Guides7 min read

Best MCP Servers for Kubernetes Developers in 2026

The top MCP servers for Kubernetes developers and platform engineers. Give your AI assistant direct access to your cluster, Helm releases, GitOps pipelines, and observability stack — and stop copy-pasting kubectl output.

By MyMCPTools Team·

Kubernetes is the operating system of cloud-native infrastructure — and debugging, deploying, and operating it requires constant context switching between kubectl, Helm, your GitOps dashboard, and your observability tools. MCP servers eliminate that overhead by giving your AI assistant direct, structured access to your cluster state, deployment history, metrics, and infrastructure definitions — so you can diagnose issues and ship changes without leaving your AI conversation.

Why Kubernetes Developers Need MCP Servers

Kubernetes workflows span multiple systems: cluster state in kubectl, releases managed by Helm, deployments tracked in Argo CD, metrics in Prometheus, and logs in Grafana Loki. Without MCP, you're describing pod status in prompts and pasting error logs manually. With MCP, your AI reads the actual cluster state, checks running deployments, and diagnoses OOMKilled containers directly — without you transcribing kubectl describe output.

1. Kubernetes MCP Server — Live Cluster Access

The Kubernetes MCP server is the foundation of AI-assisted K8s operations. It gives your AI assistant direct access to your cluster's control plane — listing resources, describing workloads, reading events, and checking pod status across namespaces — without requiring you to copy-paste kubectl output.

Key capabilities:

  • List and describe pods, deployments, services, and namespaces
  • Read events and recent cluster activity
  • Check pod logs and container states (Running, CrashLoopBackOff, OOMKilled)
  • Inspect ConfigMaps, Secrets (metadata), and resource quotas

Best for: Platform engineers and developers debugging cluster issues in real time. Your AI sees the actual pod status and events rather than working from your description of what you saw in the terminal — dramatically reducing the back-and-forth when diagnosing a failed rollout.

2. Helm MCP Server — Release Management with AI Context

Helm is how most teams package and deploy Kubernetes applications, and the Helm MCP server gives your AI visibility into your installed releases — their chart versions, values overrides, revision history, and current status. Your AI can suggest value changes, diagnose upgrade failures, and help you roll back without you manually running helm history and describing the output.

Key capabilities:

  • List all Helm releases across namespaces with their status
  • Read release values and computed chart configuration
  • Browse revision history and compare release states
  • Identify drift between chart defaults and your overrides

Best for: Teams managing complex Helm deployments with many releases and custom values files. Your AI understands what's deployed and with what configuration — so it can diagnose chart upgrade failures and suggest the right values diff to fix them.

3. Argo CD MCP Server — GitOps Pipeline Visibility

Argo CD is the GitOps controller that continuously reconciles your cluster state against your Git repository. The Argo CD MCP server gives your AI access to your application sync status, health checks, and deployment history — so it can identify sync failures, explain out-of-sync resources, and help you understand why a deployment stalled without you navigating the Argo CD UI.

Key capabilities:

  • List Argo CD applications and their sync/health status
  • Read resource diffs between desired (Git) and live (cluster) state
  • Check deployment history and rollback points
  • Identify sync errors and degraded resources

Best for: Platform teams running GitOps workflows. When a sync fails at 2 AM, your AI can read the Argo CD state directly, identify the conflicting resource, and suggest the remediation without you navigating the UI half-awake.

4. Prometheus MCP Server — Metrics and Alerting Context

Prometheus powers the metrics layer for most Kubernetes clusters. The Prometheus MCP server gives your AI access to your metrics store — running instant queries, inspecting alert rules, and checking the current state of firing alerts — so it can correlate cluster events with metrics without you writing PromQL from memory.

Key capabilities:

  • Execute PromQL queries and return results directly to AI context
  • List and inspect alert rules and recording rules
  • Check currently firing alerts and their labels
  • Query target health and scrape status

Best for: SREs and platform engineers debugging performance issues. Your AI can query CPU throttling metrics, check memory usage trends, and correlate firing alerts with recent deployments — giving you root-cause analysis in a conversation rather than a PromQL tutorial.

5. Grafana MCP Server — Dashboard and Observability Access

Grafana is where most teams visualize their Kubernetes observability data. The Grafana MCP server gives your AI access to your dashboards, data sources, and annotations — so it can retrieve panel data, understand your existing alert thresholds, and help you build new dashboards based on your actual data source configuration.

Key capabilities:

  • List dashboards and retrieve panel queries and configurations
  • Query data sources and retrieve time-series data
  • Read alert rule definitions and notification channels
  • Create or update dashboard panels programmatically

Best for: Platform and operations teams building and maintaining observability dashboards. Your AI reads your existing dashboard structure and can suggest new panels that are consistent with your current data source and query patterns.

