues across the cluster with targeted search and analysis.
conservative_namespace_overviewConservative namespace analysis optimized for large namespaces with strict token limits.
adaptive_namespace_investigationAdaptive namespace investigation with progressive analysis and token budget management.
get_etcd_logsRetrieve etcd pod logs from Kubernetes/OpenShift with flexible time and line filtering.
stream_analyze_pod_logsStream and analyze pod logs in chunks with progressive pattern detection.
analyze_pod_logs_hybridHybrid log analyzer with intelligent strategy selection and caching.
progressive_event_analysisProgressive event analysis with multiple detail levels and correlation detection.
advanced_event_analyticsAdvanced ML-powered event analytics with log/metrics integration and runbook suggestions.
automated_triage_rca_report_generatorGenerate automated Root Cause Analysis (RCA) report for pipeline/pod failures.
check_cluster_certificate_healthScan for expiring certificates across the cluster to prevent service disruptions.
ci_cd_performance_baselining_toolEstablish performance baselines for pipelines and flag runs deviating from historical norms.
pipeline_tracerTrace a logical operation (commit, PR, image) as it flows through pipelines.
get_machine_config_pool_statusMonitor OpenShift Machine Config Pools for node configuration and update rollouts.
get_openshift_cluster_operator_statusCheck health and status of OpenShift cluster operators for platform functionality.
live_system_topology_mapperGenerate real-time dependency graph of Kubernetes/Tekton components and their interconnections.
predictive_log_analyzerPredict failures using ML analysis of historical log patterns before critical outages occur.
manage_prediction_training_dataManage training data for the predictive log analyzer.
resource_bottleneck_forecasterForecast resource bottlenecks by analyzing utilization trends and predicting exhaustion points.
semantic_log_searchSearch logs using natural language queries with semantic understanding beyond keyword matching.
what_if_scenario_simulatorSimulate impact of configuration changes before applying to live system with risk assessment.
query_kubearchiveQuery archived Kubernetes resources from KubeArchive (historical data no longer on the cluster).
templatize_pod_logsCluster pod logs into unique structural templates using Drain3 parse-tree mining.
deep_analyze_pod_logsClassify pod logs into golden signals and fault categories using ML (zero-shot transformer).
KUBERNETES_NAMESPACEexport =my-namespaceK8S_NAMESPACEAlternative namespace variable - Alternative to KUBERNETES_NAMESPACEKUBEARCHIVE_ENABLEDEnable/disable KubeArchive integration true Set to false to disable KubeArchive queries entirelyKUBEARCHIVE_HOSTExplicit KubeArchive API endpoint URL Auto-detected Custom KubeArchive endpoint or non-standard deploymentKUBECONFIGPath to kubeconfig file ~/.kube/config Multiple clusters or custom kubeconfig locationKUBERNETES_SERVICE_HOSTPROMETHEUS_TOKENBearer token for Prometheus/Thanos authentication Auto-detected Explicit auth token when auto-detection failsOPENSHIFT_TOKENOpenShift bearer token for Prometheus/Thanos Auto-detected Alternative to PROMETHEUS_TOKEN for OpenShift clustersOC_TOKENOpenShift CLI token fallback Auto-detected Last-resort token fallback for Prometheus/Thanos authTHANOS_URLThanos Query endpoint URL (highest priority for metrics) Auto-detected Custom Thanos Query endpoint; takes precedence over PROMETHEUS_URLPROMETHEUS_URLPrometheus server URL for metrics Auto-detected Custom Prometheus endpoint or non-standard portLOGAN_DISABLE_PANDARALLELTOKENIZERS_PARALLELISMTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
41/41 tools missing one or more hints — list_namespaces (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_pipelineruns (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_taskruns (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +38 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Destructive tools are labelled
2 tools perform destructive updates without destructiveHint — templatize_pod_logs deletes at line 12771 (shutil.rmtree(tmpdir,ignore_errors=True)); deep_analyze_pod_logs deletes at line 12877 (shutil.rmtree(tmpdir,ignore_errors=True))
Add destructiveHint:true to any tool whose handler calls .delete(), .upsert(), .update(), unlink, rm, DELETE, DROP, REPLACE INTO, or any operation that overwrites existing data.
Tool inputs are validated
40/41 tool handlers declare input schemas (98%)
Declare an inputSchema with zod/joi/yup on every tool definition.
Tests exist
No test files found
Add tests that exercise each declared tool.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/spre-sre/lumino-mcp-server)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check