THRONE
See report Verify server

registry / record

mcp-server-kubernetes

npm / sealed 2026-06-13 / No. 0fa12e29

> throne registry mcp-server-kubernetes sealed
receiptsealed evidence
scan id
0fa12e2999d447e2ae53e62e302038bb
target
mcp-server-kubernetes
sealed at
2026-06-13 03:41:22Z
evidence hash
sha256:d4aec50f184c4e5b960d94a7dc704db08ca19c9b30329db7c4883709c8bbfbfa
01connectPASS8.5s

initialize ok: server kubernetes 3.9.1, negotiated protocolVersion 2025-11-25, capabilities ['prompts', 'resources', 'tools']

02discoverPASS31ms

supported: tools/list (23 tools), resources/list (5), prompts/list (1)

03validate_schemasPASS279ms

all 23 tool inputSchemas are valid JSON Schema

04smoke_test_toolsPASS258ms

called 10 of 10 tools (cap 10): 2 ok, 8 returned tool-level errors (expected for synthesized args)

05error_handlingPASS12.9s

structured error responses, connection survived — wrong_type_args: accepted (returned result); unknown_method: error(-32601); invalid_id: no response (silent), connection alive

06streamingPASS0ms

no streaming-capable tool declared by this server; not applicable (pass-na)

07resource_lifecycleWARN11ms

server answered with a structured error instead of completing the step — MCP error -32603: MCP error -32603: Failed to read resource: Error: HTTP protocol is not allowed when skipTLSVerify is not set or false

08concurrent_callsPASS36ms

ladder 1/2/4/8 overlapping cleanup calls: max_observed_stable_concurrency=8; all ids answered exactly once at every level

09reconnectPASS9.6s

transport closed and relaunched; re-handshake ok (protocolVersion 2025-11-25, first session was 2025-11-25)

01connectPASS7.2s

initialize ok: server kubernetes 3.9.1, negotiated protocolVersion 2025-11-25, capabilities ['prompts', 'resources', 'tools']

02discoverPASS31ms

supported: tools/list (23 tools), resources/list (5), prompts/list (1)

03validate_schemasPASS178ms

all 23 tool inputSchemas are valid JSON Schema

04smoke_test_toolsPASS208ms

called 10 of 10 tools (cap 10): 2 ok, 8 returned tool-level errors (expected for synthesized args)

05error_handlingPASS11.9s

structured error responses, connection survived — wrong_type_args: accepted (returned result); unknown_method: error(-32601); invalid_id: no response (silent), connection alive

06streamingPASS0ms

no streaming-capable tool declared by this server; not applicable (pass-na)

07resource_lifecycleWARN12ms

server answered with a structured error instead of completing the step — MCP error -32603: MCP error -32603: Failed to read resource: Error: HTTP protocol is not allowed when skipTLSVerify is not set or false

08concurrent_callsPASS36ms

ladder 1/2/4/8 overlapping cleanup calls: max_observed_stable_concurrency=8; all ids answered exactly once at every level

09reconnectPASS8.3s

transport closed and relaunched; re-handshake ok (protocolVersion 2025-11-25, first session was 2025-11-25)

chatgpt desktopemulation profile pending real-traffic captureCOMING SOON
SECURITY: REVIEW / 3 finding(s), 1 high / review material, not a verdict
HIGHTHR-EXEC-04 / Arbitrary command execution from tool arguments

execFileSync() called with a dynamically built command (heuristic — review): 'file, args, options);'

package/dist/security/kubectl-flags.js:151
LOWTHR-NET-05 / Hardcoded outbound endpoints

1 non-local endpoint host(s) referenced in code — verify each is expected for this server's purpose: attacker (package/dist/security/kubectl-flags.d.ts:19)

package/dist/security/kubectl-flags.d.ts:19
MEDIUMTHR-PROMPT-07 / Prompt injection via tool descriptions

injection-style phrase in source string: 'exfiltrate'

package/dist/security/kubectl-flags.js:7
VERDICT: FIT TO SHIPSANDBOXED RUN — submitted server executed in a disposable microVM — compatibility: 0 fail / 2 warn across 2 clients / security: review — 3 finding(s), 1 highsealed by THRONE / No. 0fa12e29 / 2026-06-13
THRONE: FIT TO SHIPwear the crown

paste this in your README. it renders the live verdict and links back to this record. if a release ever breaks the verdict, the badge says so on its own.

[![THRONE: FIT TO SHIP](https://api.usethrone.dev/api/badge/mcp-server-kubernetes)](https://usethrone.dev/server/mcp-server-kubernetes)
executed in a disposable microVM, created for this scan and destroyed after it. nothing outlives a run.

maintainer of this server? challenge this record: hello@usethrone.dev. tell us what we got wrong and we re-run it in the open.

this page renders the stored record of a real run. nothing on it is asserted without the execution that proved it.