← Back to directory
COMPARE UP TO 4 SERVERS

Compare MCP servers

Compare scores, permissions, risks, and fit in one decision-focused table.

DimensionKubernetes MCP ServerNative Kubernetes and OpenShift control for AI assistants via MCP.Context7Upstash's official server providing up-to-date third-party library docs for AI coding assistants
FMRS63 / 100 · C80 / 100 · B
Reliability10 / 2014 / 20
Security and permissions10 / 2016 / 20
Maintenance14 / 2017 / 20
Documentation17 / 2015 / 20
Setup experience12 / 2018 / 20
Best for
  • Developers and platform engineers who want AI assistants (Claude Desktop, Claude Code, VS Code, Cursor) to interact directly with Kubernetes/OpenShift clusters
  • Teams needing lightweight, dependency-free cluster access without kubectl/helm binaries installed locally
  • Multi-cluster environments defined across kubeconfig contexts
  • Developers using fast-moving frameworks/libraries worried about the AI suggesting stale code
  • Scenarios wanting zero-config documentation lookup
Not for
  • Users without access to a Kubernetes cluster
  • Strictly read-only or isolated environments where --read-only/--disable-destructive flags haven't been reviewed first
  • Users who just want a thin kubectl wrapper (this is a native reimplementation, not kubectl passthrough)
  • Looking up internal/private codebase documentation (Context7 targets publicly published open-source libraries)
  • Cases needing very high coverage of obscure, niche libraries (coverage depends on what Context7's platform has indexed)
Required permissions
  • Requires a kubeconfig file (or in-cluster ServiceAccount) with API access to the target cluster(s)
  • Docker/OCI deployment requires a mounted kubeconfig volume and an exposed HTTP port
  • By default has full read/write access to cluster resources unless --read-only or --disable-destructive is set
  • The pods_exec tool can run arbitrary commands inside cluster containers
  • Usable without an API key (subject to a free-tier rate limit); CONTEXT7_API_KEY is an optional credential for higher quota
  • Read-only documentation lookup — no code execution or local filesystem access involved
Risks and side effects
  • Default configuration allows create/update/delete on any Kubernetes/OpenShift resource, including Secrets, unless restricted via denied_resources or read-only mode
  • pods_exec and resources_create_or_update can be used to run arbitrary commands or alter cluster state
  • Streamable HTTP mode exposes a network endpoint (port 8080 in the Docker example) that should be secured with the supported OAuth/OIDC before exposing beyond localhost
  • Multi-cluster support means a single compromised MCP session could reach every cluster defined in the kubeconfig
  • The free tier has limited quota — high-frequency use may hit rate limits
  • Documentation content comes from Context7's platform index, so its accuracy and freshness depend on that platform's crawl cadence
Supported clientsClaude Desktop, Claude Code, VS Code, Cursor, Goose CLIClaude Code, VS Code, Cursor, Cline, Amp
Tools462