io.github.SCGIS-Wales/helm-mcp
OCI · GHCR.IO/SCGIS-WALES/HELM-MCP · 2 COMPONENTS
The full Helm CLI surface as 46 MCP tools, backed by the Helm v3 and v4 Go SDKs.
Available components
+3 this week
41 41 Trust /100
Last scanned (16 hours ago)
Scores higher than 52% of OCI servers
Category Cloud Infrastructure
Trust breakdown (7 categories)
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security0
- No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
- Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
- Install-script risk not yet assessed.Unverified
- Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 13 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability51
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 15167 tokens (~329/item across 46 items; 46 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management33
- Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (24% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 47 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
Changelog
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 22 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 20 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Oct 26 +1
- Stability: unverified → 0.10 ▲ functional
- 14 Oct 26 +27
- Injection markers: unverified → pass ▲ security
- First check of Judged manipulation: pass security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- Tool coverage: unverified → 100 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- First check of Destructive annotations: 100 functional
- First check of Tool coverage: 100 functional
- First check of Schema quality: good functional
- First check of Schema quality: fail functional
- First check of Tool coverage: 24 functional
- First check of Schema quality: fail functional
- 11 Oct 26 10
First indexed and scored.
Diagnostics
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 24 Oct 2026 · Analysed oci/ghcr.io/scgis-wales/helm-mcp@0.5.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | oci |
| Reason | No attestation published |
Background: How many MCP packages publish verified provenance →
MCP tools
· 46 exposed
· ~14,933 tokens
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
Tool
Tokens
helm_create Scaffold a new chart ~254
Create a new Helm chart with the given name, optionally from a starter chart.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| name | string | yes | Name of the chart to create; may be a path, in which case the last element is the chart name |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| starter | string | – | Starter chart: a name under $HELM_DATA_HOME/starters or an absolute path |
No output schema declared.
No examples provided.
helm_dependency_build Build chart dependencies ~241
Build out the charts/ directory from Chart.lock.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| chart_path | string | yes | Path to the chart directory |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| keyring | string | – | Keyring path |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| skip_refresh | boolean | – | Skip refreshing repository cache |
| verify | boolean | – | Verify dependencies |
No output schema declared.
No examples provided.
helm_dependency_list List chart dependencies ~206
List the dependencies for a chart.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| chart_path | string | yes | Path to the chart directory |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
No output schema declared.
No examples provided.
helm_dependency_update Update chart dependencies ~240
Update charts/ based on Chart.yaml contents.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| chart_path | string | yes | Path to the chart directory |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| keyring | string | – | Keyring path |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| skip_refresh | boolean | – | Skip refreshing repository cache |
| verify | boolean | – | Verify dependencies |
No output schema declared.
No examples provided.
helm_env Show Helm environment ~196
Print Helm environment information (paths, settings, etc.).
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| Name | Type | Req | Description |
|---|---|---|---|
| environment | object | – | – |
No examples provided.
helm_get_all Get all release data ~224
Get all information (values, manifest, hooks, notes) for a release.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| release_name | string | yes | Name of the release |
| revision | integer | – | Release revision number |
No output schema declared.
No examples provided.
helm_get_hooks Get release hooks ~215
Get all hooks for a release.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| release_name | string | yes | Name of the release |
| revision | integer | – | Release revision number |
No output schema declared.
No examples provided.
helm_get_manifest Get release manifest ~216
Get the Kubernetes manifest for a release.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| release_name | string | yes | Name of the release |
| revision | integer | – | Release revision number |
No output schema declared.
No examples provided.
helm_get_metadata Get release metadata ~214
Get metadata for a release.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| release_name | string | yes | Name of the release |
| revision | integer | – | Release revision number |
| Name | Type | Req | Description |
|---|---|---|---|
| metadata | null|object | – | – |
No examples provided.
helm_get_notes Get release notes ~215
Get the notes for a release.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| release_name | string | yes | Name of the release |
| revision | integer | – | Release revision number |
No output schema declared.
No examples provided.
helm_get_values Get release values ~233
Get the values for a release. Use all=true to include computed values.
| Name | Type | Req | Description |
|---|---|---|---|
| all | boolean | – | Include computed values |
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| release_name | string | yes | Name of the release |
| revision | integer | – | Release revision number |
| Name | Type | Req | Description |
|---|---|---|---|
| values | object | – | – |
No examples provided.
helm_history Release history ~219
Show the revision history of a Helm release.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| max | integer | – | Maximum number of revisions to return |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| release_name | string | yes | Name of the release |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| revisions | null|array | – | – |
No examples provided.
