Kubeshark

Kubeshark is a MCP server by kubeshark that captures cluster-wide Kubernetes traffic with L4/L7 analysis and TLS decryption via eBPF.

Updated 2026-10-18

What is Kubeshark?

Kubeshark is a MCP server by kubeshark that captures cluster-wide Kubernetes traffic with L4/L7 analysis and TLS decryption via eBPF. It is listed under Developer tools and has 12,000 GitHub stars.

TypeMcp server
Authorkubeshark
Repositorykubeshark
Popularity12,000 GitHub stars
CategoryDeveloper tools
SecurityLow risk (92/100)
Rank#53 of 4,418 MCP servers; #29 in Developer tools
RunsNot stated

Is Kubeshark safe to install?

Kubeshark scores 92/100 on the MCPMods security check: Low risk. No checks raised a concern. It passed 4 of 6 checks.

MCP server results come from listing signals: who publishes it, where your data goes and what it can do. The code itself is not scanned yet.

CheckResult
Community-built serverNote
Where data goes is not statedNote
No credentials mentionedPass
Read-only by descriptionPass
No code executionPass
Source on GitHubPass

How do I install Kubeshark?

  1. Find the launch command. The README says how the server starts (npx, uvx, docker or a remote URL) and which API keys it needs.
    https://github.com/kubeshark
  2. Add it to Claude Code. Replace the part after -- with the command from the README. Remote servers use --transport http with a URL.
    claude mcp add kubeshark -- <command from README>
    claude mcp add --transport http kubeshark <server-url>
  3. Check it connected. This lists your MCP servers and their status.
    claude mcp list

Or ask Claude to set it up

Paste this into Claude Code and it installs Kubeshark for you:

Add the "Kubeshark" MCP server from https://github.com/kubeshark to Claude Code. Read its README for the launch command and any API keys I need, run claude mcp add, then check that it connects.