kubectl-mcp-server 1.15.0__py3-none-any.whl → 1.17.0__py3-none-any.whl

{kubectl_mcp_server-1.15.0.dist-info → kubectl_mcp_server-1.17.0.dist-info}/METADATA

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: kubectl-mcp-server
-Version: 1.15.0
-Summary: A Model Context Protocol (MCP) server for Kubernetes with 127+ tools, 8 resources, and 8 prompts
+Version: 1.17.0
+Summary: A Model Context Protocol (MCP) server for Kubernetes with 220+ tools, 8 resources, and 8 prompts
 Home-page: https://github.com/rohitg00/kubectl-mcp-server
 Author: Rohit Ghumare
 Author-email: ghumare64@gmail.com
@@ -70,7 +70,7 @@ Talk to your clusters like you talk to a DevOps expert. Debug crashed pods, opti
 [![PyPI](https://img.shields.io/pypi/v/kubectl-mcp-server?color=blue&label=PyPI)](https://pypi.org/project/kubectl-mcp-server/)
 [![npm](https://img.shields.io/npm/v/kubectl-mcp-server?color=green&label=npm)](https://www.npmjs.com/package/kubectl-mcp-server)
 [![Docker](https://img.shields.io/docker/pulls/rohitghumare64/kubectl-mcp-server.svg)](https://hub.docker.com/r/rohitghumare64/kubectl-mcp-server)
-[![Tests](https://img.shields.io/badge/tests-216%20passed-success)](https://github.com/rohitg00/kubectl-mcp-server)
+[![Tests](https://img.shields.io/badge/tests-234%20passed-success)](https://github.com/rohitg00/kubectl-mcp-server)
 [![agentregistry](https://img.shields.io/badge/agentregistry-verified-blue?logo=data:image/svg+xml;base64,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)](https://aregistry.ai)
 
 ---
@@ -155,7 +155,7 @@ Simply ask your AI assistant in natural language:
 - Interactive HTML dashboards with live metrics
 - Visual timeline of events and resource usage
 
-**131 powerful tools** | **8 workflow prompts** | **8 data resources** | **Works with all major AI assistants**
+**224 powerful tools** | **8 workflow prompts** | **8 data resources** | **Works with all major AI assistants**
 
 ## Why kubectl-mcp-server?
 
@@ -456,7 +456,7 @@ Add to `~/.config/roo-code/mcp.json` or `~/.config/kilo-code/mcp.json`:
 
 ## Complete Feature Set
 
-### 131 MCP Tools for Complete Kubernetes Management
+### 224 MCP Tools for Complete Kubernetes Management
 
