.vscode — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited .vscode (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
View and chat to your Kubernetes cluster and container log files.
brew tap bhf/st-k8s
brew install st-k8s
st-k8sFeatures a dashboard (with a K9s inspired dark theme and keyboard navigation), REST API, port forwarding management, resource monitoring, and MCP server. In browser AI chat powered by the Copilot SDK, any OpenAI API compatible provider, or local WebLLM models (requires WebGPU support).
Chat Context in chat Chat history
Uses Github Projects for planning and tracking.
The dashboard supports K9s-style keyboard navigation. Press : to open the command palette and navigate between resources using commands or aliases:
:pods or :po:deployments or :deploy:services or :svcCommand Pallette
View, copy and download streaming logs.
Log view
Manage Kubernetes port forwarding sessions directly from the dashboard or through AI chat. Supports both Pods and Services.
Port Forwarding
Monitor CPU and memory usage for Nodes and Pods directly in the dashboard using interactive charts. Requires that your cluster has metrics server installed.
ST-K8s supports local AI models running directly in your browser using WebLLM. This requires WebGPU and hardware acceleration to be enabled.
chrome://flags/#enable-unsafe-webgpu into your address bar and set it to Enabled.chrome://flags/#enable-vulkan and set it to Enabled.about:config in the address bar.dom.webgpu.enabled and set it to true.gfx.webgpu.force-enabled and set it to true if WebGPU doesn't work by default.gfx.webrender.all is true.You can verify WebGPU support by visiting webgpu.github.io/webgpu-samples. If the samples run, ST-K8s will be able to load local models.
st-k8s CLIThe easiest way to install and run st-k8s is via Homebrew:
brew tap bhf/st-k8s
brew install st-k8s
st-k8sTo use the browser based chat feature make sure you install the Copilot CLI.
git clone https://github.com/bhf/st-k8s
cd st-k8s
npm run build
npm run startst-k8s CLIYou can install the project as a global CLI to run the app using the st-k8s command.
# From the repo root — install globally (or publish and install from a registry)
npm install -g .
# During development, link the local package to make `st-k8s` available globally
npm link
# Then launch the app with the CLI (it will build if no build exists)
st-k8sNotes:
npm install -g . requires appropriate permissions (use sudo on some systems).npm link is useful when iterating locally — run it once from the repo root.st-k8s command will attempt to use a Next.js standalone server if present (from next build), otherwise it runs npm run start.This project uses Vitest for testing.
# Run all tests
npm test
# Run tests in watch mode
npm test -- --watch
# Run tests with coverage
npm run test:coverageThis project uses Playwright for End-to-End testing.
# Run E2E tests
npm run test:e2eSwagger spec available at http://localhost:3000/openapi.json after starting the server or from the public folder.
This project includes an MCP server that exposes Kubernetes tools to LLMs over stdio. Here are some example uses:
img_1.png
img_2.png
Exposes read-only Kubernetes operations as tools:
list_namespaceslist_podslist_deploymentslist_serviceslist_daemonsetslist_replicasetslist_statefulsetslist_ingresseslist_endpointslist_eventslist_pvcslist_nodeslist_configmapslist_jobslist_cronjobslist_serviceaccountslist_roleslist_rolebindingsget_pod_logslist_port_forwardsstart_port_forwardstop_port_forwardget_node_metricsget_pod_metricsMake sure to auth your kubectl context in your preferred way before running the MCP server.
You can run the MCP server directly using:
npm run mcpYou can also run it from VSCode or any MCP-compatible client by configuring it as shown below.
Add the following to your ``mcp.json``
{
"servers": {
"k8s-tools": {
"command": "npm",
"args": ["run", "mcp"],
"cwd": "/absolute/path/to/st-k8s",
"disabled": false,
"autoApprove": []
}
}
}
Make sure to replace /absolute/path/to/st-k8s with the actual path to this repository on your machine.
This project uses several LLM-based techniques to enhance the development lifecycle and user experience. These artifacts are located in the .github directory:
alt text
We are committed to making the dashboard accessible to all users. Please refer to our Accessibility Statement and Guidelines for details on current status, findings, and remediation plans.
We take security seriously. Please refer to our Security Review for details on our security posture, findings, and recommendations.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.