kubectl-mtv-mcp

The server executes `kubectl-mtv` and `kubectl` commands. While arguments are passed safely as `[]string` (mitigating shell injection), the underlying commands grant powerful control over a Kubernetes cluster, including creation, modification, and deletion of resources. If the server or the AI assistant interacting with it is compromised, it could lead to significant cluster alterations or data loss. SSE mode defaults to HTTP, which is insecure for sensitive communication (e.g., passing Kubernetes tokens) if not explicitly configured with TLS (--tls-cert, --tls-key). Token authentication via the Authorization header is supported in SSE mode; while tokens are sanitized for display/logging, they are passed directly to `kubectl`/`kubectl-mtv` for authentication.