 | Category | Tools |
 |----------|-------|
@@ -481,6 +481,16 @@ Add to `~/.config/roo-code/mcp.json` or `~/.config/kilo-code/mcp.json`:
 | **Cost Optimization** | `get_resource_recommendations`, `get_idle_resources`, `get_resource_quotas_usage`, `get_cost_analysis`, `get_overprovisioned_resources`, `get_resource_trends`, `get_namespace_cost_allocation`, `optimize_resource_requests` |
 | **Advanced** | `kubectl_generic`, `kubectl_explain`, `get_api_resources`, `port_forward`, `get_resource_usage`, `node_management` |
 | **UI Dashboards** | `show_pod_logs_ui`, `show_pods_dashboard_ui`, `show_resource_yaml_ui`, `show_cluster_overview_ui`, `show_events_timeline_ui`, `render_k8s_dashboard_screenshot` |
+| **GitOps (Flux/Argo)** | `gitops_apps_list`, `gitops_app_get`, `gitops_app_sync`, `gitops_app_status`, `gitops_sources_list`, `gitops_source_get`, `gitops_detect_engine` |
+| **Cert-Manager** | `certs_list`, `certs_get`, `certs_issuers_list`, `certs_issuer_get`, `certs_renew`, `certs_status_explain`, `certs_challenges_list`, `certs_requests_list`, `certs_detect` |
+| **Policy (Kyverno/Gatekeeper)** | `policy_list`, `policy_get`, `policy_violations_list`, `policy_explain_denial`, `policy_audit`, `policy_detect` |
+| **Backup (Velero)** | `backup_list`, `backup_get`, `backup_create`, `backup_delete`, `restore_list`, `restore_create`, `restore_get`, `backup_locations_list`, `backup_schedules_list`, `backup_schedule_create`, `backup_detect` |
+| **KEDA Autoscaling** | `keda_scaledobjects_list`, `keda_scaledobject_get`, `keda_scaledjobs_list`, `keda_triggerauths_list`, `keda_triggerauth_get`, `keda_hpa_list`, `keda_detect` |
+| **Cilium/Hubble** | `cilium_policies_list`, `cilium_policy_get`, `cilium_endpoints_list`, `cilium_identities_list`, `cilium_nodes_list`, `cilium_status`, `hubble_flows_query`, `cilium_detect` |
+| **Argo Rollouts/Flagger** | `rollouts_list`, `rollout_get`, `rollout_status`, `rollout_promote`, `rollout_abort`, `rollout_retry`, `rollout_restart`, `analysis_runs_list`, `flagger_canaries_list`, `flagger_canary_get`, `rollouts_detect` |
+| **Cluster API** | `capi_clusters_list`, `capi_cluster_get`, `capi_machines_list`, `capi_machine_get`, `capi_machinedeployments_list`, `capi_machinedeployment_scale`, `capi_machinesets_list`, `capi_machinehealthchecks_list`, `capi_clusterclasses_list`, `capi_cluster_kubeconfig`, `capi_detect` |
+| **KubeVirt VMs** | `kubevirt_vms_list`, `kubevirt_vm_get`, `kubevirt_vmis_list`, `kubevirt_vm_start`, `kubevirt_vm_stop`, `kubevirt_vm_restart`, `kubevirt_vm_pause`, `kubevirt_vm_unpause`, `kubevirt_vm_migrate`, `kubevirt_datasources_list`, `kubevirt_instancetypes_list`, `kubevirt_datavolumes_list`, `kubevirt_detect` |
+| **Istio/Kiali** | `istio_virtualservices_list`, `istio_virtualservice_get`, `istio_destinationrules_list`, `istio_gateways_list`, `istio_peerauthentications_list`, `istio_authorizationpolicies_list`, `istio_proxy_status`, `istio_analyze`, `istio_sidecar_status`, `istio_detect` |
 
 ### MCP Resources
 
@@ -520,11 +530,12 @@ Pre-built workflow prompts for common Kubernetes operations:
 
 ### Key Capabilities
 
-- 🤖 **131 Powerful Tools** - Complete Kubernetes management from pods to security
+- 🤖 **224 Powerful Tools** - Complete Kubernetes management from pods to security
 - 🎯 **8 AI Workflow Prompts** - Pre-built workflows for common operations
 - 📊 **8 MCP Resources** - Browsable Kubernetes data exposure
 - 🎨 **6 Interactive Dashboards** - HTML UI tools for visual cluster management
 - 🌐 **26 Browser Tools** - Web automation with cloud provider support
+- 🔄 **93 Ecosystem Tools** - GitOps, Cert-Manager, Policy, Backup, KEDA, Cilium, Rollouts, CAPI, KubeVirt, Istio
 - ⚡ **Multi-Transport** - stdio, SSE, HTTP, streamable-http
 - 🔐 **Security First** - Non-destructive mode, secret masking, RBAC validation
 - 🏥 **Advanced Diagnostics** - AI-powered troubleshooting and cost optimization
@@ -759,7 +770,7 @@ EOF
 agentgateway --config gateway.yaml
 ```
 
-Connect clients to `http://localhost:3000/mcp` for unified access to all 131 tools.
+Connect clients to `http://localhost:3000/mcp` for unified access to all 224 tools.
 
 ## In-Cluster Deployment
 
@@ -818,7 +829,7 @@ kubectl apply -f deploy/kagent/toolserver-stdio.yaml
 kagent dashboard
 ```
 
-Your AI agents now have access to all 131 Kubernetes tools. See [kagent quickstart](https://kagent.dev/docs/kagent/getting-started/quickstart).
+Your AI agents now have access to all 224 Kubernetes tools. See [kagent quickstart](https://kagent.dev/docs/kagent/getting-started/quickstart).
 
