mcp-server-kubernetes 3.5.1 → 3.6.0

package/dist/index.js

@@ -36,6 +36,21 @@ import { withTelemetry } from "./middleware/telemetry-middleware.js";
 const allowOnlyReadonlyTools = process.env.ALLOW_ONLY_READONLY_TOOLS === "true";
 const allowedToolsEnv = process.env.ALLOWED_TOOLS;
 const nonDestructiveTools = process.env.ALLOW_ONLY_NON_DESTRUCTIVE_TOOLS === "true";
+const explicitlyAllowedToolNames = allowedToolsEnv
+    ? new Set(allowedToolsEnv.split(",").map((t) => t.trim()).filter(Boolean))
+    : null;
+const isToolAllowed = (name) => {
+    if (explicitlyAllowedToolNames) {
+        return explicitlyAllowedToolNames.has(name);
+    }
+    if (allowOnlyReadonlyTools) {
+        return readonlyTools.some((t) => t.name === name);
+    }
+    if (nonDestructiveTools) {
+        return !destructiveTools.some((dt) => dt.name === name);
+    }
+    return true;
+};
 // Define readonly tools
 const readonlyTools = [
     kubectlGetSchema,
@@ -109,25 +124,16 @@ server.setRequestHandler(ReadResourceRequestSchema, resourceHandlers.readResourc
 registerPromptHandlers(server, k8sManager);
 // Tools handlers
 server.setRequestHandler(ListToolsRequestSchema, async () => {
-    let tools;
-    if (allowedToolsEnv) {
-        const allowedToolNames = allowedToolsEnv.split(",").map((t) => t.trim());
-        tools = allTools.filter((tool) => allowedToolNames.includes(tool.name));
-    }
-    else if (allowOnlyReadonlyTools) {
-        tools = readonlyTools;
-    }
-    else if (nonDestructiveTools) {
-        tools = allTools.filter((tool) => !destructiveTools.some((dt) => dt.name === tool.name));
-    }
-    else {
-        tools = allTools;
-    }
+    const baseTools = allowOnlyReadonlyTools ? readonlyTools : allTools;
+    const tools = baseTools.filter((tool) => isToolAllowed(tool.name));
     return { tools };
 });
 server.setRequestHandler(CallToolRequestSchema, withTelemetry(async (request) => {
     try {
         const { name, arguments: input = {} } = request.params;
+        if (!isToolAllowed(name)) {
+            throw new McpError(ErrorCode.InvalidRequest, `Tool '${name}' is not allowed under the current server configuration`);
+        }
         // Handle new kubectl-style commands
         if (name === "kubectl_context") {
             return await kubectlContext(k8sManager, input);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-server-kubernetes",
-  "version": "3.5.1",
+  "version": "3.6.0",
   "description": "MCP server for interacting with Kubernetes clusters via kubectl",
   "license": "MIT",
   "type": "module",