Public log

mcp-server-kubernetes

MCP server for interacting with Kubernetes clusters via kubectl

npm · fingerprint 757155aa2b61ab81c709fd2e · repository · RSS

23tools
2recorded versions
57dtracked
changed 3d ago

What changed

Changed 2026-10-27 11:56 UTC

3 schema or annotation changes with the description left byte-identical.

--- pinned/kubectl_context
+++ observed/kubectl_context
  {
    "annotations": {
-     "readOnlyHint": true
+     "destructiveHint": false,
+     "idempotentHint": true,
+     "readOnlyHint": false
    },
    "description": "Manage Kubernetes contexts - list, get, or set the current context",
    "inputSchema": {
--- pinned/kubectl_create
+++ observed/kubectl_create
  {
    "description": "Create Kubernetes resources using various methods (from file or using subcommands)",
    "inputSchema": {
-         "description": "Output format. One of: json|yaml|name|go-template|go-template-file|template|templatefile|jsonpath|jsonpath-as-json|jsonpath-file",
-         "enum": [
-           "json",
-           "yaml",
-           "name",
-           "go-template",
-           "go-template-file",
-           "template",
-           "templatefile",
-           "jsonpath",
-           "jsonpath-as-json",
-           "jsonpath-file"
-         ],
+         "description": "Output format. One of: json|yaml|name|go-template|template|jsonpath|jsonpath-as-json. The template formats take their template inline, e.g. 'jsonpath={.metadata.name}'.",
          "type": "string"
        },
        "port": {
--- pinned/kubectl_patch
+++ observed/kubectl_patch
  {
    "annotations": {
      "destructiveHint": true
-         "description": "Patch data as a JSON object",
-         "type": "object"
+         "description": "Patch data: a JSON object for 'strategic' and 'merge' patches, or an array of JSON Patch operations for patchType 'json'",
+         "type": [
+           "object",
+           "array"
+         ]
        },
        "patchFile": {
          "description": "Path to a file containing the patch data (alternative to patchData). The path is read on the machine running the MCP server, so it is rejected when the server runs over a remote (SSE/Streamable HTTP) transport; use 'patchData' to pass the patch contents instead.",

Current tools

Show all 23 tool fingerprints
cleanup
71c342985c473e65
exec_in_pod
03331e840056d536
explain_resource
4241d6acfa17c81e
install_helm_chart
59d710772f960275
kubectl_apply
1bf1a99e457959b4
kubectl_context
57853c8bb2ed2104
kubectl_create
6f0568be44f53795
kubectl_delete
93baa1d8fa616184
kubectl_describe
6885509b7119e7f5
kubectl_generic
8b6d9b16d422342f
kubectl_get
3a83385b91539c5e
kubectl_logs
69501cdac50bd97a
kubectl_patch
f5982f3e631584ff
kubectl_reconnect
2ec7769f3d7baf9a
kubectl_rollout
c8e9c17b3d302839
kubectl_scale
77be589821a28ff4
list_api_resources
07f2be4942a22052
node_management
1408132882ddc48d
ping
db7e94a73761a7de
port_forward
c1424f92a8a491d4
stop_port_forward
98cddfbbd1a3a25e
uninstall_helm_chart
ce652ad18c07b3f7
upgrade_helm_chart
baaaf692933e3ea4

Watch this server yourself

If you run this server, put the proxy in front of it. It pins these exact fingerprints on first connect and stops the session if they move.

npx -y mcp-pin@0.2.3 -- <your mcp-server-kubernetes command>

Or subscribe to this page's RSS feed to be told when it changes.

Badge

mcp-pin status badge for mcp-server-kubernetes

The badge states one fact about time and nothing else. It never claims a server is safe.

[![mcp-pin](https://mcp-pin.gautamkhosla.com/badge/114f07ec9f6ceea3.svg)](https://mcp-pin.gautamkhosla.com/servers/114f07ec9f6ceea3.html)