
KubeDrive
io.github.aleksskozPublished by GitHub account aleksskozv0.6.6Updated Nov 4, 2026
Your Kubernetes clusters for AI agents through the KubeDrive desktop app, without a kubeconfig.
Overview
Lets an AI assistant read and, with approval, change Kubernetes clusters through the KubeDrive desktop app, without handing over a kubeconfig.
- What you can do
- Inspect clusters and their health, live resources, logs and metrics through the KubeDrive desktop app
- Diagnose crashing pods, map a namespace and check what a Kubernetes upgrade would break
- Work with Helm charts and port-forwarding, with a dry run before installs
- Apply changes to clusters, each one waiting for the user's Allow in a window showing the diff
- Reach only the clusters the user ticks, answered from connections KubeDrive already holds
- When to use it
- Useful when you want an assistant such as Claude Code, Codex, Cursor or Claude Desktop to look at or operate your Kubernetes clusters while keeping credentials out of the agent's hands. It suits people already using the KubeDrive desktop app who want agent access without sharing a kubeconfig.
- Requirements
- The KubeDrive desktop app installed on macOS, Windows or Linux, with the AI Agents server turned on. A client token from KubeDrive → AI Agents, supplied as KUBEDRIVE_MCP_TOKEN, and optionally KUBEDRIVE_MCP_URL if the port was changed. The server listens on the local machine only; a kubeconfig is read by the app, not by the agent.
Installation
In SourceWeft
- Open KubeDrive in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
[KubeDrive]
A fast, native desktop client for Kubernetes, for macOS, Windows and Linux: cluster health, live resources, logs, terminal, Helm and port-forwarding, driven from the keyboard, with an MCP server that lets AI agents work on your clusters without a kubeconfig.
Download · Website · Docs · Performance · AI agents · Pricing
This repository hosts KubeDrive releases, the issue tracker, the benchmarks and
the source of the MCP bridge (kubedrive-mcp, Apache-2.0), the one open part of
KubeDrive. The app itself is closed source.
Why KubeDrive
- Fast at production scale. 50,000 pods on 470 nodes: first rows in 3 s, the full list in
10 s, 428 MB of memory, where
kubectl get pods -Atakes 27 s on the same cluster. KubeDrive asks the API server for tables, not objects, and streams the first page while the rest loads. Numbers, method and the other clients on the performance page; scripts and raw results inbenchmarks/. - Safe on production, by default. A cluster whose context name looks like production is protected from the start: a red window frame, and every change asks you to type the object's name. Helm charts install with a dry run first. Actions your RBAC role does not allow are disabled, not hidden.
- Nothing to install in the cluster. KubeDrive reads the kubeconfig you already have, with your SSO sessions and your permissions, and talks to your API servers directly. Cluster data never reaches our servers.
- One screen for all clusters, with their health; diagnosis of crashing pods; metrics from the Prometheus you already run; an upgrade check that lists what the next Kubernetes version breaks; a map of a namespace; a browser extension that opens EKS, GKE, AKS, Argo CD, Grafana and Rancher pages in KubeDrive.
- Free for daily work with two clusters open. Pro adds unlimited clusters, full Helm, PromQL, aggregated logs, change history and more.
AI agents without a kubeconfig
KubeDrive serves your clusters to Claude Code, Codex, Cursor, Claude Desktop and any other
MCP client. The agent asks KubeDrive; KubeDrive answers with
the connections it already has. The agent never gets a kubeconfig or a cluster token, sees only
the clusters you tick, and the server listens on 127.0.0.1 only.
Reading is free. Changes by agents are part of Pro and every one of them waits for your Allow in a window with the diff; on a protected cluster you type the object's name. The AI agents guide has the setup for each client.
Install
Requirements: macOS 13 Ventura or later (Apple silicon or Intel); Windows 10 1809 or later or Windows 11 (x64 or Arm); Linux with GTK 4 and WebKitGTK 6.0: Debian 13, Ubuntu 24.04, Fedora 40 and newer (x64). The install guide has the details.
macOS
With Homebrew:
Or download KubeDrive-<version>.dmg from the latest release,
open it and drag KubeDrive to Applications. Each release lists the DMG's SHA-256:
The app is signed with a Developer ID and notarized by Apple.
Windows
Download KubeDrive-<version>-x64-setup.exe from the latest release
(KubeDrive-<version>-arm64-setup.exe for Arm PCs) and run it. The installer is not code-signed
yet, so SmartScreen asks once: More info → Run anyway. The release notes carry each installer's
SHA-256. KubeDrive installs to C:\Program Files\AKStudio\KubeDrive and adds the WebView2 runtime if
the PC has none.
Linux
From KubeDrive's package repository, so that system updates bring new versions too. Debian 13, Ubuntu 24.04 and newer:
Fedora 40 and newer:
Or download kubedrive_<version>_amd64.deb or kubedrive-<version>.x86_64.rpm from the
latest release and install it with
sudo apt install ./… or sudo dnf install ./…. The repository and the RPMs are signed with
KubeDrive's key (kubedrive.asc, fingerprint
87AE 5682 0F7C 659C 28CF 91F8 9D49 8CCC F6E3 1831).
Getting started
KubeDrive reads your kubeconfig the same way kubectl does ($KUBECONFIG or ~/.kube/config)
and talks only to your clusters. The one exception is the update check below.
Updating
On its second launch KubeDrive asks whether to check for updates automatically; if you agree, it looks at this repository's latest release once a day, without sending any data about you or your clusters. You can also check by hand at any time: KubeDrive → Check for Updates… on macOS, File → Check for Updates… on Windows and Linux.
- macOS updates itself. Every update is signed, and KubeDrive refuses one whose signature
doesn't match. Version 0.1.0 can't update itself: download the new DMG once, or run
brew upgrade --cask kubedrive. - Windows: the update notice links the installer for your PC; run it over the old version, your settings stay.
- Linux: with the package repository,
sudo apt upgradeorsudo dnf upgradeupdates KubeDrive like any other package; otherwise the update notice links the new package.
Uninstalling
- macOS:
brew uninstall --cask kubedrive(add--zapto remove settings and caches too). Without Homebrew, move KubeDrive to the Trash; settings live in~/Library/Application Support/KubeDrive. - Windows: Settings → Apps → KubeDrive → Uninstall. Settings stay in
%AppData%\KubeDriveuntil you delete the folder. - Linux:
sudo apt remove kubedriveorsudo dnf remove kubedrive. Settings stay in~/.config/KubeDrive.
KubeDrive never changes your kubeconfig, so there is nothing to undo there.
Benchmarks
benchmarks/ holds the scripts and raw results behind
kubedrive.com/performance: how fast KubeDrive and other
Kubernetes clients open 50,000 pods. They are MIT-licensed, so you can rerun them yourself.
Feedback
Found a bug or missing something? Open an issue.
License
KubeDrive is free to use under the license.
Source: README.md at commit b1fd766
Tools
0Version history
6- v0.6.6LatestNov 4, 2026
- v0.6.5Nov 1, 2026
- v0.6.4Oct 31, 2026
- v0.6.3Oct 31, 2026
- v0.6.2Oct 30, 2026
- v0.6.1Oct 30, 2026
Score
40% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts
Declare a license in the repository or the registry entry.