helm_install Install a release ~1,133
Install a Helm chart as a new release. Supports both local charts and repository charts.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| ca_file | string | – | CA bundle to verify the chart repository or registry certificate |
| cert_file | string | – | Client certificate for the chart repository or registry |
| chart | string | yes | Chart reference (name or path or URL) |
| create_namespace | boolean | – | Create namespace if not present |
| debug | boolean | – | Enable debug output |
| dependency_update | boolean | – | Update dependencies before install |
| description | string | – | Custom release description |
| devel | boolean | – | Allow development chart versions (alpha/beta/rc) to satisfy the version constraint |
| disable_hooks | boolean | – | Disable pre/post hooks |
| disable_openapi_validation | boolean | – | Skip validating rendered manifests against the Kubernetes OpenAPI schema |
| dry_run | string | – | Dry run strategy: none client or server |
| enable_dns | boolean | – | Allow DNS lookups from templates via the getHostByName function |
| force_conflicts | boolean | – | Take ownership of fields owned by other managers during server-side apply (v4 only) |
| force_replace | boolean | – | Replace resources by delete and recreate when an update is needed (helm --force-replace; --force on v3) |
| generate_name | boolean | – | Auto-generate release name |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| hide_notes | boolean | – | Omit NOTES.txt from the output |
| hide_secret | boolean | – | Hide Secret contents in dry-run output; requires dry_run |
| include_crds | boolean | – | Include CRDs in rendering |
| insecure_skip_tls_verify | boolean | – | Skip TLS certificate checks when downloading the chart (insecure) |
| key_file | string | – | Client key for the chart repository or registry |
| keyring | string | – | Public keyring used by verify |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| labels | object | – | Labels to add to release metadata |
| name_template | string | – | Go template for name generation |
| namespace | string | – | Kubernetes namespace |
| output_dir | string | – | Write rendered manifests to this directory instead of only applying them |
| pass_credentials | boolean | – | Send the credentials to every domain the chart download is redirected to |
| password | string | – | Password for the chart repository or OCI registry |
| plain_http | boolean | – | Use plain HTTP to reach an OCI registry (insecure) |
| post_renderer | string | – | Name of an installed post-renderer plugin applied to the rendered manifests (v4 only) |
| post_renderer_args | null|array | – | Arguments passed to the post-renderer plugin (v4 only) |
| qps | number | – | Client-side QPS rate limit |
| release_name | string | yes | Name of the release |
| replace | boolean | – | Re-use a release name |
| repo | string | – | Chart repository URL to look the chart up in, instead of a configured repo (helm --repo) |
| rollback_on_failure | boolean | – | Roll the release back automatically if the install fails (helm --atomic) |
| server_side_apply | null|boolean | – | Apply with Kubernetes server-side apply. Defaults to true on v4, as in helm install; false forces client-side apply. v4 only |
| set_file | null|array | – | Values as key=path pairs; each value is the content of that local file (helm --set-file) |
| set_literal | null|array | – | Values as key=value pairs, taken literally with no escaping or splitting (helm --set-literal) |
| set_string | null|array | – | Values as key=value pairs, always treated as strings (helm --set-string) |
| skip_crds | boolean | – | Skip CRD installation |
| skip_schema_validation | boolean | – | Skip validation of values against the chart's values.schema.json |
| sub_notes | boolean | – | Also render the NOTES.txt of subcharts |
| take_ownership | boolean | – | Adopt existing resources that lack Helm ownership annotations |
| timeout | string | – | Timeout duration (e.g. 5m0s) |
| use_release_name | boolean | – | Prefix files written to output_dir with the release name |
| username | string | – | Username for the chart repository or OCI registry |
| values | object | – | Inline values, deep-merged over values_files (equivalent to --set) |
| values_files | null|array | – | Paths to values files |
| verify | boolean | – | Verify the chart provenance (.prov) against the keyring before using it |
| version | string | – | Chart version constraint |
| wait | boolean | – | Wait for resources to be ready |
| wait_for_jobs | boolean | – | Wait for jobs to complete |
| wait_strategy | string | – | How to wait for resources: watcher (kstatus), legacy, or hookOnly. Overrides wait. v4 only |
No output schema declared.
No examples provided.
helm_lint Lint a chart ~331
Lint a Helm chart for possible issues and best practices.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kube_version | string | – | Kubernetes version to lint against (e.g. 1.34.0) |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| paths | null|array | – | Chart paths to lint (default: current directory) |
| qps | number | – | Client-side QPS rate limit |
| quiet | boolean | – | Only show warnings and errors |
| skip_schema_validation | boolean | – | Skip validation of values against the chart's values.schema.json |
| strict | boolean | – | Treat warnings as errors |
| values | object | – | Inline values, deep-merged over values_files |
| values_files | null|array | – | Values files |
| with_subcharts | boolean | – | Also lint the subcharts under each chart's charts/ directory |
No output schema declared.
