--- title: "Kubernetes MCP server for AI agents - actionlake" description: "Give Claude 578 Kubernetes actions through one MCP server: core, apps, storage, admission. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/kubernetes updated: 2026-10-11 --- Connectors · Developer & infrastructure # Kubernetes MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Kubernetes and the rest of your systems. It gives your agent 578 Kubernetes actions (177 reads, 289 writes and 112 that wait for a confirmation) and holds the Kubernetes credential itself, so the agent never does. It paces Kubernetes's limits and records every call. [Connect Kubernetes free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "kubernetes.core.nodes_list", intent: "check which Kubernetes account is connected" } # List nodes · read · 1 upstream call ``` - 578 actions in one signed file - 177 read look, never change - 289 write create and update - 112 wait for a yes destructive, confirmed first Set up ## Connect Kubernetes in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Kubernetes. Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `token` Bearer token from the kubeconfig `users[].user.token` — a service account token or a cloud-issued cluster token - `host` Where your Kubernetes lives: your host ``` account { op: "connections.requirements", service: "kubernetes" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "kubernetes.core.nodes_list" } # list nodes · read · 1 upstream call check { action: "kubernetes.batch.jobs_create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Kubernetes at a glance **Sign-in** Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `token` **Setup fields** `host` **Limits we pace to** 600 calls a minute, per connection **API covered** Kubernetes API v1.36, at your Kubernetes instance's API base URL, which you enter when connecting **Built from** Kubernetes's documentation, read 22 September 2026[OpenAPI spec (GitHub)](https://raw.githubusercontent.com/kubernetes/kubernetes/release-1.36/api/openapi-spec/swagger.json) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 174 of 177 reads, for up to an hour; a write clears what it affects **Shared entities** 7, so ask can line Kubernetes up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Kubernetes. 578 actions in 21 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **177** read look, never change - **289** write create and update - **112** destructive wait for a confirmation 1. ### Core 169 55 read · 84 write · 30 destructive List nodes · List services across all namespaces · List namespaces · List pods across all namespaces 2. ### Apps 66 22 read · 34 write · 10 destructive List deployments across all namespaces · List deployments in a namespace · Create a deployment · Get a deployment 3. ### Storage 52 14 read · 26 write · 12 destructive List storage classes · Create a csi driver · List csi drivers · Create a csi node 4. ### Admission 51 13 read · 26 write · 12 destructive Create a mutating admission policy · List mutating admission policies · Create a mutating admission policy binding · List mutating admission policy bindings 5. ### Networking 48 14 read · 24 write · 10 destructive List ingresses across all namespaces · Create an ingress · List ingresses in a namespace · List ip addresses 6. ### Rbac 34 10 read · 14 write · 10 destructive List cluster role bindings · List cluster roles · List role bindings in a namespace · List role bindings across all namespaces 7. ### Batch 24 8 read · 12 write · 4 destructive List jobs across all namespaces · List cron jobs across all namespaces · List jobs in a namespace · Create a job 8. ### Flowcontrol 22 6 read · 12 write · 4 destructive Create a flow schema · List flow schemas · Create a priority level configuration · List priority level configurations **13 more areas · 112 actions** - Certificates **14** - Autoscaling **12** - Policy **12** - Apiextensions **11** - Apiregistration **11** - Coordination **9** - Discovery **9** - Events **8** - Node **8** - Scheduling **8** - Authorization **4** - Meta **4** - Authentication **2** Top actions ## The Kubernetes API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 94 of Kubernetes's 332 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `kubernetes.core.nodes_list` List nodes | List nodes | read | `infra.instance.list` 18 connectors | | `kubernetes.batch.jobs_list_all` List jobs across all namespaces | List jobs across all namespaces | read | `infra.job.list` 12 connectors | | `kubernetes.core.services_list_all` List