Kubernetes MCP Guard MCP Server

It is a security-first bridge between AI agents and Kubernetes, with out-of-band, OAuth-authenticated, human-in-the-loop (HITL), plan-based approval

Local serverstdio

What is the Kubernetes MCP Guard MCP Server?

It is a security-first bridge between AI agents and Kubernetes, with out-of-band, OAuth-authenticated, human-in-the-loop (HITL), plan-based approval for every

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
request_apply_manifestDry-run and plan server-side apply for Deployment, Service, or ConfigMap.
request_delete_manifestDry-run and plan deletion for supported manifest kinds.
request_scale_deploymentDry-run and plan a Deployment replica-count change.
request_restart_deploymentDry-run and plan a Deployment rollout restart.
request_set_deployment_imageDry-run and plan a Deployment container image update.
propose_planCreate an approval-pending Operator Approval Policy plan for the autonomous Planner operation menu.
execute_approved_planCreate the browser approval challenge or execute an approved, digest-bound plan after gates pass.
get_plan_statusRead the current approval status for a plan.
wait_for_plan_approvalWait briefly for an out-of-band browser approval and return status JSON without applying the plan.

Example prompts to try

  • “Use Kubernetes MCP Guard to request apply manifest.”
  • “Use Kubernetes MCP Guard to request delete manifest.”
  • “Use Kubernetes MCP Guard to request scale deployment.”

Frequently asked questions

It is a security-first bridge between AI agents and Kubernetes, with out-of-band, OAuth-authenticated, human-in-the-loop (HITL), plan-based approval for every Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.