75 tools that work with Kubernetes: 39 MCP servers, 36 Agent Skills and 0 Claude Code plugins. 0 of the remote servers answered our live check, 0 worked without an API key, and 2 come from an official or verified publisher. Ranked by GitHub stars plus official, live and free-to-try signals.
Most common uses: Containers & Kubernetes (41), Cloud providers & infrastructure as code (12), Monitoring, logs & incidents (6), Files, spreadsheets, CSV & PDFs (4).
| Tool | Stars | Last update | License | |
|---|---|---|---|---|
| kubernetes-architect Expert Kubernetes architect specializing in cloud-native infrastructure, advanced GitOps workflows (ArgoCD/Flux), and enterprise container orchestrati SkillInstall · skills CLI | 49,672 | MIT | ||
| gitops-workflow Implement GitOps workflows with ArgoCD and Flux for automated, declarative Kubernetes deployments with continuous reconciliation. Use when implementin SkillInstall · skills CLI | 42,495 | MIT | ||
| helm-chart-scaffolding Design, organize, and manage Helm charts for templating and packaging Kubernetes applications with reusable configurations. Use when creating Helm cha SkillInstall · skills CLI | 42,495 | MIT | ||
| k8s-manifest-generator Create production-ready Kubernetes manifests for Deployments, Services, ConfigMaps, and Secrets following best practices and security standards. Use w SkillInstall · skills CLI | 42,495 | MIT | ||
| k8s-security-policies Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernete SkillInstall · skills CLI | 42,495 | MIT | ||
| analyzing-kubernetes-audit-logs Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymou SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| auditing-kubernetes-cluster-rbac Auditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service acco SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| auditing-kubernetes-rbac-privilege-escalation Finds over-permissive RBAC roles and service-account token abuse paths in a Kubernetes cluster using kubectl auth can-i, rbac-police, kubectl-who-can, SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| benchmarking-kubernetes-with-kube-bench Installs and runs the kube-bench tool against a Kubernetes cluster as a Job, DaemonSet, or standalone binary, selecting the correct benchmark version SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| detecting-container-escape-attempts Detects container escape at runtime across tooling - namespace manipulation, capability abuse, kernel exploits, sensitive host mounts, and anomalous s SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| detecting-container-runtime-threats-with-falco Deploys and operates Falco with the modern eBPF driver in Kubernetes and Docker, covering driver selection, Helm installation, output channels, and th SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| detecting-privilege-escalation-in-kubernetes-pods Detects and prevents privilege escalation inside Kubernetes pods by combining admission control (OPA policies), runtime monitoring (Falco), and audit SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| karpathy-coder Check a diff for overbuilt code: hidden assumptions, needless abstraction, non-surgical changes, unverified goals (Karpathy's four principles). Load w SkillInstall · skills CLI | 29,773 | MIT | ||
| kubernetes-specialist Use when deploying or managing Kubernetes workloads. Invoke to create deployment manifests, configure pod security policies, set up service accounts, SkillInstall · skills CLI | 12,355 | MIT | ||
| io.github.kubeshark/mcp Real-time Kubernetes network traffic visibility and API analysis for HTTP, gRPC, Redis, Kafka, DNS. MCP serverGitHub-verified authorLocal · MCPB | 12,138 | Apache-2.0 | ||