 ## Architecture
 
@@ -836,7 +847,7 @@ The MCP server implements the [Model Context Protocol](https://github.com/modelc
 ```
 kubectl_mcp_tool/
 ├── mcp_server.py          # Main server (FastMCP, transports)
-├── tools/                  # 131 MCP tools organized by category
+├── tools/                  # 224 MCP tools organized by category
 │   ├── pods.py            # Pod management & diagnostics
 │   ├── deployments.py     # Deployments, StatefulSets, DaemonSets
 │   ├── core.py            # Namespaces, ConfigMaps, Secrets
@@ -848,7 +859,17 @@ kubectl_mcp_tool/
 │   ├── operations.py      # kubectl apply/patch/describe/etc
 │   ├── diagnostics.py     # Metrics, namespace comparison
 │   ├── cost.py            # Resource optimization & cost analysis
-│   └── ui.py              # MCP-UI interactive dashboards
+│   ├── ui.py              # MCP-UI interactive dashboards
+│   ├── gitops.py          # GitOps (Flux/ArgoCD)
+│   ├── certs.py           # Cert-Manager
+│   ├── policy.py          # Policy (Kyverno/Gatekeeper)
+│   ├── backup.py          # Backup (Velero)
+│   ├── keda.py            # KEDA autoscaling
+│   ├── cilium.py          # Cilium/Hubble network observability
+│   ├── rollouts.py        # Argo Rollouts/Flagger
+│   ├── capi.py            # Cluster API
+│   ├── kubevirt.py        # KubeVirt VMs
+│   └── kiali.py           # Istio/Kiali service mesh
 ├── resources/              # 8 MCP Resources for data exposure
 ├── prompts/                # 8 MCP Prompts for workflows
 └── cli/                    # CLI interface
@@ -860,7 +881,7 @@ Seamlessly manage multiple Kubernetes clusters through natural language. **Every
 
 ### Context Parameter (v1.15.0)
 
-All 131 tools accept an optional `context` parameter to target specific clusters:
+All 224 tools accept an optional `context` parameter to target specific clusters:
 
 **Talk to your AI assistant:**
 ```
@@ -949,13 +970,13 @@ pytest tests/ -v -m unit
 tests/
 ├── __init__.py          # Test package
 ├── conftest.py          # Shared fixtures and mocks
-├── test_tools.py        # Unit tests for 131 MCP tools
+├── test_tools.py        # Unit tests for 224 MCP tools
 ├── test_resources.py    # Tests for 8 MCP Resources
 ├── test_prompts.py      # Tests for 8 MCP Prompts
 └── test_server.py       # Server initialization tests
 ```
 
-**216 tests covering**: tool registration, resource exposure, prompt generation, server initialization, non-destructive mode, secret masking, error handling, transport methods, CLI commands, and browser automation.
+**234 tests covering**: tool registration, resource exposure, prompt generation, server initialization, non-destructive mode, secret masking, error handling, transport methods, CLI commands, browser automation, and ecosystem tools.
 
 ### Code Quality
 

kubectl_mcp_server-1.17.0.dist-info/RECORD

@@ -0,0 +1,75 @@
