MCP server that talks to the Kubernetes API directly, not through kubectl: resources, pods, logs, events and Helm on Kubernetes or OpenShift.
How it works
Foe: Storm Elemental, an outage, a failed deploy or a slow pipeline.
Foes
- Storm ElementalHaze Poison Ward Insight Flicker Pinned Enraged
Party · Context
- CastellanYour agent100/100Haze Poison Ward Insight Flicker Pinned Enraged
The Storm Elemental blocks the way.
What really happensIt stands for an outage, a failed deploy or a slow pipeline.
Castellan: Context 100/100.
Lightning splits the sky and the servers go dark.
What really happensAn outage or a broken pipeline stops everything until someone finds the cause.
Castellan takes 7. Castellan takes 7. Castellan: Context 86/100.
A viewer's badge is forged before the gate opens.
What really happensThe setup guide creates a ServiceAccount, a kubeconfig for it and a TOML file with read_only = true.
Storm Elemental takes 7. Castellan: Ward.
The spyglass locks onto the cluster.
What really happensclaude mcp add-json registers the server. npx runs kubernetes-mcp-server with that config and kubeconfig.
Storm Elemental takes 27.
The ward takes the blow.
What really happensA test or check catches the problem before it lands.
Castellan blocks the hit. Castellan blocks the hit.
Namespaces, pods and events come into view.
What really happensTools list resources and read pod logs and events through the Kubernetes API rather than kubectl. Helm release tools are an optional toolset.
Storm Elemental takes 12.
With the gate unlocked, a broken deployment is mended.
What really happensIf you turn read_only off, the agent can create, update, scale or delete resources. With the helm toolset on, it can also install Helm charts.
Storm Elemental takes 29.
The storm is named and its source marked.
What really happensYou get a diagnosis from live cluster data, and changes only if you allowed writes.
Storm Elemental takes 25. Storm Elemental falls.
The Storm Elemental falls.
Learn this spell
Claude Code
claude mcp add-json kubernetes-mcp-server '{"command":"npx","args":["-y","kubernetes-mcp-server@latest","--config","'"${HOME}"'/.config/kubernetes-mcp-server.toml"],"env":{"KUBECONFIG":"'${HOME}'/.kube/mcp-viewer.kubeconfig"}}' -s userNotes
Free and open source; you need access to a cluster. The setup guide first creates a ServiceAccount, a kubeconfig for it (mcp-viewer.kubeconfig) and ~/.config/kubernetes-mcp-server.toml with read_only = true. Runtime flags such as --read-only are no longer accepted. With read_only off, tools can delete pods and change resources. Helm tools are an optional toolset, off by default. Needs Node.js for npx, or use the native binary. Codex setup is not documented.
This spell has no recorded sessions in the curator's logs. Tried it? Send a spell report.