6. Docker MCP Server — Container Build and Local Dev Context

Before workloads reach Kubernetes, they run as Docker containers. The Docker MCP server gives your AI access to your local Docker environment — running containers, images, volumes, and compose services — making it easier to debug containerization issues that surface in local dev before they hit the cluster.

Key capabilities:

  • List running containers and their status
  • Read container logs and inspect environment variables
  • Browse local images and their layer structure
  • Inspect Docker Compose services and network topology

Best for: Developers building container images locally before deploying to Kubernetes. Your AI can read your Dockerfile, check your running container logs, and diagnose build failures in the context of your actual local environment.

7. Terraform MCP Server — Infrastructure-as-Code Context

Terraform manages the cloud infrastructure that Kubernetes clusters run on — VPCs, node pools, load balancers, and IAM roles. The Terraform MCP server gives your AI access to your Terraform state and configurations — so it can understand the infrastructure layer beneath your cluster and help you make changes that are consistent with your existing resource definitions.

Key capabilities:

  • Read Terraform state and understand currently managed resources
  • Inspect resource configurations and module dependencies
  • Identify drift between state and real infrastructure
  • Suggest plan outputs and changes consistent with existing patterns

Best for: Platform engineers who manage both the Kubernetes cluster and the underlying cloud infrastructure via Terraform. Your AI can reason about both layers simultaneously — understanding that a K8s node pool change requires a Terraform plan, not a kubectl command.

The Kubernetes Developer's MCP Stack

  • Cluster operations: Kubernetes MCP (live cluster state), Helm MCP (releases), Argo CD MCP (GitOps)
  • Observability: Prometheus MCP (metrics and alerts), Grafana MCP (dashboards)
  • Local dev: Docker MCP (container builds)
  • Infrastructure: Terraform MCP (cloud resources under the cluster)

With this stack, your AI reads your actual cluster state, understands your Helm releases, checks Argo CD sync status, queries Prometheus metrics, and reviews your Terraform infrastructure — all without you copy-pasting a single line of kubectl output. That's the difference between an AI that asks you to describe the problem and one that reads the cluster directly.

Related guides:

Recommended Tools

Better Stack

Free Plan

Get alerted when your APIs, browser tests, payment pipelines, or MCP server dependencies go down. Used by 100K+ developers.

Start monitoring free →

1Password

14-day Free Trial

Store and inject API keys, payment credentials, tokens, and file access secrets into your MCP server configs. Trusted by 150K+ developers.

Try 1Password free →

🔧 MCP Servers Mentioned in This Article

🔧

Kubernetes MCP Server

The Kubernetes MCP server (mcp-server-kubernetes, built by Flux159) brings cluster management capabilities into AI assistant workflows, letting developers and platform engineers query and manage Kubernetes resources through natural-language interactions with Claude, Cursor, and other MCP-compatible clients. It loads your existing kubeconfig automatically, so it works with any cluster — local minikube and kind setups, Amazon EKS, Google GKE, Azure AKS, or on-premises deployments — with no separate credential setup required. Core tools exposed by the server include: listing pods, deployments, services, and namespaces; describing individual resources and their status; fetching pod logs for debugging; applying and updating manifests; scaling deployments; checking rollout status and history; and querying resource utilization and cluster events. A built-in non-destructive mode can disable delete/scale-down operations entirely, making it safe to point at production clusters for read-only diagnostics. DevOps engineers use it to debug failing deployments by asking Claude to inspect pod logs and recent events, identify resource constraints causing OOMKilled pods, or summarize the current state of a namespace before a production release. For SREs responding to incidents, it enables rapid triage through conversational commands — no memorizing kubectl flags or switching terminal windows mid-incident — and optional OpenTelemetry integration adds observability into what the AI agent actually did against the cluster. Install with: `npx mcp-server-kubernetes`. Pairs well with the GitHub MCP server for full GitOps review workflows.

Local
🔧

Helm

Kubernetes package manager MCP server. Install, upgrade, and roll back Helm charts. Inspect release history, manage repositories, and debug chart templates.