+kubectl_mcp_server-1.17.0.dist-info/licenses/LICENSE,sha256=nH9Z0W0WNH2oQ4cPrBAU8ldDcHfeI6NUbkSGiazYWgQ,1070
+kubectl_mcp_tool/__init__.py,sha256=9s67uMXh5QXX-vJgm6xVezzvqqpgckeH0JrNM9Q381E,580
+kubectl_mcp_tool/__main__.py,sha256=CE6cTD6PA71Ap0i5_gE17Pb9FcedOJmtGRNzZ5-TFSc,1490
+kubectl_mcp_tool/crd_detector.py,sha256=xLZSyg3iIe_MjSMI3mESe2VK8wGJzu40rJ7F72fULBs,7139
+kubectl_mcp_tool/diagnostics.py,sha256=uwolSoHadRkB-J8PAsabbexfj6sTNCIIRRrABBRXoTU,11776
+kubectl_mcp_tool/k8s_config.py,sha256=tjP_VONsoqhd5qn0LPB25aKhiPw2qCYhJ_B52NbRYDo,15746
+kubectl_mcp_tool/mcp_server.py,sha256=-p-r-NRaX6UiHUebvO4OIozRlA2PX851rmAlW_rO3Tk,31112
+kubectl_mcp_tool/safety.py,sha256=7bx7tUH_hT4Y_eTnpH5knnHTsvnIZvI_0oo9MSBe_z8,5036
+kubectl_mcp_tool/auth/__init__.py,sha256=ot8ivZZkDtV8Rg0y1UYruwobKCPyxX1svqh35wWxKvY,347
+kubectl_mcp_tool/auth/config.py,sha256=wi3wuJNMyDqMeluDHL0MaJyedIFv5CFVxiUaEVaTvzk,2267
+kubectl_mcp_tool/auth/scopes.py,sha256=KPmuGO0SrTkjzlElWFOV29ie9apTdMklOCkiA-965lI,6147
+kubectl_mcp_tool/auth/verifier.py,sha256=ChZM-UsZJgZc3LjSfw8VfSydkKqKBZ1s8es71LlB_A0,2431
+kubectl_mcp_tool/cli/__init__.py,sha256=NDd1-7_Ira9vx0uNVOUqhkK7S53IOTu0WUBWOKCtap8,1348
+kubectl_mcp_tool/cli/__main__.py,sha256=OxhHqW8YsTd565acTDlZknljPAw6FN9JW7pNtgWIcFE,196
+kubectl_mcp_tool/cli/cli.py,sha256=vty-ooXE9lpi7BgIHmEsuUn3WYEiqlmPm6WIEmb9nYg,22510
+kubectl_mcp_tool/cli/errors.py,sha256=nCvopWH9bt8wGRt6RTDoXo7IsKwsdwzRMvJ5OM2a1Eg,9018
+kubectl_mcp_tool/cli/output.py,sha256=Ml14BadxgbOUpUZy_76lHrOxsxramvISgK_2Gney9lI,10558
+kubectl_mcp_tool/config/__init__.py,sha256=1jk1JHO1Wpr7W9ISoJST8bZkm7B8ZAjVSQ3OoF9mZyw,961
+kubectl_mcp_tool/config/loader.py,sha256=7HecHrQ-PvBad22954fqZqFLozpfhJ5BDspZWXBjOEg,12045
+kubectl_mcp_tool/config/schema.py,sha256=Y4cvsHLXcTBpuWdobxDO5y4Ig8LiyeEgKd7wUZp4Rag,6103
+kubectl_mcp_tool/observability/__init__.py,sha256=cNGHWjn7cAPHwI_0ZimcLUVQd5VMRKgcNnfkA6bj658,1469
+kubectl_mcp_tool/observability/metrics.py,sha256=u2CbMTjceibz04f6o8l_iUmgMSfzX2EgnGCDS9FQbUY,5790
+kubectl_mcp_tool/observability/stats.py,sha256=qbbWaKCuHm1nbTVF-AeIfBlhaITJuUCnv9IccpuRxgQ,7971
+kubectl_mcp_tool/observability/tracing.py,sha256=DEziQN7WbR9taQ7vEo2yM3JtlHKXpLSyPNWjVh6SvUg,11162
+kubectl_mcp_tool/prompts/__init__.py,sha256=ecxQuPcBKRaF8zbG5fkthrRXGhlSjORLVuk9hV4582g,1104
+kubectl_mcp_tool/prompts/builtin.py,sha256=ET5KYqC-J3XwzVfesB7V6faLFSFlvvAqpT0gTuexRgk,20146
+kubectl_mcp_tool/prompts/custom.py,sha256=ce4DmQLMh_UTKb4kbredekvvgI8GQWzuuB2H0P4JJAA,9214
+kubectl_mcp_tool/prompts/prompts.py,sha256=ogDhU6FVsYIlig_QuIw-TblxR9GQJ3Xp8mJHLBcZ1z4,28263
+kubectl_mcp_tool/resources/__init__.py,sha256=ERkn0ErlaGi9-dybv4wrAaT8WretvNp6K002h7Agjno,83
+kubectl_mcp_tool/resources/resources.py,sha256=kvK4OM3Ox5cFvWDqJBTXOfBgnRYdoqdvvjsdCg0PJfY,12713
+kubectl_mcp_tool/tools/__init__.py,sha256=DgFcaXxqMf7dgXcYWXl0-zKBJTUSF7Y__Cqsd79hRBA,1761
+kubectl_mcp_tool/tools/backup.py,sha256=ToZABafXvrBQy-Hlc31xzVX5shWaB71JeqD3xq-4kh0,30423
