Interact with Your Rafay Managed Kubernetes Clusters Using MCP-compatible AI clients
The Model Context Protocol (MCP) is an open standard that enables AI assistants to securely interact with external tools and systems. When used with Kubernetes, MCP allows an AI assistant to execute operations (for example, kubectl commands), retrieve live cluster state, and reason about results without requiring users to manually copy and paste output into a chat interface.
This blog uses Claude Desktop as an example AI assistant. The same approach applies to any MCP-compatible AI client.
For platform administrators, this capability enables controlled, auditable, and policy-driven AI-assisted cluster operations.
Recommended Architecture: Local MCP Server with Rafay ZTKA Kubeconfig
For production environments, the recommended approach is to run the MCP server locally and connect to your Kubernetes cluster using a Rafay Zero Trust Kubectl Access (ZTKA) kubeconfig.
In this model:
- The MCP server runs on the administrator’s workstation
- Cluster access is established through Rafay’s ZTKA secure relay
- No inbound access to the cluster is required
- No VPN tunnels or exposed Kubernetes API endpoints are needed
This architecture aligns with zero-trust security principles and enterprise compliance requirements.