Local
🔧

Argo CD MCP Server

the Argo CD MCP server, an Argo Project Labs implementation (argoproj-labs/mcp-for-argocd) that lets an assistant drive a live Argo CD instance in natural language over stdio or HTTP stream transport. Install it with npx argocd-mcp@latest stdio on Node 18+ and give it two things: ARGOCD_BASE_URL and ARGOCD_API_TOKEN. The tool surface is genuinely operational rather than read-only — list_applications, get_application, create_application, update_application, delete_application and sync_application for the application lifecycle; get_application_resource_tree, get_application_managed_resources, get_application_workload_logs, get_resource_events, get_resource_actions and run_resource_action for the Kubernetes objects underneath; plus list_clusters and get_appproject. get_application_workload_logs is the one that changes day-to-day work: it pulls Pod and Deployment logs for a failing app without a kubectl context, so an agent can go from 'this app is degraded' to the actual stack trace in one hop. Two configuration details cause most first-run failures. Self-signed or private-CA certificates on the Argo CD endpoint need NODE_TLS_REJECT_UNAUTHORIZED=0 in the client config, which is a development-only workaround. And the API token is deliberately never accepted as a tool-call argument — it is read only from the x-argocd-api-token header or the ARGOCD_API_TOKEN environment variable, so it never enters a prompt, model context, or tool-call log. For fleets, ARGOCD_TOKEN_REGISTRY_PATH points at a JSON file mapping each base URL to its own token; a call then targets an instance with the non-secret argocdBaseUrl argument and the server pairs it with the registered credential. The default token is bound to the default base URL and is never sent to another host, which is what stops a prompt-injected argocdBaseUrl from exfiltrating it. If the registry file is set but missing or malformed the server fails closed at startup rather than falling back. One more thing worth knowing before you expose it: the http and sse transports open a listener that reaches delete_application and run_resource_action, and ARGOCD_API_TOKEN does not protect it — that token authenticates the server to Argo CD, not the caller to the server. It binds 127.0.0.1 by default; set MCP_AUTH_TOKEN to require Authorization: Bearer on every inbound request before changing MCP_BIND_ADDRESS.

Local📘
🔧

Prometheus MCP Server

The Prometheus MCP Server lets an AI assistant drive a live Prometheus instance through the HTTP API instead of you hand-writing PromQL in the expression browser — ask it why queries got slow, what is currently firing, or which recording rules would make an SLO cheap to evaluate, and it composes and runs the queries itself. One point of provenance worth knowing before you install: this began life as tjhop/prometheus-mcp-server and was adopted into the Prometheus organisation, so that path now 301-redirects to prometheus/prometheus-mcp, while release binaries and container images are still published under the tjhop namespace. The tool surface goes far past a single query endpoint. Instant and range queries (query, range_query, exemplar_query) sit alongside discovery tools — label_names, label_values, metric_metadata, list_targets, alertmanagers — and operational ones: list_alerts, list_rules, config, flags, build_info, healthy, ready, plus TSDB admin endpoints such as clean_tombstones, delete_series, snapshot, reload, wal_replay_status and quit. It also embeds the official prometheus/docs corpus as both tools (docs_list, docs_read, docs_search) and MCP resources under prometheus://docs, so the model can cite metric-naming best practice rather than invent it. Two features exist specifically to keep long investigations inside a context window: optional TOON (Token-Oriented Object Notation) encoding of API responses in place of JSON, and a configurable response-truncation limit that capable models can override per tool call. Prometheus-compatible backends are handled explicitly rather than assumed — a --prometheus.backend flag selects an implementation, and the Thanos profile removes the tools Thanos returns 404 for (config, alertmanagers, quit, reload, the TSDB admin set) while adding list_stores. Install as a Go binary from the releases page, as a Debian/RPM system package with a bundled systemd unit, via the OCI Helm chart at oci://ghcr.io/tjhop/charts/prometheus-mcp-server, or as a container: `docker run --rm -i ghcr.io/tjhop/prometheus-mcp-server:latest --prometheus.url "https://your-prometheus:9090"` for stdio, or add `--mcp.transport http --web.listen-address ":8080"` for streamable HTTP. Every flag has a PROMETHEUS_MCP_SERVER_* environment-variable equivalent. Secured Prometheus instances are reached with a standard Prometheus http_config file via --http.config, and the MCP endpoint itself can be put behind TLS and basic auth with a Prometheus web-configuration file via --web.config.file. Read the credential-forwarding note before exposing it: over HTTP transport the server forwards each request's Authorization header to Prometheus verbatim without validating it, requests without one fall back to the default client's credentials, and basic_auth_users in the web config conflicts with that forwarding — so anyone who can reach the endpoint can query Prometheus as at least the default client.

