Model Context Protocol moderate risk

K8m

K8m is a lightweight, AI-driven Kubernetes dashboard with multi-cluster management, MCP integration, and AI-powered features, designed for simplified cluster administration.

Connections & Capabilities

Connects To

GitHubPostgreSQLMySQLSQLiteDockerKubernetesAWS

Capabilities

readwriteexecadmin

Quickstart

Install

brew install kind

Exposed MCP Tools (5)

high

kubectl apply

Applies a configuration to a resource by filename or stdin.

Can modify cluster state based on provided YAML.

critical

kubectl delete

Deletes Kubernetes resources.

Permanently removes resources from the cluster.

critical

kubectl exec

Executes a command inside a container.

Provides shell access to the container's filesystem and network.

safe

kubectl logs

Fetches logs from a pod.

Read-only operation, no cluster modification.

safe

kubectl describe

Displays detailed information about a resource.

Read-only operation, no cluster modification.

Safety Assessment

K8m offers a balance of convenience and risk. While it provides features like multi-cluster management and AI-driven insights, its ability to execute shell commands and manage pod files requires careful permission management to prevent unintended consequences. The MCP integration further extends its capabilities, demanding a thorough understanding of the underlying tools and their potential impact.

Multi-cluster permission management with namespace black/whitelisting.
MCP integration allows for controlled access to cluster operations.
Supports read-only access at the cluster level.
User authentication required for access.

Includes capabilities for executing shell commands within pods.
MCP integration allows for potentially destructive operations if not properly configured.
Direct access to pod files (browse, edit, upload, download, delete) increases risk.
Potential for privilege escalation if user permissions are misconfigured.