mcp-server-kubernetes 3.5.0 → 3.6.0

package/dist/index.js

@@ -36,6 +36,21 @@ import { withTelemetry } from "./middleware/telemetry-middleware.js";
 const allowOnlyReadonlyTools = process.env.ALLOW_ONLY_READONLY_TOOLS === "true";
 const allowedToolsEnv = process.env.ALLOWED_TOOLS;
 const nonDestructiveTools = process.env.ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS === "true";
+const explicitlyAllowedToolNames = allowedToolsEnv
+    ? new Set(allowedToolsEnv.split(",").map((t) => t.trim()).filter(Boolean))
+    : null;
+const isToolAllowed = (name) => {
+    if (explicitlyAllowedToolNames) {
+        return explicitlyAllowedToolNames.has(name);
+    }
+    if (allowOnlyReadonlyTools) {
+        return readonlyTools.some((t) => t.name === name);
+    }
+    if (nonDestructiveTools) {
+        return !destructiveTools.some((dt) => dt.name === name);
+    }
+    return true;
+};
 // Define readonly tools
 const readonlyTools = [
     kubectlGetSchema,
@@ -109,25 +124,16 @@ server.setRequestHandler(ReadResourceRequestSchema, resourceHandlers.readResourc
 registerPromptHandlers(server, k8sManager);
 // Tools handlers
 server.setRequestHandler(ListToolsRequestSchema, async () => {
-    let tools;
-    if (allowedToolsEnv) {
-        const allowedToolNames = allowedToolsEnv.split(",").map((t) => t.trim());
-        tools = allTools.filter((tool) => allowedToolNames.includes(tool.name));
-    }
-    else if (allowOnlyReadonlyTools) {
-        tools = readonlyTools;
-    }
-    else if (nonDestructiveTools) {
-        tools = allTools.filter((tool) => !destructiveTools.some((dt) => dt.name === tool.name));
-    }
-    else {
-        tools = allTools;
-    }
+    const baseTools = allowOnlyReadonlyTools ? readonlyTools : allTools;
+    const tools = baseTools.filter((tool) => isToolAllowed(tool.name));
     return { tools };
 });
 server.setRequestHandler(CallToolRequestSchema, withTelemetry(async (request) => {
     try {
         const { name, arguments: input = {} } = request.params;
+        if (!isToolAllowed(name)) {
+            throw new McpError(ErrorCode.InvalidRequest, `Tool '${name}' is not allowed under the current server configuration`);
+        }
         // Handle new kubectl-style commands
         if (name === "kubectl_context") {
             return await kubectlContext(k8sManager, input);

package/dist/models/response-schemas.d.ts

@@ -419,24 +419,24 @@ export declare const GetJobLogsResponseSchema: z.ZodObject<{
 }>;
 export declare const PortForwardResponseSchema: z.ZodObject<{
     content: z.ZodArray<z.ZodObject<{
-        success: z.ZodBoolean;
-        message: z.ZodString;
+        type: z.ZodLiteral<"text">;
+        text: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        message: string;
-        success: boolean;
+        type: "text";
+        text: string;
     }, {
-        message: string;
-        success: boolean;
+        type: "text";
+        text: string;
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
     content: {
-        message: string;
-        success: boolean;
+        type: "text";
+        text: string;
     }[];
 }, {
     content: {
-        message: string;
-        success: boolean;
+        type: "text";
+        text: string;
     }[];
 }>;
 export declare const ScaleDeploymentResponseSchema: z.ZodObject<{

package/dist/models/response-schemas.js

@@ -62,10 +62,7 @@ export const GetJobLogsResponseSchema = z.object({
     content: z.array(ToolResponseContent),
 });
 export const PortForwardResponseSchema = z.object({
-    content: z.array(z.object({
-        success: z.boolean(),
-        message: z.string(),
-    })),
+    content: z.array(ToolResponseContent),
 });
 export const ScaleDeploymentResponseSchema = z.object({
     content: z.array(z.object({

package/dist/tools/port_forward.d.ts

@@ -35,8 +35,8 @@ export declare function startPortForward(k8sManager: KubernetesManager, input: {
     namespace?: string;
 }): Promise<{
     content: {
-        success: boolean;
-        message: string;
+        type: "text";
+        text: string;
     }[];
 }>;
 export declare const StopPortForwardSchema: {
@@ -59,7 +59,7 @@ export declare function stopPortForward(k8sManager: KubernetesManager, input: {
     id: string;
 }): Promise<{
     content: {
-        success: boolean;
-        message: string;
+        type: "text";
+        text: string;
     }[];
 }>;

package/dist/tools/port_forward.js

@@ -80,7 +80,15 @@ export async function startPortForward(k8sManager, input) {
             ports: [{ local: input.localPort, remote: input.targetPort }],
         });
         return {
-            content: [{ success: result.success, message: result.message }],
+            content: [
+                {
+                    type: "text",
+                    text: JSON.stringify({
+                        success: result.success,
+                        message: result.message,
+                    }),
+                },
+            ],
         };
     }
     catch (error) {
@@ -111,7 +119,13 @@ export async function stopPortForward(k8sManager, input) {
         k8sManager.removePortForward(input.id);
         return {
             content: [
-                { success: true, message: "port-forward stopped successfully" },
+                {
+                    type: "text",
+                    text: JSON.stringify({
+                        success: true,
+                        message: "port-forward stopped successfully",
+                    }),
+                },
             ],
         };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-server-kubernetes",
-  "version": "3.5.0",
+  "version": "3.6.0",
   "description": "MCP server for interacting with Kubernetes clusters via kubectl",
   "license": "MIT",
   "type": "module",