io.github.SCGIS-Wales/helm-mcp
OCI · GHCR.IO/SCGIS-WALES/HELM-MCP · 2 COMPONENTS
The full Helm CLI surface as 46 MCP tools, backed by the Helm v3 and v4 Go SDKs.
Available components
+3 this week
41 41 Trust /100
Last scanned (17 hours ago)
Scores higher than 52% of OCI servers
Category Cloud Infrastructure
Trust breakdown (7 categories)
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security0
- No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
- Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
- Install-script risk not yet assessed.Unverified
- Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 13 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability51
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 15167 tokens (~329/item across 46 items; 46 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management33
- Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (24% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 47 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
Changelog
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 22 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 20 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Oct 26 +1
- Stability: unverified → 0.10 ▲ functional
- 14 Oct 26 +27
- Injection markers: unverified → pass ▲ security
- First check of Judged manipulation: pass security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- Tool coverage: unverified → 100 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- First check of Destructive annotations: 100 functional
- First check of Tool coverage: 100 functional
- First check of Schema quality: good functional
- First check of Schema quality: fail functional
- First check of Tool coverage: 24 functional
- First check of Schema quality: fail functional
- 11 Oct 26 10
First indexed and scored.
Diagnostics
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 24 Oct 2026 · Analysed oci/ghcr.io/scgis-wales/helm-mcp@0.5.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | oci |
| Reason | No attestation published |
Background: How many MCP packages publish verified provenance →
MCP tools
· 46 exposed
· ~14,933 tokens
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
Tool
Tokens
helm_rollback Roll back a release ~421
Rollback a Helm release to a previous revision.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| cleanup_on_fail | boolean | – | Cleanup on failure |
| debug | boolean | – | Enable debug output |
| description | string | – | Custom description for the rollback revision (v4 only) |
| disable_hooks | boolean | – | Disable hooks |
| dry_run | boolean | – | Simulate a rollback |
| force | boolean | – | Force resource updates |
| force_conflicts | boolean | – | Take ownership of fields owned by other managers during server-side apply (v4 only) |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| max_history | integer | – | Max history revisions |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| release_name | string | yes | Name of the release |
| revision | integer | yes | Revision number to rollback to |
| server_side_apply | null|boolean | – | Apply with Kubernetes server-side apply. Unset reuses the target revision's apply method (Helm's auto). v4 only |
| timeout | string | – | Timeout duration |
| wait | boolean | – | Wait for resources to be ready |
| wait_for_jobs | boolean | – | Wait for jobs to complete |
| wait_strategy | string | – | How to wait for resources: watcher (kstatus), legacy, or hookOnly. Overrides wait. v4 only |
No output schema declared.
No examples provided.
helm_search_hub Search Artifact Hub ~227
Search Artifact Hub for Helm charts.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| keyword | string | yes | Search keyword |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| list_repo_url | boolean | – | Show repository URL |
| max_col_width | integer | – | Max column width |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| results | null|array | – | – |
No examples provided.
helm_search_repo Search local repositories ~245
Search locally configured repositories for charts.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| devel | boolean | – | Include development versions |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| keyword | string | yes | Search keyword |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| regexp | boolean | – | Use regular expressions |
| version_constraint | string | – | Semver version constraint |
| versions | boolean | – | Show all versions |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | – |
| results | null|array | – | – |
No examples provided.
helm_show_all Show all chart info ~456
Show all information for a chart (Chart.yaml, values, README, CRDs).
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| ca_file | string | – | CA bundle to verify the chart repository or registry certificate |
| cert_file | string | – | Client certificate for the chart repository or registry |
| chart | string | yes | Chart reference |
| debug | boolean | – | Enable debug output |
| devel | boolean | – | Include development versions |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| insecure_skip_tls_verify | boolean | – | Skip TLS certificate checks when downloading the chart (insecure) |
| jsonpath | string | – | JSONPath template applied to the chart values (helm show values --jsonpath) |
| key_file | string | – | Client key for the chart repository or registry |
| keyring | string | – | Public keyring used by verify |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| pass_credentials | boolean | – | Send the credentials to every domain the chart download is redirected to |
| password | string | – | Password for the chart repository or OCI registry |
| plain_http | boolean | – | Use plain HTTP to reach an OCI registry (insecure) |
| qps | number | – | Client-side QPS rate limit |
| repo | string | – | Chart repository URL to look the chart up in, instead of a configured repo (helm --repo) |
| username | string | – | Username for the chart repository or OCI registry |
| verify | boolean | – | Verify the chart provenance (.prov) against the keyring before using it |
| version | string | – | Chart version |
No output schema declared.