+kubectl_mcp_tool/tools/browser.py,sha256=OvXUHzEuciRQInnwLLC16iObOOdniu09b9RT81y7sdc,25338
+kubectl_mcp_tool/tools/capi.py,sha256=mPCm6wUI3Sr5Mg9RjWSKBR5uwWn02Byyx42Cc1Fo7IE,25738
+kubectl_mcp_tool/tools/certs.py,sha256=7Qdsx3IwCI3_mgcPrypzF6MFL5jZjKkVXsXUohAbfh8,25720
+kubectl_mcp_tool/tools/cilium.py,sha256=ku5E-fQ9vS4MhSnaZA_rli6ebXXLCHBuKhZBrEo221c,19973
+kubectl_mcp_tool/tools/cluster.py,sha256=DAA2NQyRmMtyBDgyYOgwaCEPl0jGL24HOH07ypiCOYw,35660
+kubectl_mcp_tool/tools/core.py,sha256=67Cx1z4DqV0Qd26yXkF1eBXbUIlBB3Qj2W8rOInvb54,17801
+kubectl_mcp_tool/tools/cost.py,sha256=fcFlIv-bsMdKESw-l-T6ECsUplDukNHaqM76JCYVHvQ,29629
+kubectl_mcp_tool/tools/deployments.py,sha256=e138KV30DQhLCnvXntrofx1XdLH0dC0_mlODbzkluKk,18329
+kubectl_mcp_tool/tools/diagnostics.py,sha256=LGpW-cx2ui40IIq4pZPT2O8nVzKCpOEVnnQ1OGUSVt0,7864
+kubectl_mcp_tool/tools/gitops.py,sha256=YMsSL0vzzz-XtFXRgney3yKwVfIfuYTSOsLbbLUEI5w,20497
+kubectl_mcp_tool/tools/helm.py,sha256=v_d1aH79VCKJmFi-kXG1LwzZRw6OFToyVC7D9tEp99A,61658
+kubectl_mcp_tool/tools/keda.py,sha256=Et7NSRIH2FSIG2iJ0LyLcQTsFqdeVsKTUr1KKT4tmso,16155
+kubectl_mcp_tool/tools/kiali.py,sha256=ThUF3d_PBEpu9aVSg8gVw9WtPGwkwJlmn6R8sj-BgqM,21932
+kubectl_mcp_tool/tools/kubevirt.py,sha256=yN5ilsGEEFTKJ7h5iAONr4CVFqj_wKjHBcdijGx2DWU,26878
+kubectl_mcp_tool/tools/networking.py,sha256=5I-2SHp2kK9OyGJJ9KUU0hetlYoREIfin1J6CJA6HVQ,14309
+kubectl_mcp_tool/tools/operations.py,sha256=c7j1quXwRDoB9pMkmnLZ5Mk4QoCAuEzWVXJl_hmg2tc,24862
+kubectl_mcp_tool/tools/pods.py,sha256=PsjqbudCUEgZdJmBBeHX3qg-mObn9mlVOCpJOU8XBd8,27271
+kubectl_mcp_tool/tools/policy.py,sha256=T4zf6EvOdIOtqLfnn4wE1QR7nzIeYOkG-vIvXNcu4nc,21769
+kubectl_mcp_tool/tools/rollouts.py,sha256=K1VpvnMIE36I0kWB0Bo338UNQhctkIdmtmcdkt3ddhE,26224
+kubectl_mcp_tool/tools/security.py,sha256=d7WLj-JZwr-0opzkRNWyPdMykvBjdsDCBSZHovDIPLo,13971
+kubectl_mcp_tool/tools/storage.py,sha256=ILI3X5GYXASCETqg3A7X33B7PjwD5UsxL-iDG7yTi_8,5676
+kubectl_mcp_tool/tools/ui.py,sha256=HHi0KM2JTvZFpQjo5V6XkJf02hxFoasec7uyNY5wuuo,39702
+kubectl_mcp_tool/utils/__init__.py,sha256=CHBCpaXwt994DlqyRFkkRky2TK8OmmDl0Gyc28369gI,348
+kubectl_mcp_tool/utils/helpers.py,sha256=W--wiVSKKqmjpxxdLT0J6rmhOQcp1OFk9jLrtQUVpGw,2444
+tests/__init__.py,sha256=qZPXYXv3whkkWhi61Ngzj09GHnIFlVSZrajE0XRk55o,290
+tests/conftest.py,sha256=6054YlpuGleV3Wg8BnVj4lnKWhGk-Eqc9JYTXxOmsXs,10782
+tests/test_auth.py,sha256=PoESfWiN92wSGUdVwLL3Z1AP6C1zUsVmgTI7Q8ZdlxM,11074
+tests/test_browser.py,sha256=6rB6Atqq3b2-xWnKzFdCVFHbF2Q3nt2Dy8Rp4ZwIgNk,20621
+tests/test_cli.py,sha256=G-f9uByWooe-yUOH0ahBdoft4uz8TC0R0OzDs1Lom-4,10014
+tests/test_config.py,sha256=9_A6_ntjvX556GvFvHGHuel1ERGo-WrbnFJX8OniUvg,12568
+tests/test_ecosystem.py,sha256=SkxDWAASELIxzaYWu0d-Rw1HaKSSlyMMenwwF2HWvSA,13227
+tests/test_mcp_integration.py,sha256=9ePvu1MJ0mTnMRFHthDwl3D2jyVPgQ1beUbchpT8Y3M,8782
+tests/test_observability.py,sha256=m0m-uIQrE9OJ3FFls_rVZJst3NeAFKRtNUZohFpIZE4,17829