| offensive-container-escape Container escape and breakout techniques targeting Docker, containerd, and Podman runtimes. Covers privileged container breakout via host filesystem m SkillInstall · skills CLI | 10,764 | MIT | ||
| hunt-k8s Hunt Kubernetes & Docker — API anonymous access, kubelet 10250 exec (SPDY/WebSocket, NOT plain POST) and the simpler /run primitive, etcd 2379 unauth, SkillInstall · skills CLI | 5,763 | MIT | ||
| mirrord-prev-env Help users create and manage mirrord preview environments — running a modified service as an isolated pod in a shared Kubernetes cluster, scoped by an SkillInstall · skills CLI | 5,411 | MIT | ||
| mirrord-propagation-discovery Scans a live Kubernetes environment with `mirrord dump` to find an identifier mirrord can filter traffic on: a header, a `baggage` or `tracestate` mem SkillInstall · skills CLI | 5,411 | MIT | ||
| mirrord-quickstart Guide users from zero to their first working mirrord session — check system requirements, install mirrord via CLI, VS Code, or IntelliJ, run a first s SkillInstall · skills CLI | 5,411 | MIT | ||
| mirrord-temporal Helps DevOps engineers configure mirrord Operator's Temporal task queue splitting feature end-to-end. Generates the MirrordSplitConfig and MirrordProp SkillInstall · skills CLI | 5,411 | MIT | ||
| mirrord-up Helps users run multiple concurrent mirrord sessions from a single mirrord-up.yaml (compose-style multi-service local debugging). Use when the user me SkillInstall · skills CLI | 5,411 | MIT | ||
| io.github.txn2/kubefwd Kubernetes port forwarding for local development with automatic /etc/hosts entries. MCP serverGitHub-verified authorLocal · MCPB | 4,182 | Apache-2.0 | ||
| Radar Kubernetes MCP Server Kubernetes MCP server for diagnosis, resource management, GitOps, and RBAC-enforced operations. MCP serverGitHub-verified authorLocal · Docker | 4,116 | Apache-2.0 | ||
| cdf-image-attribute-augmentation Run the CDF Orchestration Image Attribute Augmentation DAG on Kubernetes - person-crop clothing augmentation, attribute search, and augmented dataset SkillInstall · skills CLI | 3,954 | Apache-2.0 | ||
| cdf-orchestration-preflight Set up missing Linux prerequisites and audit whether a Cosmos Data Factory (CDF) Orchestration checkout and its Kubernetes or OSMO environment are rea SkillInstall · skills CLI | 3,954 | Apache-2.0 | ||
| cdf-orchestration-setup Use when the user asks to deploy, install, reinstall, redeploy, upgrade, or connect to the CDF Orchestration Airflow controller. Owns the end-to-end d SkillInstall · skills CLI | 3,954 | Apache-2.0 | ||
| cdf-orchestration-write-dag Use when a user describes a custom CDF Orchestration pipeline — a specific ordered combination of stages such as augmentation only, auto-labeling only SkillInstall · skills CLI | 3,954 | Apache-2.0 | ||
| cdf-simulation Component-owned guidance for CDF Simulation requests submitted directly or through Airflow-triggered DIG Flow Catalog prompts — golden THT board, THT SkillInstall · skills CLI | 3,954 | Apache-2.0 | ||
| cdf-video-data-augmentation Run the CDF Video Data Augmentation Airflow workflow on Kubernetes or OSMO to create Cosmos video-to-video variants and auto-label both source and gen SkillInstall · skills CLI | 3,954 | Apache-2.0 | ||
| launch-nemo-rl Playbook for launching, monitoring, stopping, and debugging NeMo-RL recipes on a Kubernetes cluster via the nrl-k8s CLI. Covers ephemeral vs long-live SkillInstall · skills CLI | 3,954 | Apache-2.0 | ||
| kubernetes-operations Kubernetes operations including manifests, Helm charts, operators, troubleshooting, and resource management SkillInstall · skills CLI | 2,838 | Apache-2.0 | ||
| devops-troubleshooter Expert DevOps troubleshooter specializing in rapid incident response, advanced debugging, and modern observability. Masters log analysis, distributed SkillInstall · skills CLI | 2,009 | MIT | ||
