Azure AKS MCP Server: Setup for Claude, Cursor and Other Apps

• Runs Azure CLI commands for AKS and other Azure resources

  Runs an Azure CLI command such as listing clusters or showing a VM. In read-only mode only read commands run. Pipes, redirects and az rest are not allowed, and a few commands that return credentials are blocked.

  Try: “List all my AKS clusters in resource group myRG.”

  Delete · call_az

• Runs kubectl commands against your cluster

  Runs any kubectl command, such as get pods or describe node. Read-only mode allows get, describe and logs. In read-write or admin mode it can also create, apply and delete.

  Try: “Show the pods in kube-system with their nodes.”

  Delete · call_kubectl

• Reads metrics, health events, logs and Application Insights data for a cluster

  Pulls monitoring data for an AKS cluster: metric values, resource health events, KQL queries on Application Insights, diagnostic settings and control plane logs. Control plane log queries have safety limits and time range checks.

  Try: “Show the control plane logs for cluster prod-aks from the last hour.”

  Network · aks_monitoring

• Runs AKS diagnostic detectors to find problems

  Runs Azure's built-in diagnostic detectors against a cluster to look for known problems.

  Try: “Run the diagnostic detectors on my cluster and tell me what is wrong.”

  Network · aks_detector

• Lists and reports Azure Advisor recommendations for AKS clusters

  Lists Azure Advisor recommendations for your clusters and generates reports. You can filter by resource group, cluster, category (cost, availability, performance, security) and severity.

  Try: “What high severity security recommendations do my AKS clusters have?”

  Network · aks_advisor_recommendation

• Shows the networks, subnets, security groups and load balancers a cluster uses

  Looks up the virtual network, subnet, network security group, route table, load balancer and private endpoint information for a cluster.

  Try: “Which subnet and network security group does my cluster use?”

  Network · aks_network_resources

• Shows the scale set settings behind a node pool

  Returns the virtual machine scale set configuration for a cluster's node pools.

  Try: “Show the scale set config for the nodepool1 node pool.”

  Network · get_aks_vmss_info

• Collects system logs from cluster nodes for troubleshooting

  Gathers system logs from the nodes in a scale set to help debug a problem. It supports Linux scale set nodes only, and one run command can execute at a time per instance.

  Try: “Collect kubelet logs from the node that keeps going NotReady.”

  Runs code · collect_aks_node_logs

• Manages Azure Fleet for multi-cluster setups

  Lists, shows, creates, updates and deletes fleets, members, update runs and update strategies, and works with ClusterResourcePlacement objects. Writes need read-write or admin access.

  Try: “List the members of fleet myFleet and show the latest update run.”

  Delete · az_fleet

• Runs Helm commands to manage apps on your cluster

  Runs Helm commands, for example listing releases or installing a chart.

  Try: “List the Helm releases in the monitoring namespace.”

  Delete · call_helm

• Runs Cilium commands for cluster networking and security

  Runs the Cilium command line tool to check or manage Cilium networking on the cluster.

  Try: “Check the Cilium status on my cluster.”

  Runs code · call_cilium

• Runs Hubble commands to watch network traffic

  Runs Hubble to observe network flows in a cluster that uses Cilium.

  Try: “Show recent dropped network flows in the default namespace.”

  Runs code · call_hubble

• Deploys Inspektor Gadget and watches DNS, TCP, file and process activity live

  Installs the Inspektor Gadget extension on the cluster, runs or starts gadgets that watch DNS, TCP connections, file opens, process execution and system calls, and returns results. It can also remove the extension.

  Try: “Watch DNS requests in the payments namespace for a minute.”

  Delete · inspektor_gadget_observability

Watch out for

• It runs commands as your Azure identity

  The README says anyone who can call it has the full Azure and Kubernetes rights of the identity it runs as. Use an account with only the permissions you need. github.com

• Read-write and admin modes can delete and deploy

  In those modes kubectl and Helm can delete resources, read Secrets and deploy workloads. Keep the default read-only level unless you need changes. github.com

• Access level is a guardrail, not a security boundary

  The README says it reduces accidents but does not stop a determined caller. Do not run it for users you would not trust with the credentials. github.com

• Run it locally only

  The project supports only a local stdio process and says not to expose it through HTTP, a container service, Helm or a gateway. github.com

• Telemetry

  The README has a telemetry section. Check it if that matters to your team. github.com

Security advisories