npm analyzed 3.9.1

mcp-server-kubernetes

v3.9.1

npm

MCP server for interacting with Kubernetes clusters via kubectl

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities0 tools

transport stdio · streamable-http · http · sse counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

code evidencev3.9.1 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

fs package/dist/tools/helm-operations.js :8 import { writeFileSync, unlinkSync } from "fs";
fs package/dist/tools/kubectl-apply.js :3 import * as fs from "fs";
fs package/dist/tools/kubectl-create.js :3 import * as fs from "fs";
fs package/dist/tools/kubectl-delete.js :3 import * as fs from "fs";
fs package/dist/tools/kubectl-patch.js :3 import * as fs from "fs";
fs package/dist/utils/kubernetes-manager.js :1 import * as fs from "fs";

shell package/dist/security/kubectl-flags.js :2 import { execFileSync, } from "child_process";
shell package/dist/tools/helm-operations.js :137 * Execute a command using child_process.execFileSync with proper error handling.
shell package/dist/tools/node-management.js :80 * Execute a command using child_process.execFileSync with proper error handling.
shell package/dist/tools/port_forward.js :1 import { spawn } from "child_process";

secrets package/dist/tools/kubectl-get.js :130 const shouldMaskSecrets = process.env.MASK_SECRETS !== "false" &&
secrets package/dist/utils/auth.js :27 const authToken = process.env.MCP_AUTH_TOKEN;