Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.apatilgtn/k8scortex-mcp

NPM · K8SCORTEX-MCP · SCANNED SEP 20

Kubernetes MCP server: 75 tools for GKE, AKS, EKS, RBAC, audit logging, GitOps, multi-cluster.

Available components

0 this week 79 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 53 of 168 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability69
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 5686 tokens (~75/item across 75 items; 75 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management80
  • Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 4 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "restart_pod" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 75 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the io.github.apatilgtn/k8scortex-mcp server?

io.github.apatilgtn/k8scortex-mcp runs locally as an npm package, launched with npx -y k8scortex-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · k8scortex-mcp

# add to Claude Code
claude mcp add apatilgtn-k8scortex-mcp -- npx -y k8scortex-mcp
// .cursor/mcp.json
{
  "mcpServers": {
    "apatilgtn-k8scortex-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "k8scortex-mcp"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "apatilgtn-k8scortex-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "k8scortex-mcp"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add apatilgtn-k8scortex-mcp -- npx -y k8scortex-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "apatilgtn-k8scortex-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "k8scortex-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add apatilgtn-k8scortex-mcp --command npx --arg -y --arg k8scortex-mcp
# ~/.hermes/config.yaml
mcp_servers:
  apatilgtn-k8scortex-mcp:
    command: "npx"
    args: ["-y", "k8scortex-mcp"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "apatilgtn-k8scortex-mcp": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "k8scortex-mcp"
      ]
    }
  }
}
# add to Vellum
assistant mcp add apatilgtn-k8scortex-mcp -t stdio -c npx -a -y k8scortex-mcp
// mcp.json
{
  "mcpServers": {
    "apatilgtn-k8scortex-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "k8scortex-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 20 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 77 to 80. That category is still filling its 30-day observation window: 23 days of observed history at the previous scan, 24 at this one. The score rises as the window fills, whether or not the server changes.

  • 19 Sept 26 −3
    • Stability: pass → 0.77 functional
  • 18 Sept 26 0
    • Stability: 0.97 → pass security
  • 17 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 14 Sept 26 +1
    • Security disclosure: unverified → fail functional
  • 13 Sept 26 0
    • Security disclosure: fail → unverified functional
  • 12 Sept 26 −2
    • Stability: pass → 0.80 functional
  • 11 Sept 26 0
    • Stability: 0.97 → pass security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed npm/k8scortex-mcp@1.0.2

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Dependencies 168 packages
Packages resolved 168
Stale 53
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 75 exposed · ~5,686 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
compare_clusters ~94

Compares the running version/state of an application across two clusters.

NameTypeReqDescription
appNamestringyesThe name of the application/kustomization
clusterAstringyesFirst cluster to compare
clusterBstringyesSecond cluster to compare
enginestringyesGitOps engine ('argocd' or 'flux')
namespacestringyesThe namespace of the application/kustomization

No output schema declared.

No examples provided.

cordon_node ~63

Marks a node as unschedulable.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
dryRunbooleanIf true, simulates the action
nodeNamestringyesName of the node to cordon

No output schema declared.

No examples provided.

create_configmap ~120

Creates a new ConfigMap. Use either basic key-value data or provide a raw YAML manifest.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
configMapNamestringThe name of the ConfigMap to create
dataobjectKey-value string pairs for the ConfigMap data
dryRunbooleanIf true, simulates the action without making changes
namespacestringyesThe Kubernetes namespace
yamlManifeststringFull YAML manifest for advanced ConfigMap creation

No output schema declared.

No examples provided.

create_deployment ~145

Creates a new Deployment. Use either basic configuration or provide a raw YAML manifest.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
deploymentNamestringThe name of the deployment to create
dryRunbooleanIf true, simulates the action without making changes
imagestringContainer image to run (if using basic config)
namespacestringyesThe Kubernetes namespace
portnumberContainer port to expose (if using basic config)
replicasnumberNumber of replicas (if using basic config)
yamlManifeststringFull YAML manifest for advanced deployment creation

No output schema declared.