No examples provided.
helm_show_chart Show Chart.yaml ~447
Show the Chart.yaml of a chart.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| ca_file | string | – | CA bundle to verify the chart repository or registry certificate |
| cert_file | string | – | Client certificate for the chart repository or registry |
| chart | string | yes | Chart reference |
| debug | boolean | – | Enable debug output |
| devel | boolean | – | Include development versions |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| insecure_skip_tls_verify | boolean | – | Skip TLS certificate checks when downloading the chart (insecure) |
| jsonpath | string | – | JSONPath template applied to the chart values (helm show values --jsonpath) |
| key_file | string | – | Client key for the chart repository or registry |
| keyring | string | – | Public keyring used by verify |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| pass_credentials | boolean | – | Send the credentials to every domain the chart download is redirected to |
| password | string | – | Password for the chart repository or OCI registry |
| plain_http | boolean | – | Use plain HTTP to reach an OCI registry (insecure) |
| qps | number | – | Client-side QPS rate limit |
| repo | string | – | Chart repository URL to look the chart up in, instead of a configured repo (helm --repo) |
| username | string | – | Username for the chart repository or OCI registry |
| verify | boolean | – | Verify the chart provenance (.prov) against the keyring before using it |
| version | string | – | Chart version |
No output schema declared.
No examples provided.
helm_show_crds Show chart CRDs ~448
Show the CRDs of a chart.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| ca_file | string | – | CA bundle to verify the chart repository or registry certificate |
| cert_file | string | – | Client certificate for the chart repository or registry |
| chart | string | yes | Chart reference |
| debug | boolean | – | Enable debug output |
| devel | boolean | – | Include development versions |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| insecure_skip_tls_verify | boolean | – | Skip TLS certificate checks when downloading the chart (insecure) |
| jsonpath | string | – | JSONPath template applied to the chart values (helm show values --jsonpath) |
| key_file | string | – | Client key for the chart repository or registry |
| keyring | string | – | Public keyring used by verify |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| pass_credentials | boolean | – | Send the credentials to every domain the chart download is redirected to |
| password | string | – | Password for the chart repository or OCI registry |
| plain_http | boolean | – | Use plain HTTP to reach an OCI registry (insecure) |
| qps | number | – | Client-side QPS rate limit |
| repo | string | – | Chart repository URL to look the chart up in, instead of a configured repo (helm --repo) |
| username | string | – | Username for the chart repository or OCI registry |
| verify | boolean | – | Verify the chart provenance (.prov) against the keyring before using it |
| version | string | – | Chart version |
No output schema declared.
No examples provided.
helm_show_readme Show chart README ~447
Show the README of a chart.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| ca_file | string | – | CA bundle to verify the chart repository or registry certificate |
| cert_file | string | – | Client certificate for the chart repository or registry |
| chart | string | yes | Chart reference |
| debug | boolean | – | Enable debug output |
| devel | boolean | – | Include development versions |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| insecure_skip_tls_verify | boolean | – | Skip TLS certificate checks when downloading the chart (insecure) |
| jsonpath | string | – | JSONPath template applied to the chart values (helm show values --jsonpath) |
| key_file | string | – | Client key for the chart repository or registry |
| keyring | string | – | Public keyring used by verify |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| pass_credentials | boolean | – | Send the credentials to every domain the chart download is redirected to |
| password | string | – | Password for the chart repository or OCI registry |
| plain_http | boolean | – | Use plain HTTP to reach an OCI registry (insecure) |
| qps | number | – | Client-side QPS rate limit |
| repo | string | – | Chart repository URL to look the chart up in, instead of a configured repo (helm --repo) |
| username | string | – | Username for the chart repository or OCI registry |
| verify | boolean | – | Verify the chart provenance (.prov) against the keyring before using it |
| version | string | – | Chart version |
No output schema declared.
