Kubernetes MCP Server

official

A Claude Kubernetes MCP server, built in Go. The server integrates with ArgoCD, GitLab, Claude AI, and Kubernetes to enable advanced control and automation of Kubernetes environments.

GitHub
9

What can you do with Kubernetes MCP?

  • Read cluster resources — Ask about namespaces, any resource type including custom resources, events, and per-namespace resource maps with relationships and health.
  • Find issues without Claude — Get Warning events and failing CronJobs with the end of the failed run's log as a list of issues (?narrative=false).
  • Analyze with Claude — Ask Claude about a resource, an entire namespace, or a GitLab merge request using the collected context.
  • Monitor ArgoCD access — The server checks every 60 seconds that its token can still read Applications, surfacing lost RBAC grants as errors.
  • Configure via config.yaml — Set server address, auth, Kubernetes connection, and Claude API key, base URL, model, and token limits.

Documentation

Blank Cut

Claude Kubernetes MCP Server

CI Release Docker Pulls Docker Image Size Go Report Card License GitHub release

A Go server that answers questions about a Kubernetes cluster with Claude, using context from the Kubernetes API and, optionally, ArgoCD and GitLab.

Documentation: docs.blankcut.com/kubernetes-mcp-server — quick start, installation, every config key and endpoint, and troubleshooting.

What it does

  • Reads the cluster — namespaces, any resource type (custom resources too), events, and a per-namespace map of resources, relationships and health.
  • Finds problems without Claude — Warning events and failing CronJobs (with the end of the failed run's log) become a list of issues in seconds (?narrative=false).
  • Asks Claude about a resource, a whole namespace, or a GitLab merge request, with the context it collected.
  • Watches its own ArgoCD access — it checks every 60 seconds that its token can still read Applications, so a lost RBAC grant shows up as an error rather than an empty list.
  • Authenticates to Claude with an API key or Workload Identity Federation, so it can run without a long-lived key.

It only reads: nothing it does changes Kubernetes, ArgoCD or GitLab.

It is a REST API. Despite the name it does not implement the Model Context Protocol's JSON-RPC transport, so MCP clients such as Claude Desktop can't connect to it directly; call it over HTTP.

Quick start

Download a release binary (Linux and macOS, amd64 and arm64) from Releases, write a config.yaml:

server:
  address: ":8080"
  writeTimeout: 300
  auth:
    apiKey: "${API_KEY}"
kubernetes:
  inCluster: false          # uses $KUBECONFIG or ~/.kube/config
claude:
  apiKey: "${CLAUDE_API_KEY}"
  baseURL: "https://api.anthropic.com"
  modelID: "claude-sonnet-5"
  maxTokens: 8192

and run it:

export API_KEY=$(openssl rand -hex 32) CLAUDE_API_KEY=sk-ant-...
./mcp-server-darwin-arm64 --config config.yaml

curl -s -H "X-API-Key: $API_KEY" \
  "http://localhost:8080/api/v1/namespaces/default/analysis?narrative=false"

The quick start walks through it, including checksum verification.

Install

Method
Helmhelm install kubernetes-mcp-server ./helm/kubernetes-mcp-server --set secrets.apiKey=... --set secrets.claudeApiKey=... from a checkout of a release tag. See Installation.
Dockerblankcut/kubernetes-mcp-server (linux/amd64, linux/arm64); mount a config at /app/config.yaml.
BinaryReleases, with checksums.txt.
SourceGo 1.26+: cd kubernetes-claude-mcp && go build -o mcp-server ./cmd/server.

Development

cd kubernetes-claude-mcp
go test ./...
go run ./cmd/server --config config.yaml --log-level debug

A Postman collection is in postman/. Changes are listed in CHANGELOG.md; contributions are welcome — see CONTRIBUTING.md.

Donation

Please contribute to our coffee fund to help us continue to do great things: Buy Me Coffee

License

MIT