kube-lint-mcp 0.1.0

MCP server for Kubernetes manifest and Helm chart validation

kube-lint-mcp

MCP server that validates Kubernetes manifests and Helm charts with kubectl dry-run before you commit — preventing deployment and GitOps reconciliation failures.

Works with Claude Code, Claude Desktop, and any MCP-compatible client.

How it works

You: "Validate the flux manifests in ./k8s/infrastructure/"

Claude: calls select_kube_context → flux_dryrun

  FluxCD Dry-Run Validation
  Context: staging
  ================================================
  File: infrastructure/redis.yaml
    Client dry-run: PASS
    Server dry-run: PASS

  File: infrastructure/postgres.yaml
    Client dry-run: PASS
    Server dry-run: FAIL
      Error: namespace "db" not found
  ================================================
  Summary: 1 passed, 1 failed

  DO NOT COMMIT - Fix errors first!

No flags, no CLI args — the AI agent picks the right tool automatically.

Prerequisites

• Python 3.12+
• kubectl configured with cluster access
• helm (for Helm chart validation)
• flux (for Flux operations)

Installation

pip install kube-lint-mcp

Or from source:

git clone https://github.com/sophotechlabs/kube-lint-mcp.git
cd kube-lint-mcp
pip install .

Configuration

Claude Code

Add to your project's .mcp.json:

{
  "mcpServers": {
    "kube-lint": {
      "command": "python",
      "args": ["-m", "kube_lint_mcp"]
    }
  }
}

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%/Claude/claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "kube-lint": {
      "command": "python",
      "args": ["-m", "kube_lint_mcp"]
    }
  }
}

Tools

Tool	Description
select_kube_context	Pick a cluster context (held in memory, no kubeconfig mutation). Call first.
list_kube_contexts	Show available kubectl contexts and which is selected
flux_dryrun	Validate FluxCD YAML with client + server dry-run
helm_dryrun	Lint, render, and dry-run a Helm chart end-to-end
flux_check	Verify Flux installation health
flux_status	Show Flux reconciliation status across namespaces

Workflow

1. list_kube_contexts — see available clusters
2. select_kube_context — target a cluster (in-memory only, never mutates kubeconfig)
3. flux_dryrun or helm_dryrun — validate before committing
4. Only commit when all checks pass

Safety

The server never mutates your kubeconfig. Context is held in memory and passed via --context flag on every subprocess call. This is a deliberate safety choice for agentic use — the AI cannot accidentally switch your global kubectl context.

Development

pip install -e ".[dev]"
make test    # 83 tests, 100% coverage
make lint    # flake8

Contributing

1. Fork the repo
2. Create a feature branch
3. Make sure make test and make lint pass
4. Open a PR

License

MIT

---

Built by Artem Muterko at Sophotech

If this tool saves you from a bad deploy, consider sponsoring.