No examples provided.
helm_show_values Show chart values ~447
Show the default values of a chart.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| ca_file | string | – | CA bundle to verify the chart repository or registry certificate |
| cert_file | string | – | Client certificate for the chart repository or registry |
| chart | string | yes | Chart reference |
| debug | boolean | – | Enable debug output |
| devel | boolean | – | Include development versions |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| insecure_skip_tls_verify | boolean | – | Skip TLS certificate checks when downloading the chart (insecure) |
| jsonpath | string | – | JSONPath template applied to the chart values (helm show values --jsonpath) |
| key_file | string | – | Client key for the chart repository or registry |
| keyring | string | – | Public keyring used by verify |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| pass_credentials | boolean | – | Send the credentials to every domain the chart download is redirected to |
| password | string | – | Password for the chart repository or OCI registry |
| plain_http | boolean | – | Use plain HTTP to reach an OCI registry (insecure) |
| qps | number | – | Client-side QPS rate limit |
| repo | string | – | Chart repository URL to look the chart up in, instead of a configured repo (helm --repo) |
| username | string | – | Username for the chart repository or OCI registry |
| verify | boolean | – | Verify the chart provenance (.prov) against the keyring before using it |
| version | string | – | Chart version |
No output schema declared.
No examples provided.
helm_status Release status ~246
Display the status of a Helm release including its revision, chart, and values.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| release_name | string | yes | Name of the release |
| revision | integer | – | Show status for a specific revision |
| show_resources | boolean | – | Include the release's live resources (kind, name, namespace) |
| Name | Type | Req | Description |
|---|---|---|---|
| release | null|object | – | – |
No examples provided.
helm_template Render chart templates ~756
Render chart templates locally without installing. Useful for previewing manifests.
| Name | Type | Req | Description |
|---|---|---|---|
| api_versions | null|array | – | API versions for capabilities |
| burst_limit | integer | – | Client-side default throttling limit |
| ca_file | string | – | CA bundle to verify the chart repository or registry certificate |
| cert_file | string | – | Client certificate for the chart repository or registry |
| chart | string | yes | Chart reference |
| debug | boolean | – | Enable debug output |
| dependency_update | boolean | – | Fetch missing chart dependencies before rendering |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| include_crds | boolean | – | Include CRDs |
| insecure_skip_tls_verify | boolean | – | Skip TLS certificate checks when downloading the chart (insecure) |
| is_upgrade | boolean | – | Render with .Release.IsUpgrade set instead of .Release.IsInstall |
| key_file | string | – | Client key for the chart repository or registry |
| keyring | string | – | Public keyring used by verify |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kube_version | string | – | Kubernetes version for capabilities |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| no_hooks | boolean | – | Leave hooks out of the output |
| pass_credentials | boolean | – | Send the credentials to every domain the chart download is redirected to |
| password | string | – | Password for the chart repository or OCI registry |
| plain_http | boolean | – | Use plain HTTP to reach an OCI registry (insecure) |
| post_renderer | string | – | Name of an installed post-renderer plugin applied to the rendered manifests (v4 only) |
| post_renderer_args | null|array | – | Arguments passed to the post-renderer plugin (v4 only) |
| qps | number | – | Client-side QPS rate limit |
| release_name | string | yes | Release name for template rendering |
| repo | string | – | Chart repository URL to look the chart up in, instead of a configured repo (helm --repo) |
| set_file | null|array | – | Values as key=path pairs; each value is the content of that local file (helm --set-file) |
| set_literal | null|array | – | Values as key=value pairs, taken literally with no escaping or splitting (helm --set-literal) |
| set_string | null|array | – | Values as key=value pairs, always treated as strings (helm --set-string) |
| show_only | null|array | – | Only show manifests rendered from these templates; paths relative to the chart, globs allowed (e.g. templates/service.yaml) |
| skip_crds | boolean | – | Skip CRDs |
| skip_tests | boolean | – | Leave test hooks out of the output |
| username | string | – | Username for the chart repository or OCI registry |
| validate | boolean | – | Validate against the cluster |
| values | object | – | Inline values, deep-merged over values_files (equivalent to --set) |
| values_files | null|array | – | Values files |
| verify | boolean | – | Verify the chart provenance (.prov) against the keyring before using it |
| version | string | – | Chart version |
No output schema declared.