services across all namespaces | List services across all namespaces | read | `infra.container_service.list` 11 connectors | | `kubernetes.apps.deployments_list_all` List deployments across all namespaces | List deployments across all namespaces | read | `infra.deployment.list` 8 connectors | | `kubernetes.batch.cron_jobs_list_all` List cron jobs across all namespaces | List cron jobs across all namespaces | read | `infra.cron_job.list` 4 connectors | | `kubernetes.core.pods_list_all` List pods across all namespaces | List pods across all namespaces | read | `infra.container.list` 3 connectors | | `kubernetes.core.namespaces_list` List namespaces | List namespaces | read | `infra.namespace.list` 3 connectors | | `kubernetes.networking.ingresses_list_all` List ingresses across all namespaces | List ingresses across all namespaces | read | `infra.ingress.list` 2 connectors | | `kubernetes.batch.jobs_create` Create a job | Create a job | write | `infra.job.create` 10 connectors | | `kubernetes.core.nodes_create` Create a node | Create a node | write | `infra.instance.create` 10 connectors | | `kubernetes.core.services_create` Create a service | Create a service | write | `infra.container_service.create` 8 connectors | | `kubernetes.core.nodes_delete` Delete a node | Delete a node | destructive | `infra.instance.delete` 13 connectors | Try it ## Prompts to paste into Claude. Each one names the Kubernetes actions it will call, so you know what it reads and what it changes before you send it. 1. Read read List nodes in Kubernetes and tell me what stands out. calls `kubernetes.core.nodes_list` 2. Write write Create a job in Kubernetes. Show me exactly what you will send before you save it. calls `kubernetes.batch.jobs_create` Governance for Kubernetes ## Destructive actions wait for a yes. 112 Kubernetes actions are destructive. The first 10: - Delete a node `kubernetes.core.nodes_delete` - Delete nodes matching a selector `kubernetes.core.nodes_delete_collection` - Delete a service `kubernetes.core.services_delete` - Delete services matching a selector `kubernetes.core.services_delete_collection` - Delete a job `kubernetes.batch.jobs_delete` - Delete jobs matching a selector `kubernetes.batch.jobs_delete_collection` - Delete a deployment `kubernetes.apps.deployments_delete` - Delete deployments matching a selector `kubernetes.apps.deployments_delete_collection` - Delete a pod `kubernetes.core.pods_delete` - Delete a cron job `kubernetes.batch.cron_jobs_delete` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do kubernetes.core.nodes_delete confirm_policy: **human** Delete a node? **intent:** the user asked me to delete a node run suspended · waiting for a named person · key _kubernetes-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "kubernetes-agent", allowed_actions: ["kubernetes.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "kubernetes.core.nodes_delete", approver: "lead@example.com" }, { match: "kubernetes.core.nodes_delete_collection", approver: "lead@example.com" }, { match: "kubernetes.core.services_delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Kubernetes only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Kubernetes costs on actionlake. Every Kubernetes action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Kubernetes refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 578 Kubernetes actions - 578 actions page each page of a long list is one call - 174 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Kubernetes action. 578 actions by area: the id your agent calls, what it does, and its effect. **Core 169** - `kubernetes.core.namespaces_list` List namespaces read - `kubernetes.core.nodes_list` List nodes read - `kubernetes.core.pods_list_all` List pods across all namespaces read - `kubernetes.core.services_list_all` List services across all namespaces read - `kubernetes.core.bindings_create` Create a binding write - `kubernetes.core.component_statuses_get` Get a component status read - and 163 more in this area **Apps 66** - `kubernetes.apps.deployments_create` Create a deployment write - `kubernetes.apps.deployments_get` Get a deployment read - `kubernetes.apps.deployments_list` List deployments in a namespace read - `kubernetes.apps.deployments_list_all` List deployments across all namespaces read - `kubernetes.apps.controller_revisions_apply` Apply a controller revision (server-side apply, like kubectl apply) write - `kubernetes.apps.controller_revisions_create` Create a controller revision write - and 60 more in this