No examples provided.
helm_list List releases ~413
List Helm releases. Shows deployed releases by default. Use filter flags to show other statuses.
| Name | Type | Req | Description |
|---|---|---|---|
| all | boolean | – | Show releases in every state, ignoring the individual status filters |
| all_namespaces | boolean | – | List releases across all namespaces |
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| deployed | boolean | – | Show deployed releases |
| failed | boolean | – | Show failed releases |
| filter | string | – | Regular expression filter on release name |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| limit | integer | – | Maximum number of releases to return |
| namespace | string | – | Kubernetes namespace |
| offset | integer | – | Number of releases to skip |
| pending | boolean | – | Show pending releases |
| qps | number | – | Client-side QPS rate limit |
| selector | string | – | Label selector filter (v4 only) |
| sort_by | string | – | Sort by: name or date |
| sort_reverse | boolean | – | Reverse the sort order |
| superseded | boolean | – | Show superseded releases |
| time_format | string | – | Go time layout used to format the last-updated timestamp (e.g. 2006-01-02) |
| uninstalled | boolean | – | Show uninstalled releases |
| uninstalling | boolean | – | Show releases that are currently being uninstalled |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| releases | null|array | – | – |
No examples provided.
helm_package Package a chart ~300
Package a chart directory into a versioned chart archive (.tgz).
| Name | Type | Req | Description |
|---|---|---|---|
| app_version | string | – | Override app version |
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| dependency_update | boolean | – | Update dependencies before packaging |
| destination | string | – | Output directory |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| key | string | – | Signing key name |
| keyring | string | – | Keyring path |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| passphrase_file | string | – | File holding the signing key passphrase |
| path | string | yes | Path to the chart directory |
| qps | number | – | Client-side QPS rate limit |
| sign | boolean | – | Sign the package |
| version | string | – | Override chart version |
No output schema declared.
No examples provided.
helm_plugin_install Install a plugin ~272
Install a Helm plugin.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| keyring | string | – | Public keyring used to verify the plugin signature (v4 only) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| url_or_path | string | yes | Plugin URL or local path |
| verify | null|boolean | – | Verify the plugin signature before installing. Defaults to true on v4; set false for unsigned plugins such as helm-diff. v4 only |
| version | string | – | Plugin version |
No output schema declared.
No examples provided.
helm_plugin_list List plugins ~191
List installed Helm plugins.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| plugins | null|array | – | – |
No examples provided.
helm_plugin_package Package a plugin ~328
Package a Helm plugin directory into a distributable archive, signing it with a PGP key by default. Requires helm_version v4.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| destination | string | – | Directory to write the plugin tarball to (default: current directory) |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| key | string | – | Name of the PGP key to sign with |
| keyring | string | – | Path to the keyring containing the signing key |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| no_sign | boolean | – | Skip PGP signing. Signing is on by default and is recommended for any plugin you intend to distribute |
| passphrase_file | string | – | Path to a file holding the signing key passphrase |
| plugin_path | string | yes | Path to the plugin directory to package |
| qps | number | – | Client-side QPS rate limit |
No output schema declared.
No examples provided.
helm_plugin_uninstall Uninstall a plugin ~202
Uninstall a Helm plugin.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| name | string | yes | Plugin name |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
No output schema declared.
No examples provided.
helm_plugin_update Update a plugin ~200
Update a Helm plugin.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| name | string | yes | Plugin name |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
No output schema declared.
No examples provided.
helm_plugin_verify Verify plugin signature ~242
Verify that a packaged Helm plugin has been signed and that its provenance is valid. Requires helm_version v4.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| keyring | string | – | Path to the keyring containing the trusted public keys |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| plugin_path | string | yes | Path to the packaged plugin archive to verify |
| qps | number | – | Client-side QPS rate limit |
No output schema declared.
No examples provided.
helm_pull Download a chart ~476
Download a chart from a repository or OCI registry.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| ca_file | string | – | CA bundle to verify the chart repository or registry certificate |
| cert_file | string | – | Client certificate for the chart repository or registry |
| chart | string | yes | Chart reference to pull |
| debug | boolean | – | Enable debug output |
| destination | string | – | Output directory |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| insecure_skip_tls_verify | boolean | – | Skip TLS certificate checks when downloading the chart (insecure) |
| key_file | string | – | Client key for the chart repository or registry |
| keyring | string | – | Public keyring used by verify |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| pass_credentials | boolean | – | Send the credentials to every domain the chart download is redirected to |
| password | string | – | Password for the chart repository or OCI registry |
| plain_http | boolean | – | Use plain HTTP to reach an OCI registry (insecure) |
| prov | boolean | – | Also download the provenance (.prov) file without verifying it (helm pull --prov) |
| qps | number | – | Client-side QPS rate limit |
| repo | string | – | Chart repository URL to look the chart up in, instead of a configured repo (helm --repo) |
| untar | boolean | – | Untar the chart after download |
| untar_dir | string | – | Directory to untar into |
| username | string | – | Username for the chart repository or OCI registry |
| verify | boolean | – | Verify the chart provenance (.prov) against the keyring before using it |
| version | string | – | Chart version |
No output schema declared.