No examples provided.

create_horizontal_pod_autoscaler ~165

Creates an HPA for a Deployment. Use either basic configuration or provide a raw YAML manifest.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
dryRunbooleanIf true, simulates the action without making changes
hpaNamestringThe name of the HPA to create
maxReplicasnumberMaximum number of replicas
minReplicasnumberMinimum number of replicas
namespacestringyesThe Kubernetes namespace
targetCPUUtilizationPercentagenumberTarget CPU utilization percentage
targetDeploymentstringThe name of the target Deployment to scale
yamlManifeststringFull YAML manifest for advanced HPA creation

No output schema declared.

No examples provided.

create_job ~128

Creates a new Job. Use either basic configuration or provide a raw YAML manifest.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
commandarrayCommand to run (if using basic config)
dryRunbooleanIf true, simulates the action without making changes
imagestringContainer image to run (if using basic config)
jobNamestringThe name of the job to create
namespacestringyesThe Kubernetes namespace
yamlManifeststringFull YAML manifest for advanced job creation

No output schema declared.

No examples provided.

create_namespace ~62

Creates a new Kubernetes Namespace.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
dryRunbooleanIf true, simulates the action without making changes
namespaceNamestringyesThe name of the namespace to create

No output schema declared.

No examples provided.

create_network_policy ~133

Creates a new NetworkPolicy. Use either basic configuration or provide a raw YAML manifest.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
dryRunbooleanIf true, simulates the action without making changes
namespacestringyesThe Kubernetes namespace
podSelectorobjectLabel selector for the pods this policy applies to
policyNamestringThe name of the NetworkPolicy
policyTypesarrayList of policy types (Ingress, Egress)
yamlManifeststringFull YAML manifest for advanced NetworkPolicy creation

No output schema declared.

No examples provided.

create_secret ~129

Creates a new Opaque Secret. Use either basic stringData or provide a raw YAML manifest. stringData values will be base64-encoded automatically.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
dryRunbooleanIf true, simulates the action without making changes
namespacestringyesThe Kubernetes namespace
secretNamestringThe name of the Secret to create
stringDataobjectPlain text key-value pairs. Will be encoded automatically.
yamlManifeststringFull YAML manifest for advanced Secret creation

No output schema declared.

No examples provided.

create_service ~162

Creates a new Service. Use either basic configuration or provide a raw YAML manifest.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
dryRunbooleanIf true, simulates the action without making changes
namespacestringyesThe Kubernetes namespace
portnumberPort the service exposes
selectorobjectLabel selector for the pods (e.g. { app: 'my-app' })
serviceNamestringThe name of the Service to create
targetPortnumberTarget port on the pod
typestringService type (ClusterIP, NodePort, LoadBalancer)
yamlManifeststringFull YAML manifest for advanced Service creation

No output schema declared.

No examples provided.

delete_deployment ~72

Deletes an existing Deployment.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
deploymentNamestringyesThe name of the deployment to delete
dryRunbooleanIf true, simulates the action without making changes
namespacestringyesThe Kubernetes namespace

No output schema declared.

No examples provided.

delete_namespace ~62

Deletes an existing Kubernetes Namespace.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
dryRunbooleanIf true, simulates the action without making changes
namespaceNamestringyesThe name of the namespace to delete

No output schema declared.

No examples provided.

describe_daemonset ~59

Shows details of a DaemonSet.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
daemonSetNamestringyesThe name of the DaemonSet
namespacestringyesThe Kubernetes namespace

No output schema declared.

No examples provided.

describe_deployment ~53

Shows details of a deployment.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
deploymentNamestringyesThe name of the deployment
namespacestringyesThe Kubernetes namespace

No output schema declared.

No examples provided.

describe_namespace_quota ~42

Reads resource quotas for a namespace.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringyesThe Kubernetes namespace

No output schema declared.

No examples provided.

describe_pod ~64

Shows detailed pod status including container states, conditions, resource settings, and recent events.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringyesThe Kubernetes namespace
podNamestringyesThe name of the pod

No output schema declared.

No examples provided.

describe_statefulset ~58

Shows details of a StatefulSet.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringyesThe Kubernetes namespace
statefulSetNamestringyesThe name of the StatefulSet

No output schema declared.

No examples provided.

drain_node ~78

Cordons the node and evicts/deletes non-daemonset pods.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
dryRunbooleanIf true, simulates the action
forcebooleanForce deletion of pods
nodeNamestringyesName of the node to drain

No output schema declared.

No examples provided.

get_addon_health ~46

Checks health of common kube-system addons (CoreDNS, metrics-server, kube-proxy, CNI).