area **Storage 52** - `kubernetes.storage.csi_drivers_create` Create a csi driver write - `kubernetes.storage.csi_drivers_list` List csi drivers read - `kubernetes.storage.csi_nodes_create` Create a csi node write - `kubernetes.storage.storage_classes_list` List storage classes read - `kubernetes.storage.csi_drivers_apply` Apply a csi driver (server-side apply, like kubectl apply) write - `kubernetes.storage.csi_drivers_delete` Delete a csi driver destructive - and 46 more in this area **Admission 51** - `kubernetes.admission.mutating_admission_policies_create` Create a mutating admission policy write - `kubernetes.admission.mutating_admission_policies_list` List mutating admission policies read - `kubernetes.admission.mutating_admission_policy_bindings_create` Create a mutating admission policy binding write - `kubernetes.admission.mutating_admission_policy_bindings_list` List mutating admission policy bindings read - `kubernetes.admission.mutating_admission_policies_apply` Apply a mutating admission policy (server-side apply, like kubectl apply) write - `kubernetes.admission.mutating_admission_policies_delete` Delete a mutating admission policy destructive - and 45 more in this area **Networking 48** - `kubernetes.networking.ingresses_create` Create an ingress write - `kubernetes.networking.ingresses_list` List ingresses in a namespace read - `kubernetes.networking.ingresses_list_all` List ingresses across all namespaces read - `kubernetes.networking.ip_addresses_list` List ip addresses read - `kubernetes.networking.ingress_classes_apply` Apply an ingress class (server-side apply, like kubectl apply) write - `kubernetes.networking.ingress_classes_create` Create an ingress class write - and 42 more in this area **Rbac 34** - `kubernetes.rbac.cluster_role_bindings_list` List cluster role bindings read - `kubernetes.rbac.cluster_roles_list` List cluster roles read - `kubernetes.rbac.role_bindings_list` List role bindings in a namespace read - `kubernetes.rbac.role_bindings_list_all` List role bindings across all namespaces read - `kubernetes.rbac.cluster_role_bindings_apply` Apply a cluster role binding (server-side apply, like kubectl apply) write - `kubernetes.rbac.cluster_role_bindings_create` Create a cluster role binding destructive - and 28 more in this area **Batch 24** - `kubernetes.batch.cron_jobs_list_all` List cron jobs across all namespaces read - `kubernetes.batch.jobs_create` Create a job write - `kubernetes.batch.jobs_list` List jobs in a namespace read - `kubernetes.batch.jobs_list_all` List jobs across all namespaces read - `kubernetes.batch.cron_jobs_apply` Apply a cron job (server-side apply, like kubectl apply) write - `kubernetes.batch.cron_jobs_create` Create a cron job write - and 18 more in this area **Flowcontrol 22** - `kubernetes.flowcontrol.flow_schemas_create` Create a flow schema write - `kubernetes.flowcontrol.flow_schemas_list` List flow schemas read - `kubernetes.flowcontrol.priority_level_configurations_create` Create a priority level configuration write - `kubernetes.flowcontrol.priority_level_configurations_list` List priority level configurations read - `kubernetes.flowcontrol.flow_schemas_apply` Apply a flow schema (server-side apply, like kubectl apply) write - `kubernetes.flowcontrol.flow_schemas_delete` Delete a flow schema destructive - and 16 more in this area **Certificates 14** - `kubernetes.certificates.certificate_signing_requests_approval_get` Get the approval of a certificate signing request read - `kubernetes.certificates.certificate_signing_requests_approval_patch` Patch the approval of a certificate signing request write - `kubernetes.certificates.certificate_signing_requests_create` Create a certificate signing request write - `kubernetes.certificates.certificate_signing_requests_list` List certificate signing requests read - `kubernetes.certificates.certificate_signing_requests_apply` Apply a certificate signing request (server-side apply, like kubectl apply) write - `kubernetes.certificates.certificate_signing_requests_approval_replace` Replace the approval of a certificate signing request write - and 8 more in this area **Autoscaling 12** - `kubernetes.autoscaling.horizontal_pod_autoscalers_create` Create a horizontal pod autoscaler write - `kubernetes.autoscaling.horizontal_pod_autoscalers_get` Get a horizontal pod autoscaler read - `kubernetes.autoscaling.horizontal_pod_autoscalers_list` List horizontal pod autoscalers in a namespace read - `kubernetes.autoscaling.horizontal_pod_autoscalers_list_all` List horizontal