No examples provided.
helm_test Run release tests ~252
Run the test suite for a Helm release.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| filters | null|array | – | Filter tests by name |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| logs | boolean | – | Include the test pod logs in the result (helm test --logs) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| release_name | string | yes | Name of the release to test |
| timeout | string | – | Timeout for test execution |
No output schema declared.
No examples provided.
helm_uninstall Uninstall a release ~355
Uninstall a Helm release and remove all associated Kubernetes resources.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| cascade | string | – | Deletion propagation: background foreground or orphan |
| debug | boolean | – | Enable debug output |
| description | string | – | Custom description recorded against the uninstall |
| disable_hooks | boolean | – | Disable pre/post uninstall hooks |
| dry_run | boolean | – | Simulate an uninstall |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| ignore_not_found | boolean | – | Succeed instead of erroring when the release does not exist |
| keep_history | boolean | – | Remove all associated resources but keep release history |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| release_name | string | yes | Name of the release to uninstall |
| timeout | string | – | Timeout duration |
| wait | boolean | – | Wait for deletion of all resources |
| wait_strategy | string | – | How to wait for deletion: watcher (kstatus), legacy, or hookOnly. Overrides wait. v4 only |
No output schema declared.
No examples provided.
helm_upgrade Upgrade a release ~1,104
Upgrade a Helm release to a new chart version or with new values.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| ca_file | string | – | CA bundle to verify the chart repository or registry certificate |
| cert_file | string | – | Client certificate for the chart repository or registry |
| chart | string | yes | Chart reference |
| cleanup_on_fail | boolean | – | Cleanup on failure |
| create_namespace | boolean | – | Create the namespace when install creates the release |
| debug | boolean | – | Enable debug output |
| dependency_update | boolean | – | Update dependencies |
| description | string | – | Custom description |
| devel | boolean | – | Allow development chart versions (alpha/beta/rc) to satisfy the version constraint |
| disable_hooks | boolean | – | Disable hooks |
| disable_openapi_validation | boolean | – | Skip validating rendered manifests against the Kubernetes OpenAPI schema |
| dry_run | string | – | Dry run: none client or server |
| enable_dns | boolean | – | Allow DNS lookups from templates via the getHostByName function |
| force | boolean | – | Replace resources by delete and recreate when an update is needed (helm --force-replace; --force on v3) |
| force_conflicts | boolean | – | Take ownership of fields owned by other managers during server-side apply (v4 only) |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| hide_notes | boolean | – | Omit NOTES.txt from the output |
| hide_secret | boolean | – | Hide Secret contents in dry-run output; requires dry_run |
| insecure_skip_tls_verify | boolean | – | Skip TLS certificate checks when downloading the chart (insecure) |
| install | boolean | – | If release does not exist install it |
| key_file | string | – | Client key for the chart repository or registry |
| keyring | string | – | Public keyring used by verify |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| labels | object | – | Labels |
| max_history | integer | – | Max history revisions |
| namespace | string | – | Kubernetes namespace |
| pass_credentials | boolean | – | Send the credentials to every domain the chart download is redirected to |
| password | string | – | Password for the chart repository or OCI registry |
| plain_http | boolean | – | Use plain HTTP to reach an OCI registry (insecure) |
| post_renderer | string | – | Name of an installed post-renderer plugin applied to the rendered manifests (v4 only) |
| post_renderer_args | null|array | – | Arguments passed to the post-renderer plugin (v4 only) |
| qps | number | – | Client-side QPS rate limit |
| release_name | string | yes | Name of the release |
| repo | string | – | Chart repository URL to look the chart up in, instead of a configured repo (helm --repo) |
| reset_then_reuse_values | boolean | – | Reset to the new chart's defaults, then reapply the last release's user values |
| reset_values | boolean | – | Reset values to chart defaults |
| reuse_values | boolean | – | Reuse last release values |
| rollback_on_failure | boolean | – | Roll the release back automatically if the upgrade fails (helm --atomic) |
| server_side_apply | null|boolean | – | Apply with Kubernetes server-side apply. Unset reuses the previous release's apply method (Helm's auto). v4 only |
| set_file | null|array | – | Values as key=path pairs; each value is the content of that local file (helm --set-file) |
| set_literal | null|array | – | Values as key=value pairs, taken literally with no escaping or splitting (helm --set-literal) |
| set_string | null|array | – | Values as key=value pairs, always treated as strings (helm --set-string) |
| skip_crds | boolean | – | Skip CRDs |
| skip_schema_validation | boolean | – | Skip validation of values against the chart's values.schema.json |
| sub_notes | boolean | – | Also render the NOTES.txt of subcharts |
| take_ownership | boolean | – | Adopt existing resources that lack Helm ownership annotations |
| timeout | string | – | Timeout duration |
| username | string | – | Username for the chart repository or OCI registry |
| values | object | – | Inline values, deep-merged over values_files (equivalent to --set) |
| values_files | null|array | – | Paths to values files |
| verify | boolean | – | Verify the chart provenance (.prov) against the keyring before using it |
| version | string | – | Chart version constraint |
| wait | boolean | – | Wait for resources to be ready |
| wait_for_jobs | boolean | – | Wait for jobs to complete |
| wait_strategy | string | – | How to wait for resources: watcher (kstatus), legacy, or hookOnly. Overrides wait. v4 only |
No output schema declared.
