get_kubernetes_cluster_config

What get_kubernetes_cluster_config does on Vultr MCP

AI agents call get_kubernetes_cluster_config to retrieve information from Vultr MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_kubernetes_cluster_config is rated Low

This tool performs a read operation by fetching cluster credentials/configuration. However, severity is rated 'high' rather than 'low' because the kubeconfig contains sensitive authentication material that grants administrative access to a Kubernetes cluster. Unauthorized disclosure could enable cluster compromise, though the tool itself does not execute commands or modify infrastructure—it only retrieves data.

From the tool's definition Tool retrieves kubeconfig for a Kubernetes cluster via 'Get the kubeconfig' action, which is a read/retrieval operation without data modification.

The rule that runs get_kubernetes_cluster_config safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Vultr MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_kubernetes_cluster_config, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_kubernetes_cluster_config": {}
  }
}

Questions about get_kubernetes_cluster_config