+tests/test_prompts.py,sha256=VzZAXr5iFO-hG8kRwRnG4wom2LlqOmZ-SeW4d3HQ7hc,42888
+tests/test_resources.py,sha256=Z0Ex8WdRz-B3VZa1s0eAaDDGbhy7dRdqy1uFVOe2Qbo,12689
+tests/test_safety.py,sha256=5IOBQbcH2r8tANQD7ymsR6pBc6O50IspcFsuwrnwh1M,8292
+tests/test_server.py,sha256=lLvgbqutnivSgQMNrki0O48whBQt0UXjdwT047nf0nw,14415
+tests/test_tools.py,sha256=g3moVSpiFgqC107M4tBAQ6xU600rlYMPhnknyYhnTIc,34792
+kubectl_mcp_server-1.17.0.dist-info/METADATA,sha256=EUwLkB1T8qDphYWRwKMaXiuw6BYDnQjBa21DTvnoRCc,38116
+kubectl_mcp_server-1.17.0.dist-info/WHEEL,sha256=qELbo2s1Yzl39ZmrAibXA2jjPLUYfnVhUNTlyF1rq0Y,92
+kubectl_mcp_server-1.17.0.dist-info/entry_points.txt,sha256=zeOxQGaNC4r58deEmqsLCU5hfMjF0VqFUt9P5wWsKEM,109
+kubectl_mcp_server-1.17.0.dist-info/top_level.txt,sha256=o5IpfOGG-lqU8rVWJeK9aYC0r4f6qEX09QiBhZlYbkQ,23
+kubectl_mcp_server-1.17.0.dist-info/RECORD,,

kubectl_mcp_tool/__init__.py

@@ -7,7 +7,7 @@ with Kubernetes clusters through natural language commands.
 For more information, see: https://github.com/rohitg00/kubectl-mcp-server
 """
 
-__version__ = "1.15.0"
+__version__ = "1.17.0"
 
 from .mcp_server import MCPServer
 from .diagnostics import run_diagnostics, check_kubectl_installation, check_cluster_connection

kubectl_mcp_tool/cli/cli.py

@@ -37,6 +37,7 @@ from .output import (
     format_error,
     format_success,
 )
+from ..safety import SafetyMode, set_safety_mode, get_mode_info
 
 # Logging setup
 log_file = os.environ.get("MCP_LOG_FILE")
@@ -56,18 +57,49 @@ logging.basicConfig(
 logger = logging.getLogger("kubectl-mcp-cli")
 
 
-async def serve_stdio():
-    server = MCPServer("kubernetes")
+async def serve_stdio(
+    read_only: bool = False,
+    disable_destructive: bool = False,
+    config_file: Optional[str] = None,
+):
+    server = MCPServer(
+        "kubernetes",
+        read_only=read_only,
+        disable_destructive=disable_destructive,
+        config_file=config_file,
+    )
     await server.serve_stdio()
 
 
-async def serve_sse(host: str, port: int):
-    server = MCPServer("kubernetes")
+async def serve_sse(
+    host: str,
+    port: int,
+    read_only: bool = False,
+    disable_destructive: bool = False,
+    config_file: Optional[str] = None,
+):
+    server = MCPServer(
+        "kubernetes",
+        read_only=read_only,
+        disable_destructive=disable_destructive,
+        config_file=config_file,
+    )
     await server.serve_sse(host=host, port=port)
 
 
-async def serve_http(host: str, port: int):
-    server = MCPServer("kubernetes")
+async def serve_http(
+    host: str,
+    port: int,
+    read_only: bool = False,
+    disable_destructive: bool = False,
+    config_file: Optional[str] = None,
+):
+    server = MCPServer(
+        "kubernetes",
+        read_only=read_only,
+        disable_destructive=disable_destructive,
+        config_file=config_file,
+    )
     await server.serve_http(host=host, port=port)
 
 
@@ -282,12 +314,16 @@ def cmd_info(args):
