Kubeview
Connects Claude to Kubernetes clusters through a read-only MCP interface that covers core resources, Helm releases, Argo Workflows, and Argo CD. Exposes tools for listing and describing resources, streaming logs, executing commands in containers, fetching metrics, and running network diagnostics. Includes a sandboxed TypeScript runtime where agents can write multi-step inspection scripts with full access to the MCP tool catalog. Reads Helm metadata directly from Kubernetes storage (secrets and configmaps) without requiring the CLI. Ships with sensitive data masking for production use and a plan_step tool for persisting investigation state across long debugging sessions.
- GitHub stars
- 5
- tools
- 9
- auth
- Secret needed
- transport
- STDIO
- env vars
- 24
- last updated
- Oct 17, 2026
Tools
9 toolsPublic tool metadata for what this MCP can expose to an agent.
run_codeRuns a sandboxed TypeScript snippet that can query Kubernetes, Helm, Argo Workflows, and Argo CD, correlating results and returning only the answer.
Runs a sandboxed TypeScript snippet that can query Kubernetes, Helm, Argo Workflows, and Argo CD, correlating results and returning only the answer.
No parameter schema in public metadata yet.
kube_pod_exec
No parameter schema in public metadata yet.
kube_list
No parameter schema in public metadata yet.
kube_get
No parameter schema in public metadata yet.
kube_logs
No parameter schema in public metadata yet.
kube_contexts
No parameter schema in public metadata yet.
helm
No parameter schema in public metadata yet.
argo
No parameter schema in public metadata yet.
argocd
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
KUBECONFIGPath to kubeconfig file; defaults to ~/.kube/config if unset.
MCP_TRANSPORTTransport mode: 'stdio' (default) or 'http'. The published package metadata still targets stdio by default.
MCP_MODEServer mode: 'code' (default), compatibility alias 'all', or direct 'tools'.
MCP_CODE_MODE_DISABLED_TOOLSComma-separated configurable denials inside run_code. Environment overrides JSON; an empty value enables all configurable capabilities.
MCP_ARGO_TOOLSArgo Workflows capability override: auto, on, or off. Auto uses Kubernetes API discovery.
MCP_ARGOCD_TOOLSArgo CD capability override: auto, on, or off. Auto uses Kubernetes API discovery or explicit remote configuration.
MCP_LOG_LEVELLogging level: 'error', 'warn', 'info' (default), or 'debug'.
MCP_KUBE_CONTEXTKubernetes context name to use. If unset, uses the current context from kubeconfig.
MCP_K8S_SKIP_TLS_VERIFYSkip TLS certificate verification for Kubernetes API (use 'true' or '1'). Not recommended for production.
MCP_HIDE_SENSITIVEEnable global sensitive data masking. Set to 'true' or '1' to mask sensitive values in responses.
MCP_TIMEOUTDefault timeout in milliseconds for operations. If unset, uses plugin-specific defaults.
MCP_HTTP_HOSTHTTP bind host when MCP_TRANSPORT=http. Defaults to 127.0.0.1.
MCP_HTTP_PORTHTTP port when MCP_TRANSPORT=http. Defaults to 3000.
MCP_HTTP_PATHHTTP endpoint path when MCP_TRANSPORT=http. Defaults to /mcp.
MCP_HTTP_JSON_RESPONSEPrefer JSON responses over SSE in HTTP mode. Set to 'true' or '1' to enable.
MCP_APPROVAL_STATE_SECRETsecretShared secret of at least 32 bytes for signing approval state. Required in HTTP mode and identical across replicas.
MCP_APPROVAL_REPLAY_DIRAbsolute directory on writable storage shared by every HTTP replica, used to atomically prevent approval replay.
MCP_ALLOWED_HOSTSComma-separated Host allowlist for HTTP mode. Required when binding to 0.0.0.0 or ::.
MCP_ALLOWED_ORIGINSComma-separated Origin allowlist for HTTP mode.
KUBE_MCP_FORCE_VM_SANDBOXForce the standalone code-mode runtime to use node:vm instead of isolated-vm. Set to '1' to enable.
MCP_DISABLE_KUBERNETES_PLUGINDisable Kubernetes plugin. Set to 'true' or '1' to disable.
MCP_DISABLE_HELM_PLUGINDisable Helm plugin. Set to 'true' or '1' to disable.
MCP_DISABLE_ARGO_PLUGINDeprecated alias for MCP_ARGO_TOOLS=off.
MCP_DISABLE_ARGOCD_PLUGINDeprecated alias for MCP_ARGOCD_TOOLS=off.
Readme
KubeView MCP
Read-only Model Context Protocol server for Kubernetes diagnostics. Instead of exposing dozens of tools, it gives the agent a sandboxed TypeScript runtime: a single run_code call can query Kubernetes, Helm, Argo Workflows, and Argo CD, correlate the results, and return only the answer. Intermediate payloads never pass through the model's context window. Based on the code execution with MCP pattern.
Background: Evicting MCP tool calls from your Kubernetes cluster
How it works
Details
- Repository
- github.com/mikhae1/kubeview-mcp
- Website
- github.com/mikhae1/kubeview-mcp
- Category
- Cloud & Infrastructure
- Package
kubeview-mcp- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active
Related Cloud & Infrastructure MCP servers
View all
Cortex RMCPjmagar/cortexRust MCP server for homelab logs, syslog, Docker logs, FTS search, and AI transcript correlation.4stars
Devops Mcpnotharshhaa/devops-mcpUnified MCP server for Kubernetes, ArgoCD, Prometheus, PagerDuty, and Loki4stars
Cyntrisec CLI (Historical)cyntrisec/cyntrisec-cliHistorical AWS analysis CLI; not a current Cyntrisec product.3stars
OCI Pricingjasonwilbur/oci-pricing-mcpOracle Cloud Infrastructure pricing data with cost calculators and comparisons3stars
Shortcut Mcpstayce/streamshortcut-cloudflareShortcut project management. Create, update, search stories and manage workflows.0stars
VMware AVIzw008/vmware-aviVMware AVI (NSX ALB) load balancer plus AKO Kubernetes ops — 29 MCP tools.2stars