| distributed-debugging-debug-trace Set up debugging environments, distributed tracing, and diagnostic tools, and establish troubleshooting practices for development and production. Use SkillInstall · skills CLI | 2,009 | MIT | ||
| eaiapps-guided-install Guides a user through installing the AI Workbench (AIWB) onto a Kubernetes cluster end-to-end — preflight cluster readiness (access, StorageClass, GPU SkillInstall · skills CLI | 490 | MIT | ||
| kubernetes-skill Prevent Kubernetes hallucinations by diagnosing and fixing failure modes: insecure workload defaults, resource starvation, network exposure, privilege SkillInstall · skills CLI | 478 | MIT | ||
| io.github.vfarcic/dot-ai AI-powered development platform for Kubernetes deployments and intelligent automation MCP serverGitHub-verified authorLocal · npm | 340 | MIT | ||
| gitops-workflows GitOps deployment workflows with ArgoCD and Flux. Use this skill whenever the user mentions GitOps, ArgoCD, Flux, Flagger, Argo Rollouts, or continuou SkillInstall · skills CLI | 206 | — | ||
| k8s-troubleshooter Systematic Kubernetes troubleshooting and incident response. Use this skill whenever the user mentions Kubernetes, K8s, kubectl, pods, containers, or SkillInstall · skills CLI | 206 | — | ||
| k8s_skill 当用户问题涉及 Kubernetes 集群运维、Workload 排障、资源与事件分析时加载本技能。 SkillInstall · skills CLI | 173 | MIT | ||
| KSail SDK for creating, managing, and operating Kubernetes clusters and workloads with ease. MCP serverGitHub-verified authorLocal · Docker | 164 | — | ||
| io.github.kubently/kubently Troubleshoot Kubernetes agentically: natural-language cluster diagnosis via ask_kubently MCP serverGitHub-verified authorLocal · npm | 46 | Apache-2.0 | ||
| Ankra Deploy and operate Kubernetes: clusters, stacks, apps, logs, metrics and security, with OAuth. MCP serverVerified domain · ankra.aiRemoteSign-in needed | 0 | Apache-2.0 | ||
| Willform Agent Deploy containers on Kubernetes with x402 billing. 9 workload types and source builds. MCP serverVerified domain · willform.aiRemoteDown | — | — | ||
| MimiOps mcp server for Kubernetes MimiOps is an opinionated MCP server for Kubernetes MCP serverGitHub-verified authorLocal · Docker | 18 | Apache-2.0 | ||
| io.github.ocm-mcp-server/ocm-mcp-server Guardrailed fleet ops for AI agents: multi-cluster Kubernetes via OCM with policy, approval, audit. MCP serverGitHub-verified authorLocal · PyPI | 17 | Apache-2.0 | ||
| io.github.luisgf/infrabroker SSH & Kubernetes access broker for AI agents; the model never touches a credential. MCP serverGitHub-verified authorLocal · Docker | 13 | GPL-3.0 | ||
| io.github.mikhae1/kubeview Read-only Model Context Protocol MCP server enabling code-driven AI analysis of Kubernetes clusters. MCP serverGitHub-verified authorLocal · npm | 5 | MIT | ||
| io.github.dockndevai/mcp-kubernetes Kubernetes monitoring & ops for AI agents — safe-by-default access modes and guards. MCP serverGitHub-verified authorLocal · npm | 3 | MIT | ||
| lastwords Heap histograms, Go profiles, crash logs and core dumps from Kubernetes pods before they died. MCP serverGitHub-verified authorLocal · Docker | 3 | Apache-2.0 | ||
| io.github.nogoo9/no-crd Dynamic pod spawner & proxy for ephemeral AI agent workspaces on Kubernetes without CRDs MCP serverGitHub-verified authorLocal · npm | 2 | Apache-2.0 | ||
| K8s MCP Server (Go) Safe Kubernetes access for AI agents via MCP. Read-only by default, with explicit permission modes. MCP serverGitHub-verified authorLocal · MCPB | 2 | MIT | ||
| KubeStellar MCP AI-powered Kubernetes diagnostics, RBAC analysis, security checks, and app deployment via MCP MCP serverGitHub-verified authorLocal · Docker | 2 | Apache-2.0 | ||
| opsgate Kubernetes MCP server where AI proposes changes and you approve each with a passkey on your phone. MCP serverGitHub-verified authorLocal · Docker | 2 | Apache-2.0 | ||