pod autoscalers across all namespaces read - `kubernetes.autoscaling.horizontal_pod_autoscalers_apply` Apply a horizontal pod autoscaler (server-side apply, like kubectl apply) write - `kubernetes.autoscaling.horizontal_pod_autoscalers_delete` Delete a horizontal pod autoscaler destructive - and 6 more in this area **Policy 12** - `kubernetes.policy.pod_disruption_budgets_create` Create a pod disruption budget write - `kubernetes.policy.pod_disruption_budgets_get` Get a pod disruption budget read - `kubernetes.policy.pod_disruption_budgets_list` List pod disruption budgets in a namespace read - `kubernetes.policy.pod_disruption_budgets_list_all` List pod disruption budgets across all namespaces read - `kubernetes.policy.pod_disruption_budgets_apply` Apply a pod disruption budget (server-side apply, like kubectl apply) write - `kubernetes.policy.pod_disruption_budgets_delete` Delete a pod disruption budget destructive - and 6 more in this area **Apiextensions 11** - `kubernetes.apiextensions.custom_resource_definitions_create` Create a custom resource definition write - `kubernetes.apiextensions.custom_resource_definitions_get` Get a custom resource definition read - `kubernetes.apiextensions.custom_resource_definitions_list` List custom resource definitions read - `kubernetes.apiextensions.custom_resource_definitions_patch` Patch a custom resource definition write - `kubernetes.apiextensions.custom_resource_definitions_apply` Apply a custom resource definition (server-side apply, like kubectl apply) write - `kubernetes.apiextensions.custom_resource_definitions_delete` Delete a custom resource definition destructive - and 5 more in this area **Apiregistration 11** - `kubernetes.apiregistration.api_services_create` Create an api service write - `kubernetes.apiregistration.api_services_get` Get an api service read - `kubernetes.apiregistration.api_services_list` List api services read - `kubernetes.apiregistration.api_services_patch` Patch an api service write - `kubernetes.apiregistration.api_services_apply` Apply an api service (server-side apply, like kubectl apply) write - `kubernetes.apiregistration.api_services_delete` Delete an api service destructive - and 5 more in this area **Coordination 9** - `kubernetes.coordination.leases_create` Create a lease write - `kubernetes.coordination.leases_get` Get a lease read - `kubernetes.coordination.leases_list` List leases in a namespace read - `kubernetes.coordination.leases_list_all` List leases across all namespaces read - `kubernetes.coordination.leases_apply` Apply a lease (server-side apply, like kubectl apply) write - `kubernetes.coordination.leases_delete` Delete a lease destructive - and 3 more in this area **Discovery 9** - `kubernetes.discovery.endpoint_slices_create` Create an endpoint slice write - `kubernetes.discovery.endpoint_slices_get` Get an endpoint slice read - `kubernetes.discovery.endpoint_slices_list` List endpoint slices in a namespace read - `kubernetes.discovery.endpoint_slices_list_all` List endpoint slices across all namespaces read - `kubernetes.discovery.endpoint_slices_apply` Apply an endpoint slice (server-side apply, like kubectl apply) write - `kubernetes.discovery.endpoint_slices_delete` Delete an endpoint slice destructive - and 3 more in this area **Events 8** - `kubernetes.events.events_create` Create an event (events.k8s.io) write - `kubernetes.events.events_get` Get an event (events.k8s.io) read - `kubernetes.events.events_list` List events in a namespace (events.k8s.io) read - `kubernetes.events.events_list_all` List events across all namespaces (events.k8s.io) read - `kubernetes.events.events_delete` Delete an event (events.k8s.io) destructive - `kubernetes.events.events_delete_collection` Delete events matching a selector (events.k8s.io) destructive - and 2 more in this area **Node 8** - `kubernetes.node.runtime_classes_create` Create a runtime class write - `kubernetes.node.runtime_classes_get` Get a runtime class read - `kubernetes.node.runtime_classes_list` List runtime classes read - `kubernetes.node.runtime_classes_patch` Patch a runtime class write - `kubernetes.node.runtime_classes_apply` Apply a runtime class (server-side apply, like kubectl apply) write - `kubernetes.node.runtime_classes_delete` Delete a runtime class destructive - and 2 more in this area **Scheduling 8** - `kubernetes.scheduling.priority_classes_create` Create a priority class write - `kubernetes.scheduling.priority_classes_get` Get a priority class read - `kubernetes.scheduling.priority_classes_list` List