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')

No output schema declared.

No examples provided.

get_cluster_info ~47

Returns API server URL, Kubernetes version, node count, and cloud metadata for a given cluster.

NameTypeReqDescription
clusterstringyesThe registered cluster name (e.g. prod-aks-au)

No output schema declared.

No examples provided.

get_cluster_resource_utilisation ~37

Returns CPU and Memory usage vs capacity across all nodes.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')

No output schema declared.

No examples provided.

get_configmap ~56

Reads data from a ConfigMap.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
configMapNamestringyesThe name of the ConfigMap
namespacestringyesThe Kubernetes namespace

No output schema declared.

No examples provided.

get_effective_permissions ~70

Evaluates effective Kubernetes API permissions for a ServiceAccount using SubjectAccessReview checks.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringyesThe Kubernetes namespace of the ServiceAccount
serviceAccountNamestringyesThe ServiceAccount name to inspect

No output schema declared.

No examples provided.

get_flux_helm_release ~68

Gets detailed status of a Flux HelmRelease including chart version, values, and condition history.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namestringyesName of the HelmRelease
namespacestringyesNamespace of the HelmRelease

No output schema declared.

No examples provided.

get_gitops_app_status ~93

Gets the health and sync status of an ArgoCD Application or Flux Kustomization.

NameTypeReqDescription
appNamestringyesThe name of the application/kustomization
clusterstringTarget cluster name (default: 'default')
enginestringyesGitOps engine ('argocd' or 'flux')
namespacestringyesThe namespace of the application/kustomization

No output schema declared.

No examples provided.

get_gitops_diff ~97

Gets out-of-sync resources (ArgoCD) or managed resource inventory with revision drift (Flux Kustomization).

NameTypeReqDescription
appNamestringyesThe name of the application/kustomization
clusterstringTarget cluster name (default: 'default')
enginestringyesGitOps engine ('argocd' or 'flux')
namespacestringyesThe namespace of the application/kustomization

No output schema declared.

No examples provided.

get_hpa_status ~59

Retrieves Horizontal Pod Autoscaler metrics and status.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
hpaNamestringyesThe name of the HPA
namespacestringyesThe Kubernetes namespace

No output schema declared.

No examples provided.

get_k8s_resource ~140

Generic read: get a single Kubernetes resource by group/version/resource/name.

NameTypeReqDescription
apiGroupstringAPI group (e.g. 'apps', 'rbac.authorization.k8s.io'). Use '' or 'core' for core/v1 resources.
clusterstringTarget cluster name (default: 'default')
namestringyesResource name
namespacestringNamespace for namespaced resources
namespacedbooleanWhether the target resource is namespaced
resourcestringyesPlural resource name
versionstringyesAPI version (e.g. 'v1')

No output schema declared.

No examples provided.

get_node_pool_detail ~55

Returns detailed node, spot/preemptible, and optional metrics view for a specific node pool.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
poolNamestringyesNode pool name

No output schema declared.

No examples provided.

get_node_pressure ~48

Analyzes node resource pressure for a specific node.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
nodeNamestringyesThe name of the node

No output schema declared.

No examples provided.

get_pdb_status ~57

Returns detailed status and covered pods for a PodDisruptionBudget.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringyesNamespace
pdbNamestringyesPDB name

No output schema declared.

No examples provided.

get_pod_logs ~91

Retrieves logs for a specific pod.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
containerNamestringOptional: specific container name for multi-container pods
namespacestringyesThe Kubernetes namespace
podNamestringyesThe name of the pod
tailLinesnumberNumber of lines to tail from the end of the logs

No output schema declared.

No examples provided.

get_resource_recommendations ~63

Suggests optimal resource requests/limits based on current metrics heuristically.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
deploymentNamestringyesThe name of the Deployment
namespacestringyesThe Kubernetes namespace

No output schema declared.

No examples provided.

get_service_endpoints ~52

Shows endpoint addresses backing a Service.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringyesThe Kubernetes namespace
serviceNamestringyesService name

No output schema declared.

No examples provided.

get_storage_class ~44

Returns details for a specific StorageClass.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
storageClassNamestringyesStorageClass name

No output schema declared.

No examples provided.

get_vpa_recommendation ~64

Returns VPA recommendation lower/target/upper bounds for a workload when available.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringyesNamespace
vpaNamestringyesVPA object name

No output schema declared.

