cluster-insights-mcp-rs

The server is explicitly designed for read-only operations on Kubernetes clusters, which significantly reduces the attack surface compared to tools with write access. It utilizes existing kubeconfig credentials and advises proper RBAC setup. It avoids 'eval' or similar dynamic code execution. The container setup runs as a non-root user (1001) and mentions 'cargo audit' in its CI/CD pipeline, indicating a proactive security stance. The main security consideration is ensuring the provided kubeconfig has appropriately scoped read-only permissions and that the server is not exposed publicly without additional authentication.