← Back to search

vcluster-yaml-mcp-server

GitHub Actions Scanned 25d ago

MCP server for querying vcluster YAML configurations using jq

npm ↗
D
40 / 100

Versions

1.5.1latest
Jul 23, 2026
1.5.0
Mar 15, 2026
1.4.4
Feb 22, 2026
1.4.3
Feb 22, 2026
1.4.2
Feb 3, 2026
+ show 24 moreshow less
1.4.1
Feb 3, 2026
1.4.0
Feb 3, 2026
1.3.2
Feb 1, 2026
1.3.1
Feb 1, 2026
1.3.0
Feb 1, 2026
1.2.4
Feb 1, 2026
1.2.3
Feb 1, 2026
1.2.0
Feb 1, 2026
1.1.2
Dec 5, 2025
1.1.1
Oct 26, 2025
1.1.0
Oct 26, 2025
1.0.12
Oct 26, 2025
1.0.11
Oct 26, 2025
1.0.10
Oct 25, 2025
1.0.9
Oct 20, 2025
1.0.8
Oct 20, 2025
1.0.7
Oct 18, 2025
1.0.6
Oct 18, 2025
1.0.4
Oct 18, 2025
1.0.3
Oct 18, 2025
1.0.2
Oct 18, 2025
1.0.1
Oct 18, 2025
1.0.0
Oct 18, 2025
0.1.0
Oct 18, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

list-versions
annotations: verified low

DISCOVERY: Find all available vCluster versions. Returns GitHub tags (stable releases) and branches (development versions). Use this to discover what versions are available before querying specific versions.

readOnlyHint true
smart-query
annotations: verified low

UNIVERSAL SEARCH: Your go-to tool for finding ANY vCluster configuration! Understands natural language, searches intelligently, and finds related settings. USE THIS FIRST for any config questions! Examples: "show me namespace settings", "how is etcd configured?", "what networking options exist?", "find service CIDR". Searches chart/values.yaml by default.

readOnlyHint true
create-vcluster-config
annotations: verified low

CONFIG CREATION WORKFLOW: Use this when generating vCluster configurations for users. This tool REQUIRES you to provide the YAML you created and automatically validates it before returning to the user. Returns validation result + formatted config. This ensures every config you create is validated.

readOnlyHint false
validate-config
annotations: verified low

VALIDATION ONLY: Validates existing vCluster YAML (full config or partial snippet) against the schema. Use create-vcluster-config for configs you generate. Use this to validate user-provided configs or files from GitHub.

readOnlyHint true
extract-validation-rules
annotations: verified low

AI ASSISTANT: Extract validation rules, constraints, and best practices directly from values.yaml comments. Returns structured rules for AI to understand complex relationships and semantic validations that procedural code cannot handle. USE THIS when you need to understand the "why" behind configurations or validate semantic correctness beyond syntax.

readOnlyHint true
get-server-info
annotations: verified low

Get server version, available tools, and metadata. Call on first use to check for updates.

readOnlyHint true
get-changelog
annotations: verified low

Get recent release history. Check for changes relevant to your task.

readOnlyHint true

Permissions 4

shell high
Server uses shell capabilities via: child_process, execSync()
env_vars low
Server uses env_vars capabilities via: process.env
network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs/promises

Scan Findings 38

medium
Vulnerable dependency: express@4.18.2 (GHSA-rv95-896h-c2vc) dependency_analyzer · 95%
info
Tool 'list-versions' annotations are consistent annotation_checker · 80%
info
Tool 'smart-query' annotations are consistent annotation_checker · 80%
info
Tool 'create-vcluster-config' annotations are consistent annotation_checker · 80%
info
Tool 'validate-config' annotations are consistent annotation_checker · 80%
info
Tool 'extract-validation-rules' annotations are consistent annotation_checker · 80%
info
Tool 'get-server-info' annotations are consistent annotation_checker · 80%
info
Tool 'get-changelog' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @opentelemetry/auto-instrumentations-node@0.66.0 (GHSA-q7rr-3cgh-j5r3) dependency_analyzer · 95%
medium
Vulnerable dependency: @opentelemetry/sdk-node@0.207.0 (GHSA-q7rr-3cgh-j5r3) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@8.17.1 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.2 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: express-rate-limit@8.1.0 (GHSA-46wh-pxpv-q5gq) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-52cp-r559-cp3m) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-5p4m-2wfm-xmqj) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-h67p-54hq-rp68) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-mh29-5h37-fv8m) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: list-versions manifest_parser · 85%
info
Tool: smart-query manifest_parser · 85%
info
Tool: create-vcluster-config manifest_parser · 85%
info
Tool: validate-config manifest_parser · 85%
info
Tool: extract-validation-rules manifest_parser · 85%
info
Tool: get-server-info manifest_parser · 85%
info
Tool: get-changelog manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (8) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'extract-validation-rules': Assistant role injection poisoning · 90%
critical
Tool poisoning in 'get-server-info': Cross-tool prerequisite: 'first call/use' poisoning · 85%
info
SBOM generated: 705 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%