No examples provided.

get_workload_identity_config ~66

Returns workload identity annotation configuration for a ServiceAccount (AKS/EKS/GKE conventions).

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringyesServiceAccount namespace
serviceAccountNamestringyesServiceAccount name

No output schema declared.

No examples provided.

list_clusters ~20

Lists all registered Kubernetes clusters managed by KubeNexus.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_cronjobs ~43

Lists CronJobs in a specific namespace.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringyesThe Kubernetes namespace

No output schema declared.

No examples provided.

list_daemonsets ~44

Lists DaemonSets in a specific namespace.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringyesThe Kubernetes namespace

No output schema declared.

No examples provided.

list_events ~41

Lists recent cluster events for a namespace.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringyesThe Kubernetes namespace

No output schema declared.

No examples provided.

list_flux_alerts ~54

Lists Flux Notification Alert objects showing which events trigger which providers.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringNamespace to list Alerts in (omit for all namespaces)

No output schema declared.

No examples provided.

list_flux_helm_releases ~67

Lists all Flux HelmReleases in a namespace with chart name, version, and ready/suspended status.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringNamespace to list HelmReleases in (omit for all namespaces)

No output schema declared.

No examples provided.

list_flux_kustomizations ~63

Lists all Flux Kustomizations in a namespace with their ready/suspended/revision status.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringNamespace to list Kustomizations in (omit for all namespaces)

No output schema declared.

No examples provided.

list_flux_sources ~101

Lists Flux source objects (GitRepository, HelmRepository, OCIRepository, Bucket) with their URL, ref, and ready status.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringNamespace to list sources in (omit for all namespaces)
sourceTypestringSource kind: 'gitrepository' | 'helmrepository' | 'ocirepository' | 'bucket' (omit for all)

No output schema declared.

No examples provided.

list_ingresses ~42

Lists Ingress resources in a namespace.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringyesThe Kubernetes namespace

No output schema declared.

No examples provided.

list_jobs ~40

Lists Jobs in a specific namespace.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringyesThe Kubernetes namespace

No output schema declared.

No examples provided.

list_k8s_resources ~159

Generic read: list Kubernetes resources by group/version/resource.

NameTypeReqDescription
apiGroupstringAPI group (e.g. 'apps', 'rbac.authorization.k8s.io'). Use '' or 'core' for core/v1 resources.
clusterstringTarget cluster name (default: 'default')
labelSelectorstringOptional label selector
namespacestringNamespace for namespaced resources
namespacedbooleanWhether the target resource is namespaced
resourcestringyesPlural resource name (e.g. 'statefulsets', 'daemonsets', 'persistentvolumeclaims', 'roles')
versionstringyesAPI version (e.g. 'v1')

No output schema declared.

No examples provided.

list_limit_ranges ~44

Lists LimitRange objects in a namespace and default resource constraints.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')
namespacestringyesNamespace

No output schema declared.

No examples provided.

list_node_pools ~46

Groups nodes by managed-cloud node pool labels (AKS/EKS/GKE) and reports pool health.

NameTypeReqDescription
clusterstringTarget cluster name (default: 'default')

No output schema declared.

No examples provided.

Common questions

What is the io.github.apatilgtn/k8scortex-mcp server?

io.github.apatilgtn/k8scortex-mcp is listed in the public MCP registry as io.github.apatilgtn/k8scortex-mcp. Kubernetes MCP server: 75 tools for GKE, AKS, EKS, RBAC, audit logging, GitOps, multi-cluster. This page covers its npm package (k8scortex-mcp).

Is the io.github.apatilgtn/k8scortex-mcp server safe to use?

io.github.apatilgtn/k8scortex-mcp scores 79 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.apatilgtn/k8scortex-mcp server expose?

io.github.apatilgtn/k8scortex-mcp exposes 75 tools: list_pods, get_pod_logs, describe_pod, describe_deployment, list_nodes, and 70 more. Their descriptions and schemas cost roughly 5,686 tokens of context every time the server is loaded.

Is the io.github.apatilgtn/k8scortex-mcp server still maintained?

io.github.apatilgtn/k8scortex-mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the io.github.apatilgtn/k8scortex-mcp server under?

io.github.apatilgtn/k8scortex-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.