Read-only MCP server enabling code-driven AI analysis of Kubernetes clusters
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · streamable-http · http
verified
reported
listed in the official MCP registry counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed v1.9.0 · analyzer v33 · 4w ago
skills & prompt files 1
- skill package/SKILL.md
danger signals1
- committed secret private key package/dist/tests/kubernetes/ConfigMapOperations.test.js :178
PEM private key block (redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 323
filesystem 18
- fs package/bin/kubeview-mcp-code-mode.js :5
import fs from 'fs'; - fs package/bin/kubeview-mcp.js :6
import fs from 'fs'; - fs package/bin/setup.js :3
import fs from 'fs'; - fs (weak) package/dist/scripts/release-publish.js :3
import { readFileSync } from 'fs'; - fs package/dist/src/agent/codegen/CodegenManager.js :1
import { promises as fs } from 'fs'; - fs package/dist/src/agent/runtime/code-executor/CodeExecutor.js :1
import { promises as fs } from 'fs'; - fs package/dist/src/agent/runtime/code-executor/NodeVmCodeExecutor.js :2
import fs from 'fs'; - fs package/dist/src/agent/runtime/ivm/IVMSandboxManager.js :2
import { promises as fs } from 'fs'; - fs package/dist/src/agent/runtime/vm/VmSandboxManager.js :2
import { promises as fs } from 'fs'; - fs package/dist/src/cli/code-mode.js :2
import { promises as fs } from 'fs'; - fs package/dist/src/kubernetes/KubernetesClient.js :4
import { existsSync } from 'fs'; - fs package/dist/src/tools/RunCodeTool.js :1
import { readFileSync } from 'fs';
show 6 more
- fs package/dist/src/utils/CliUtils.js :2
import { existsSync } from 'fs'; - fs package/dist/src/utils/CodeModeConfig.js :1
import fs from 'fs'; - fs (weak) package/dist/tests/compat/McpSdkCompatibility.test.js :1
import fs from 'fs'; - fs (weak) package/dist/tests/kubernetes/KubernetesClient.test.js :3
import { existsSync } from 'fs'; - fs (weak) package/dist/tests/release/PublishWorkflow.test.js :1
import { mkdirSync, mkdtempSync, writeFileSync } from 'fs'; - fs (weak) package/dist/tests/tools/RunCodeTool.test.js :1
import { mkdtempSync, rmSync, writeFileSync } from 'fs';
shell / exec 6
- shell package/bin/kubeview-mcp-code-mode.js :6
import { spawn, execSync } from 'child_process'; - shell package/bin/kubeview-mcp.js :5
import { execSync, spawn } from 'child_process'; - shell package/bin/setup.js :6
import { spawnSync } from 'child_process'; - shell (weak) package/dist/scripts/release-publish.js :2
import { spawnSync } from 'child_process'; - shell package/dist/src/utils/CliUtils.js :1
import { spawn } from 'child_process'; - shell (weak) package/dist/tests/helm/BaseTool.test.js :2
import { spawn } from 'child_process';
network 6
- net package/dist/src/kubernetes/KubernetesClient.js :7
import * as http from 'http'; - net package/dist/src/kubernetes/resources/MetricOperations.js :1
import * as http from 'http'; // Import http module - net package/dist/src/server/StreamableHttpRuntime.js :2
import { createServer } from 'node:http'; - net package/dist/src/tools/argocd/ArgoCDAppLogsTool.js :1
import * as https from 'https'; - net package/dist/src/tools/argocd/ArgoCDAppTool.js :1
import * as https from 'https'; - net package/dist/src/tools/kubernetes/PortForwardTool.js :3
import * as net from 'net';
secrets 3
- secrets package/dist/src/tools/argocd/ArgoCDAppLogsTool.js :201
const token = params.authToken || process.env.ARGOCD_AUTH_TOKEN; - secrets package/dist/src/tools/argocd/ArgoCDAppTool.js :218
const token = params.authToken || process.env.ARGOCD_AUTH_TOKEN; - secrets (weak) package/dist/tests/tools/argocd/ArgoCDAppLogsTool.test.js :34
process.env.ARGOCD_AUTH_TOKEN = 'test-token';
install hooks 1
- prepare package/package.json :36
husky
declared dependencies 20
- @modelcontextprotocol/sdk@^1.29.0
- @kubernetes/client-node@^1.3.0
- isolated-vm@^6.0.2
- typescript@^5.8.3
- winston@^3.17.0
- zod@^3.25.36
- @eslint/js@^9.32.0
- @types/jest@^30.0.0
- @types/node@^24.1.0
- @typescript-eslint/eslint-plugin@^8.38.0
- @typescript-eslint/parser@^8.38.0
- eslint@^9.32.0
show 8 more
- eslint-config-prettier@^10.1.5
- eslint-plugin-prettier@^5.4.0
- husky@^9.1.7
- jest@^30.0.0
- lint-staged@^16.1.0
- prettier@^3.5.3
- ts-jest@^29.4.5
- tsx@^4.19.4
obfuscation 1
- dynamic require()/import() package/bin/kubeview-mcp.js :182
const { main } = await import(`file://${finalIndexPath}`);