priority classes read - `kubernetes.scheduling.priority_classes_patch` Patch a priority class write - `kubernetes.scheduling.priority_classes_apply` Apply a priority class (server-side apply, like kubectl apply) write - `kubernetes.scheduling.priority_classes_delete` Delete a priority class destructive - and 2 more in this area **Authorization 4** - `kubernetes.authorization.local_subject_access_reviews_create` Create a local subject access review write - `kubernetes.authorization.self_subject_access_reviews_create` Create a self subject access review write - `kubernetes.authorization.self_subject_rules_reviews_create` Create a self subject rules review write - `kubernetes.authorization.subject_access_reviews_create` Create a subject access review write **Meta 4** - `kubernetes.meta.api_groups` List the API groups the cluster serves read - `kubernetes.meta.core_resources` List the resources in the core API read - `kubernetes.meta.group_resources` List the resources an API group version serves read - `kubernetes.meta.version` Get the cluster's Kubernetes version read **Authentication 2** - `kubernetes.authentication.self_subject_reviews_create` Create a self subject review write - `kubernetes.authentication.token_reviews_create` Create a token review write This index shows a sample of each area. All 578 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The Kubernetes MCP server, answered. **Is there a Kubernetes MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 578 Kubernetes actions across core, apps, storage and admission, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Kubernetes. **What do I need to connect Kubernetes?** Bearer token from the kubeconfig `users[].user.token` — a service account token or a cloud-issued cluster token. Plus your host. The free call account { op: "connections.requirements", service: "kubernetes" } lists exactly what to paste. **Can an AI agent delete or change things in Kubernetes?** Only if its key allows it, and only with an explicit confirmation. 112 Kubernetes actions are destructive, including delete a node, delete nodes matching a selector and delete a service. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Kubernetes API limit?** actionlake paces every call to the limits in the Kubernetes service file: 600 calls a minute per connection. Repeated reads are answered from cache (174 Kubernetes actions can be), which never reaches Kubernetes. **What does a Kubernetes action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (578 Kubernetes actions page). Cache hits, searches, dry runs and calls Kubernetes refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Kubernetes API does it cover?** The Kubernetes API v1.36 at your Kubernetes instance's API base URL, which you enter when connecting. It is built from Kubernetes's documentation as read on 22 September 2026. 578 actions in 21 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Kubernetes data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to an hour, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Kubernetes credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Kubernetes Shares the most action names with - [Fly.io Machines 17](https://actionlake.com/connectors/fly-io-machines) - [Render 16](https://actionlake.com/connectors/render) - [Northflank 13](https://actionlake.com/connectors/northflank) - [Google Compute Engine 13](https://actionlake.com/connectors/google-compute-engine) - [Google Cloud Run 10](https://actionlake.com/connectors/google-cloud-run) - [Coolify 9](https://actionlake.com/connectors/coolify) Joins with, on shared entities - [DigitalOcean 2](https://actionlake.com/connectors/digitalocean) - [Azure Container Apps 2](https://actionlake.com/connectors/azure-container-apps) - [Apache Airflow 2](https://actionlake.com/connectors/apache-airflow) - [Unstructured 2](https://actionlake.com/connectors/unstructured) - [Google Cloud Document AI 2](https://actionlake.com/connectors/google-cloud-document-ai) - [Azure AI Document Intelligence 2](https://actionlake.com/connectors/azure-ai-document-intelligence) Browse - [All Developer & infrastructure connectors](https://actionlake.com/connectors/category/developer-and-infrastructure) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Kubernetes; the name is the vendor's own. Counts are from the Kubernetes service file, version 1.0.0. ## Give your agent Kubernetes today. [Connect Kubernetes free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/kubernetes More: https://actionlake.com/llms.txt