Skip to content

Kubeshark MCP Server

Verified

Real-time Kubernetes network traffic visibility and API analysis for HTTP, gRPC, Redis, Kafka, DNS.

by kubeshark 11,824 Apache-2.0 Go Advanced stdio

Install

No auto-install command available for this server.

Check the GitHub repository for setup instructions

Safety Report

83% Verified
Scanned yesterday
5 passed 1 warnings
Security
Authentication
details

Kubeshark uses its own cluster-level access control; MCP server inherits kubeconfig/RBAC permissions

Info
CORS Policy
details

stdio-based MCP transport; no HTTP CORS surface

N/A
Rate Limiting
details

No explicit MCP-layer rate limiting documented; relies on Kubernetes API throttling

Warning
Known CVEs
details

No known CVEs for the MCP component; actively maintained open-source project

Pass
Code Quality
Dependency Audit
details

Go-based project; dependencies managed via go.mod. No published audit report

Info
Dangerous Patterns
details

No dangerous code patterns detected

Pass
License
details

Apache 2.0

Pass
Code Source
details

Fully open source under Apache 2.0 at github.com/kubeshark/kubeshark

Pass
Community
Maintenance Status
details

Actively maintained with regular releases and Helm chart updates

Pass

Learn about our security methodology →

Compatibility

Claude CodeSupported via stdio MCP transport; configure via claude_desktop_config.json or CLI
Not Tested
CursorListed as supported MCP client in documentation
Not Tested
VS CodeWorks with VS Code MCP extensions via stdio
Not Tested
WindsurfStandard stdio MCP; compatible with Windsurf
Not Tested
Claude DesktopSupported; requires Kubeshark running in cluster
Not Tested

Tools Provided (14)

check_kubeshark_status

Check if Kubeshark is currently running in the Kubernetes cluster

start_kubeshark

Deploy Kubeshark to the Kubernetes cluster (requires --allow-destructive flag)

stop_kubeshark

Remove Kubeshark from the Kubernetes cluster (requires --allow-destructive flag)

list_workloads

List pods, services, namespaces, and nodes with observed L7 traffic

list_api_calls

Query L7 API transactions (HTTP, gRPC, Redis, Kafka, DNS) with KFL filtering

get_api_call

Get detailed information about a specific API call including headers and body

get_api_stats

Get aggregated API statistics and metrics

list_l4_flows

List L4 (TCP/UDP) network flows with traffic statistics

get_l4_flow_summary

Get L4 connectivity summary including top talkers and cross-namespace traffic

list_snapshots

List all PCAP snapshots of captured traffic

create_snapshot

Create a new PCAP snapshot of currently captured traffic

get_dissection_status

Check L7 protocol parsing status

enable_dissection

Enable L7 protocol dissection for deep packet inspection

disable_dissection

Disable L7 protocol dissection

Frequently Asked Questions

What is Kubeshark MCP Server?

Real-time Kubernetes network traffic visibility and API analysis for HTTP, gRPC, Redis, Kafka, DNS.

What tools does Kubeshark MCP Server provide?

Kubeshark MCP Server provides 14 tools including check_kubeshark_status, start_kubeshark, stop_kubeshark, list_workloads. Each tool can be called by AI agents to perform specific operations.

Is Kubeshark MCP Server safe to use?

Yes, Kubeshark MCP Server has passed our 8-point security audit and is rated Verified. All checks including authentication, dependency audit, and known CVE scan passed.

What are alternatives to Kubeshark MCP Server?

Similar MCP servers include Genai Toolbox, Supabase MCP, Postgres MCP. Each serves a similar purpose but may differ in features, language, and compatibility.

Similar MCP Servers