| io.github.apatilgtn/k8scortex-mcp Kubernetes MCP server: 75 tools for GKE, AKS, EKS, RBAC, audit logging, GitOps, multi-cluster. MCP serverGitHub-verified authorLocal · npm | 1 | MIT | ||
| io.github.jmshinhwa/ingress-nginx-retirement-lint Names the Gateway API field that replaces each retired ingress-nginx annotation — or tells you there MCP serverGitHub-verified authorLocal · npm | 1 | — | ||
| io.github.jmshinhwa/k8s-removed-api-lint 15 checks for the apiVersions kubectl no longer serves, on the manifest open in your editor MCP serverGitHub-verified authorLocal · npm | 1 | — | ||
| io.github.kubeleash/kubeleash Kubernetes MCP server with RBAC-style, context-scoped guardrails for AI agents. MCP serverGitHub-verified authorLocal · Docker | 1 | Apache-2.0 | ||
| io.github.your-ko/mcp-k8s-ro Read-only Kubernetes MCP server: inspect resources, logs, events, and metrics. Secrets are masked. MCP serverGitHub-verified authorLocal · Docker | 1 | MIT | ||
| K8gentS — Kubernetes RCA MCP Server Kubernetes RCA agent that sandboxes its own AI with OPA Gatekeeper. MCP-ready for any client. MCP serverGitHub-verified authorLocal · Docker | 1 | — | ||
| io.github.Michael-WhiteCapData/WhiteCapData-Dev Operate a k3s / Kubernetes cluster from your AI agent — safe-by-default MCP server. MCP serverGitHub-verified authorLocal · PyPI | — | — | ||
| io.github.oijusti/k8s-port-forward-mcp Kubernetes Port Forward — MCP Server: port-forward Kubernetes services with terminal integration MCP serverGitHub-verified authorLocal · npm | 0 | MIT | ||
| io.github.Patrizzos/envspeak MCP server and CLI that resolves config/env-var cascade across .env, docker-compose, and Kubernetes MCP serverGitHub-verified authorLocal · npm | 0 | MIT | ||
| io.github.sophotechlabs/kube-lint-mcp Validate Kubernetes manifests, Helm charts, Kustomize overlays, and FluxCD resources MCP serverGitHub-verified authorLocal · PyPI | — | — | ||
| Janus Secure Kubernetes MCP server: scoped, redacted diagnostics and human-approved writes MCP serverGitHub-verified authorLocal · PyPI | 0 | Apache-2.0 | ||
| k8s AIops Governed Kubernetes ops — 55 MCP tools with audit, budget, undo, risk-tier audit labels. MCP serverGitHub-verified authorLocal · PyPI | 0 | MIT | ||
| K8s Lens MCP server for natural-language Kubernetes operations across single or multi-cluster environments. MCP serverGitHub-verified authorLocal · PyPI | — | — | ||
| kube-noob Kubernetes, OpenShift, ROSA HCP, Helm and RHACS audit, debugging and cited docs. No AI inside. MCP serverGitHub-verified authorLocal · PyPI | 0 | Apache-2.0 | ||
| kube-noob Kubernetes, OpenShift, ROSA HCP, Helm and RHACS audit, debugging and cited docs. No AI inside. MCP serverGitHub-verified authorLocal · PyPI | 0 | Apache-2.0 | ||
| KubeDrive Your Kubernetes clusters for AI agents through the KubeDrive desktop app, without a kubeconfig. MCP serverGitHub-verified authorLocal · MCPB | 0 | — | ||
| KubeDrive Your Kubernetes clusters for AI agents through the KubeDrive desktop app, without a kubeconfig. MCP serverGitHub-verified authorLocal · MCPB | 0 | — | ||
| Kubernetes Ephemeral Job Runs a command in a throwaway Kubernetes pod and returns exit code, output and artifacts. MCP serverGitHub-verified authorLocal · Docker | 0 | MIT | ||
| Kubernetes Manifest Audit kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network. MCP serverGitHub-verified authorRemoteSign-in needed | 0 | — | ||
| Kubernetes Troubleshoot Read-only Kubernetes diagnostics: pods, logs, events, workloads, services, PVCs and nodes. MCP serverGitHub-verified authorLocal · Docker | 0 | MIT | ||
| ProdHub Application Delivery Deploy applications and manage governed Kubernetes preview spaces and capacity. MCP serverGitHub-verified authorRemoteSign-in needed | 0 | — |