No examples provided.
helm_verify Verify chart provenance ~220
Verify that a chart has a valid provenance file.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| chart_file | string | yes | Path to chart archive to verify |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| keyring | string | – | Keyring path |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
No output schema declared.
No examples provided.
helm_version Show Helm version ~204
Print the Helm SDK version information.
| Name | Type | Req | Description |
|---|---|---|---|
| burst_limit | integer | – | Client-side default throttling limit |
| debug | boolean | – | Enable debug output |
| helm_version | string | – | Helm SDK version: v3 or v4 (default: v4) |
| kube_apiserver | string | – | Kubernetes API server URL (overrides kubeconfig) |
| kube_context | string | – | Kubernetes context name from kubeconfig |
| kube_insecure_tls | boolean | – | Skip TLS certificate verification (insecure) |
| kube_tls_server_name | string | – | Server name for TLS certificate validation |
| kube_token | string | – | Bearer token for Kubernetes API authentication |
| kubeconfig | string | – | Path to kubeconfig file (defaults to $KUBECONFIG or ~/.kube/config) |
| namespace | string | – | Kubernetes namespace |
| qps | number | – | Client-side QPS rate limit |
| short | boolean | – | Print only the version number |
| Name | Type | Req | Description |
|---|---|---|---|
| version | null|object | – | – |
No examples provided.
Install
How do I install the io.github.SCGIS-Wales/helm-mcp server?
io.github.SCGIS-Wales/helm-mcp runs locally as a container image, launched with docker run --rm -i ghcr.io/scgis-wales/helm-mcp:0.5.0. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.
oci · ghcr.io/scgis-wales/helm-mcp
# add to Claude Code
claude mcp add scgis-wales-helm-mcp -- docker run --rm -i ghcr.io/scgis-wales/helm-mcp:0.5.0
Common questions
What is the io.github.SCGIS-Wales/helm-mcp server?
io.github.SCGIS-Wales/helm-mcp is listed in the public MCP registry as io.github.SCGIS-Wales/helm-mcp. The full Helm CLI surface as 46 MCP tools, backed by the Helm v3 and v4 Go SDKs. This page covers its container image (ghcr.io/scgis-wales/helm-mcp).
Is the io.github.SCGIS-Wales/helm-mcp server safe to use?
io.github.SCGIS-Wales/helm-mcp scores 41 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.SCGIS-Wales/helm-mcp server expose?
io.github.SCGIS-Wales/helm-mcp exposes 46 tools: helm_create, helm_dependency_build, helm_dependency_list, helm_dependency_update, helm_env, and 41 more. Their descriptions and schemas cost roughly 14,933 tokens of context every time the server is loaded.
Is the io.github.SCGIS-Wales/helm-mcp server still maintained?
io.github.SCGIS-Wales/helm-mcp is still listed as active in the MCP registry. We last reached this channel on 24 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.SCGIS-Wales/helm-mcp server under?
io.github.SCGIS-Wales/helm-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.