io.github.jeanlopezxyz/mcp-prometheus

安全与合规

by jeanlopezxyz

面向 Prometheus 监控的 Model Context Protocol (MCP) server,便于查询与集成监控数据。

什么是 io.github.jeanlopezxyz/mcp-prometheus

面向 Prometheus 监控的 Model Context Protocol (MCP) server,便于查询与集成监控数据。

README

Prometheus MCP Server (Go)

License: MIT npm version Go GitHub release

A Model Context Protocol (MCP) server for Prometheus integration. Native Go binary with built-in Kubernetes connectivity via client-go.

Installation

npx

bash
npx -y mcp-prometheus@latest

MCP Client Configuration

Add to your MCP client configuration (VS Code, Cursor, Windsurf, etc.):

json
{
  "mcpServers": {
    "prometheus": {
      "command": "npx",
      "args": ["-y", "mcp-prometheus@latest"],
      "env": {
        "PROMETHEUS_URL": "http://localhost:9090"
      }
    }
  }
}

VS Code

shell
code --add-mcp '{"name":"prometheus","command":"npx","args":["-y","mcp-prometheus@latest"],"env":{"PROMETHEUS_URL":"http://localhost:9090"}}'

Kubernetes Auto-Connect

Automatically connects to Prometheus running in OpenShift/Kubernetes via the K8S API service proxy. Uses native kubeconfig/in-cluster config via client-go. No kubectl or port-forwarding required.

Default: openshift-monitoring/prometheus-operated:9090

json
{
  "mcpServers": {
    "prometheus": {
      "command": "npx",
      "args": ["-y", "mcp-prometheus@latest"]
    }
  }
}

Binary

Download from GitHub Releases or build from source:

bash
make build
./mcp-prometheus

Configuration

Environment Variables

VariableDescription
PROMETHEUS_URLDirect Prometheus API URL (overrides K8S auto-connect)

CLI Flags

FlagDescriptionDefault
--urlDirect Prometheus URL-
--namespaceKubernetes namespaceopenshift-monitoring
--serviceKubernetes service nameprometheus-operated
--service-portKubernetes service port9090
--service-schemeService scheme (http/https)https
--kubeconfigPath to kubeconfig fileauto-detect

Precedence: --url / PROMETHEUS_URL > K8S auto-connect

Connection strategy:

  1. Direct URL (if --url or PROMETHEUS_URL is set)
  2. K8S API proxy (auto-detect kubeconfig or in-cluster config)

Tools (11)

Basic Queries

ToolDescription
queryExecute a PromQL instant query
queryRangeExecute a PromQL range query over time
getTargetsGet scrape targets status
getRulesGet alerting and recording rules
getPrometheusStatusGet server version and runtime info

Cluster Diagnostics

ToolDescription
getClusterHealthOverviewComprehensive cluster health overview
diagnoseNodeDiagnose a specific node's health
diagnoseNamespaceDiagnose a namespace's health

Resource Analysis

ToolDescription
getTopResourceConsumersTop CPU/memory/network consumers
investigatePodDeep investigation of a specific pod
compareTimeRangesCompare metrics between two time periods

Example Prompts

code
"What's the current CPU usage across all nodes?"
"Show me the cluster health overview"
"Which pods are using the most memory?"
"Diagnose node worker-1"
"Are all scrape targets healthy?"
"Compare CPU usage now vs 24 hours ago"
"Investigate pod my-app in namespace production"
"What alerting rules are defined?"

Development

Build

bash
make build              # Build for current platform
make build-all-platforms # Cross-compile for all platforms

Container

bash
podman build -f Containerfile -t mcp-prometheus .

Kubernetes / OpenShift Deployment

Container Image

The container image is available on GitHub Container Registry:

code
ghcr.io/jeanlopezxyz/mcp-prometheus:latest

Helm Chart

Deploy using the included Helm chart:

bash
# Add the chart repository (or use local chart)
helm upgrade --install mcp-prometheus ./charts/mcp-prometheus \
  --namespace mcp-servers \
  --create-namespace \
  --set openshift=true

Helm Values

ParameterDescriptionDefault
image.registryContainer registryghcr.io
image.repositoryImage repositoryjeanlopezxyz/mcp-prometheus
image.versionImage taglatest
openshiftEnable OpenShift Routesfalse
service.portService port8080
prometheus.namespacePrometheus namespaceopenshift-monitoring
prometheus.servicePrometheus service nameprometheus-operated
rbac.useClusterReaderUse cluster-reader roletrue

Example with custom Prometheus

bash
helm upgrade --install mcp-prometheus ./charts/mcp-prometheus \
  --namespace mcp-servers \
  --set openshift=true \
  --set prometheus.url=http://prometheus.monitoring:9090

License

MIT

常见问题

io.github.jeanlopezxyz/mcp-prometheus 是什么?

面向 Prometheus 监控的 Model Context Protocol (MCP) server,便于查询与集成监控数据。

相关 Skills

安全专家

by alirezarezvani

Universal
热门

覆盖威胁建模、漏洞评估、安全架构设计、代码审计与渗透测试,内置 STRIDE、OWASP、加密模式和安全扫描流程,适合系统设计评审与上线前安全排查。

安全专家把威胁建模、漏洞分析到渗透测试串成一套流程,内置 STRIDE 与 OWASP 指南,做安全设计和排查更省心。

安全与合规
未扫描23.7k

安全运营

by alirezarezvani

Universal
热门

覆盖应用安全、漏洞管理与合规审计,支持代码/依赖扫描、CVE 评估、Secrets 检测和安全自动化,适合做安全基线落地、漏洞响应、审计检查与安全开发治理。

应用安全、漏洞管理和合规检查一套打通,还能自动化扫描与响应,帮团队更早发现并收敛风险。

安全与合规
未扫描23.7k

安全审计

by alirezarezvani

Universal
热门

安装前审计 Claude Code Skill 的代码执行、Prompt 注入和依赖供应链风险,支持本地目录或 Git 仓库扫描,输出 PASS/WARN/FAIL 结论及修复建议

把代码审查、漏洞扫描和合规检查串成一条线,帮团队更早发现风险,做安全治理更省心。

安全与合规
未扫描23.7k

相关 MCP Server

搜索和分析 Sentry 错误报告,辅助调试。

把零散的 Sentry 错误报告变成可检索线索,帮你在海量报错里更快定位线上故障,排障调试明显省时。

安全与合规
801

为 AI agents 提供安全层:拦截 prompt injection、识别伪造 packages,并扫描漏洞风险。

给 AI Agent 补上关键安全层,能拦截 prompt 注入、识别伪造包并扫描漏洞风险,把防护前置更省心。

安全与合规
119

强化安全性的 NotebookLM MCP,集成 post-quantum encryption,提升数据防护能力。

安全与合规
77

评论