kubeview-mcp

The server uses a sandboxed Node.js `vm` environment for executing agent-provided TypeScript code (`run_code`), which enhances isolation. Sensitive data masking is implemented for ConfigMaps and Secrets, and is configurable (`MCP_HIDE_SENSITIVE`). However, while the server's direct interaction with the Kubernetes API aims to be read-only, the `kube_exec` tool allows agents to execute arbitrary commands inside specific containers within pods. This means an agent could instruct the tool to perform write operations or other non-read-only actions within a running workload, potentially impacting applications. Similarly, `kube_port` can establish temporary port-forwards, exposing internal services locally. Users and AI agents should exercise caution when utilizing these powerful capabilities.