     except Exception:
         pass
 
+    # Get safety mode info
+    mode_info = get_mode_info()
+
     print(format_server_info(
         version=__version__,
         tool_count=len(tools),
         resource_count=len(resources),
         prompt_count=len(prompts),
         context=context,
+        safety_mode=mode_info,
         as_json=getattr(args, 'json', False)
     ))
     return ErrorCode.SUCCESS
@@ -407,6 +443,16 @@ def cmd_doctor(args):
     except ImportError:
         checks.append({"name": "fastmcp", "status": "error", "details": "fastmcp not installed"})
 
+    # Check safety mode
+    mode_info = get_mode_info()
+    mode = mode_info.get("mode", "normal")
+    if mode == "normal":
+        checks.append({"name": "safety_mode", "status": "ok", "version": mode, "details": "All operations allowed"})
+    elif mode == "read_only":
+        checks.append({"name": "safety_mode", "status": "warning", "version": mode, "details": "Write operations blocked"})
+    else:
+        checks.append({"name": "safety_mode", "status": "warning", "version": mode, "details": "Destructive operations blocked"})
+
     print(format_doctor_results(checks, as_json=getattr(args, 'json', False)))
 
     # Return error code if any critical checks failed
@@ -453,6 +499,9 @@ Environment Variables:
     )
     serve_parser.add_argument("--host", type=str, default="0.0.0.0", help="Host for SSE/HTTP (default: 0.0.0.0)")
     serve_parser.add_argument("--port", type=int, default=8000, help="Port for SSE/HTTP (default: 8000)")
+    serve_parser.add_argument("--config", type=str, default=None, help="Path to TOML configuration file")
+    serve_parser.add_argument("--read-only", action="store_true", help="Enable read-only mode (block all write operations)")
+    serve_parser.add_argument("--disable-destructive", action="store_true", help="Disable destructive operations (allow create/update, block delete)")
 
     # version command (existing)
     subparsers.add_parser("version", help="Show version")
@@ -507,12 +556,37 @@ Environment Variables:
 
     try:
         if args.command == "serve":
+            # Log safety mode (actual mode is applied in MCPServer)
+            if args.read_only:
+                logger.info("Starting server in READ-ONLY mode")
+            elif args.disable_destructive:
+                logger.info("Starting server with destructive operations disabled")
+
+            if args.config:
+                logger.info(f"Loading configuration from: {args.config}")
+
             if args.transport == "stdio":
-                asyncio.run(serve_stdio())
+                asyncio.run(serve_stdio(
+                    read_only=args.read_only,
+                    disable_destructive=args.disable_destructive,
+                    config_file=args.config,
+                ))
             elif args.transport == "sse":
-                asyncio.run(serve_sse(args.host, args.port))