No examples provided.
helm_push Push a chart to a registry ~260
Push a chart archive to an OCI registry.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| ca_file | string | – | CA bundle file |
| cert_file | string | – | TLS client certificate |
| chart_ref | string | yes | Chart archive to push |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| key_file | string | – | TLS client key |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| plain_http | boolean | – | Use plain HTTP |
| qps | number | – | Client-side QPS rate limit |
| remote | string | yes | OCI registry URL |
No output schema declared.
No examples provided.
helm_registry_login Log in to an OCI registry ~295
Login to an OCI registry for chart storage.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| ca_file | string | – | CA bundle to verify the registry certificate |
| cert_file | string | – | Client certificate for mutual TLS |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| hostname | string | yes | Registry hostname |
| insecure | boolean | – | Skip TLS certificate verification for the registry (insecure) |
| key_file | string | – | Client key for mutual TLS |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| password | string | – | Password |
| plain_http | boolean | – | Use plain HTTP instead of HTTPS (insecure) |
| qps | number | – | Client-side QPS rate limit |
| username | string | – | Username |
No output schema declared.
No examples provided.
helm_registry_logout Log out of an OCI registry ~201
Logout from an OCI registry.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| hostname | string | yes | Registry hostname |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
No output schema declared.
No examples provided.
helm_repo_add Add a repository ~305
Add a chart repository.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| ca_file | string | – | CA bundle file |
| cert_file | string | – | Client certificate for mutual TLS |
| debug | boolean | – | Enable debug output |
| force_update | boolean | – | Replace existing entry |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| insecure_skip_tls | boolean | – | Skip TLS verification |
| key_file | string | – | Client key for mutual TLS |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| name | string | yes | Repository name |
| namespace | string | – | Kubernetes namespace |
| pass_credentials | boolean | – | Send the credentials to every domain the repository redirects to |
| password | string | – | Repository password |
| qps | number | – | Client-side QPS rate limit |
| url | string | yes | Repository URL |
| username | string | – | Repository username |
No output schema declared.
No examples provided.
helm_repo_index Generate a repository index ~234
Generate an index file for a directory of chart archives.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| directory | string | yes | Directory containing packaged charts |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| merge | string | – | Path to existing index to merge into |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| url | string | – | URL of the chart repository |
No output schema declared.
No examples provided.
helm_repo_list List repositories ~191
List configured chart repositories.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| repositories | null|array | – | – |
No examples provided.
helm_repo_remove Remove repositories ~203
Remove chart repositories.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| names | null|array | yes | Repository names to remove |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
No output schema declared.
No examples provided.
helm_repo_update Update repository indexes ~208
Update chart repository indexes.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| names | null|array | – | Repository names to update (all if empty) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
No output schema declared.
No examples provided.
Install
How do I install the io.github.SCGIS-Wales/helm-mcp server?
io.github.SCGIS-Wales/helm-mcp runs locally as a container image, launched with docker run --rm -i ghcr.io/scgis-wales/helm-mcp:0.5.0. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.
oci · ghcr.io/scgis-wales/helm-mcp
# add to Claude Code
claude mcp add scgis-wales-helm-mcp -- docker run --rm -i ghcr.io/scgis-wales/helm-mcp:0.5.0
Common questions
What is the io.github.SCGIS-Wales/helm-mcp server?
io.github.SCGIS-Wales/helm-mcp is listed in the public MCP registry as io.github.SCGIS-Wales/helm-mcp. The full Helm CLI surface as 46 MCP tools, backed by the Helm v3 and v4 Go SDKs. This page covers its container image (ghcr.io/scgis-wales/helm-mcp).
Is the io.github.SCGIS-Wales/helm-mcp server safe to use?
io.github.SCGIS-Wales/helm-mcp scores 41 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.SCGIS-Wales/helm-mcp server expose?
io.github.SCGIS-Wales/helm-mcp exposes 46 tools: helm_create, helm_dependency_build, helm_dependency_list, helm_dependency_update, helm_env, and 41 more. Their descriptions and schemas cost roughly 14,933 tokens of context every time the server is loaded.
Is the io.github.SCGIS-Wales/helm-mcp server still maintained?
io.github.SCGIS-Wales/helm-mcp is still listed as active in the MCP registry. We last reached this channel on 24 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.SCGIS-Wales/helm-mcp server under?
io.github.SCGIS-Wales/helm-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.