Local
📊

Grafana MCP Server

The official Grafana MCP server connects Claude and other AI assistants directly to your Grafana instance and its surrounding observability ecosystem, turning natural-language questions into dashboard lookups, incident investigations, and datasource queries. Dashboard tools cover search, retrieval, JSONPath-scoped property extraction, patch-based editing, and per-panel query/datasource introspection, with context-window-aware helpers like get_dashboard_summary so an agent never has to pull a full multi-megabyte dashboard JSON just to answer a simple question. Query tools speak PromQL against Prometheus (including histogram-percentile helpers), LogQL against Loki, and native query languages for InfluxDB, ClickHouse, CloudWatch, Graphite, Athena, Snowflake, Elasticsearch/OpenSearch, and Quickwit datasources — most gated behind opt-in --enabled-tools flags to keep the default tool surface lean. It also wraps Grafana Incident for creating and updating incidents, Sift for automated error-pattern and slow-request investigations, full alerting CRUD (rules, contact points, notification policies) across Grafana-managed and external Alertmanager sources, Grafana OnCall schedule/shift/alert-group management, RBAC-gated admin tools for teams/users/roles, deeplink generation so the LLM never has to guess a dashboard URL, annotations, snapshots, PNG rendering via the Grafana Image Renderer, and provisioning-repo validation for git-sync workflows. Authentication is a Grafana service account token (Editor role, or granular RBAC scopes) passed as GRAFANA_SERVICE_ACCOUNT_TOKEN alongside GRAFANA_URL, and every tool category can be individually disabled to control context-window usage. On install, the recommended route is uvx: `uvx mcp-grafana` pulls the PyPI package mcp-grafana, which is published by Grafana Labs from this same repository — so despite the server being written in Go, the copy-paste command most Claude Desktop and Cursor configs use is a Python-tooling one, not a binary download. The alternatives are `go install github.com/grafana/mcp-grafana/cmd/mcp-grafana@latest` for a real binary, or the grafana/mcp-grafana container — `-t stdio` for local clients, or the default HTTP mode on :8000 (add `-t streamable-http`) with MCP_GRAFANA_SERVER_TOKEN set to authenticate callers when you expose it.

Local
🔧

Docker MCP Server

The Docker MCP server (ckreiling/mcp-server-docker) gives an AI assistant direct control of a Docker daemon over the Model Context Protocol: containers, images, networks and volumes, as tools rather than shell commands. It is the community server most people mean by "Docker MCP" — distinct from Docker’s own Docker MCP Gateway, which does not manage your containers at all but runs *other* MCP servers inside containers. If you want to ask Claude why the postgres container keeps restarting, you want this one; if you want a single secure endpoint in front of twenty catalog servers, you want the gateway. The tool surface is explicit and small enough to reason about: list_containers, create_container, run_container, recreate_container, start_container, fetch_container_logs, stop_container and remove_container for containers; list_images, pull_image, push_image, build_image and remove_image for images; list_networks / create_network / remove_network and list_volumes / create_volume / remove_volume for the rest. Two resource templates, docker://containers/{id}/logs and docker://containers/{id}/stats, let a client read logs and live stats by container ID or name without a tool call. It also ships a docker_compose prompt that puts the model into a plan-then-apply loop — you describe the containers you want under a project name, the model proposes a concise plan, and nothing runs until you approve it; reopening the prompt with the same project name re-reads the state of everything created under it, which is how you clean up after a lost chat. It runs on the Python Docker SDK’s from_env, so DOCKER_HOST applies: set ssh://user@host and the same server administers a remote engine. Two limits are deliberate and stated by the project — privileged options like --privileged and --cap-add/--cap-drop are not supported, and container configuration passes through the model, so no secrets belong in it.

Local📘
🔧

Terraform MCP Server

live Terraform Registry data — provider schemas, module inputs and outputs, policy libraries — plus full HCP Terraform and Terraform Enterprise workspace management, so an AI assistant writes HCL against the real resource arguments instead of inventing attribute names from memory. HashiCorp distributes it as a Go binary and a Docker image, not as an npm package: `@hashicorp/terraform-mcp-server` returns 404 on the npm registry, so npx configurations copied from older write-ups cannot work. The supported install is the hashicorp/terraform-mcp-server image on Docker Hub (v1.1.0, released 2026-07-14), run with `docker run -i --rm hashicorp/terraform-mcp-server:1.1.0`, or the release binary invoked as `terraform-mcp-server stdio`. Both transports are supported: stdio for local clients, and streamable-http via `terraform-mcp-server streamable-http --transport-port 8080 --mcp-endpoint /mcp` for shared deployments. Registry lookups need no credentials at all — only the HCP Terraform and Terraform Enterprise tools do, via TFE_TOKEN plus TFE_ADDRESS (which must include the protocol, e.g. https://app.terraform.io, and in streamable-http mode can only be set as an environment variable, never supplied by a client header). Two flags matter before you expose it to a team: ENABLE_TF_OPERATIONS is false by default and gates the tools that mutate infrastructure, and the HTTP server defaults to strict CORS with 10:20 global and 5:10 per-session rate limits, an MCP_ORGANIZATION_ALLOWLIST for restricting which HCP organisations can connect, and required MCP_TLS_CERT_FILE / MCP_TLS_KEY_FILE for any non-localhost bind. Server instructions live in cmd/terraform-mcp-server/instructions.md and are meant to be replaced with your own conventions if the default answers do not match how your organisation writes Terraform.

Local

📚 More from the Blog