+                asyncio.run(serve_sse(
+                    host=args.host,
+                    port=args.port,
+                    read_only=args.read_only,
+                    disable_destructive=args.disable_destructive,
+                    config_file=args.config,
+                ))
             elif args.transport in ("http", "streamable-http"):
-                asyncio.run(serve_http(args.host, args.port))
+                asyncio.run(serve_http(
+                    host=args.host,
+                    port=args.port,
+                    read_only=args.read_only,
+                    disable_destructive=args.disable_destructive,
+                    config_file=args.config,
+                ))
 
         elif args.command == "version":
             from .. import __version__

kubectl_mcp_tool/cli/output.py

@@ -266,6 +266,7 @@ def format_server_info(
     resource_count: int,
     prompt_count: int,
     context: Optional[str] = None,
+    safety_mode: Optional[Dict[str, Any]] = None,
     as_json: bool = False
 ) -> str:
     info = {
@@ -276,6 +277,9 @@ def format_server_info(
         "k8s_context": context,
     }
 
+    if safety_mode:
+        info["safety_mode"] = safety_mode
+
     if as_json:
         return json.dumps(info, indent=2)
 
@@ -291,6 +295,16 @@ def format_server_info(
     if context:
         lines.append(f"  {cyan('K8s Context:')} {context}")
 
+    if safety_mode:
+        mode = safety_mode.get("mode", "normal")
+        if mode == "normal":
+            mode_str = green(mode)
+        elif mode == "read_only":
+            mode_str = yellow(mode) + " (write operations blocked)"
+        else:
+            mode_str = yellow(mode) + " (destructive operations blocked)"
+        lines.append(f"  {cyan('Safety Mode:')} {mode_str}")
+
     return "\n".join(lines)
 
 

kubectl_mcp_tool/config/__init__.py

@@ -0,0 +1,46 @@
+"""Configuration management for kubectl-mcp-server.
+
+This module provides TOML-based configuration with:
+- Main config file support
+- Drop-in directory for modular configuration
+- SIGHUP reload for runtime updates
+- Environment variable overrides
+"""
+
+from .loader import (
+    Config,
+    load_config,
+    get_config,
+    reload_config,
+    get_config_paths,
+    setup_sighup_handler,
+    register_reload_callback,
+    unregister_reload_callback,
+)
+from .schema import (
+    ServerConfig,
+    SafetyConfig,
+    BrowserConfig,
+    MetricsConfig,
+    LoggingConfig,
+    validate_config,
+)
+
+__all__ = [
+    # Config loading
+    "Config",
+    "load_config",
+    "get_config",
+    "reload_config",
+    "get_config_paths",
+    "setup_sighup_handler",
+    "register_reload_callback",
+    "unregister_reload_callback",
+    # Config schemas
+    "ServerConfig",
+    "SafetyConfig",
+    "BrowserConfig",
+    "MetricsConfig",
+    "LoggingConfig",
+    "validate_config",
+]