io.github.jeanlopezxyz/mcp-prometheus
安全与合规by jeanlopezxyz
面向 Prometheus 监控的 Model Context Protocol (MCP) server,便于查询与集成监控数据。
什么是 io.github.jeanlopezxyz/mcp-prometheus?
面向 Prometheus 监控的 Model Context Protocol (MCP) server,便于查询与集成监控数据。
README
Prometheus MCP Server (Go)
A Model Context Protocol (MCP) server for Prometheus integration. Native Go binary with built-in Kubernetes connectivity via client-go.
Installation
npx
npx -y mcp-prometheus@latest
MCP Client Configuration
Add to your MCP client configuration (VS Code, Cursor, Windsurf, etc.):
{
"mcpServers": {
"prometheus": {
"command": "npx",
"args": ["-y", "mcp-prometheus@latest"],
"env": {
"PROMETHEUS_URL": "http://localhost:9090"
}
}
}
}
VS Code
code --add-mcp '{"name":"prometheus","command":"npx","args":["-y","mcp-prometheus@latest"],"env":{"PROMETHEUS_URL":"http://localhost:9090"}}'
Kubernetes Auto-Connect
Automatically connects to Prometheus running in OpenShift/Kubernetes via the K8S API service proxy. Uses native kubeconfig/in-cluster config via client-go. No kubectl or port-forwarding required.
Default: openshift-monitoring/prometheus-operated:9090
{
"mcpServers": {
"prometheus": {
"command": "npx",
"args": ["-y", "mcp-prometheus@latest"]
}
}
}
Binary
Download from GitHub Releases or build from source:
make build
./mcp-prometheus
Configuration
Environment Variables
| Variable | Description |
|---|---|
PROMETHEUS_URL | Direct Prometheus API URL (overrides K8S auto-connect) |
CLI Flags
| Flag | Description | Default |
|---|---|---|
--url | Direct Prometheus URL | - |
--namespace | Kubernetes namespace | openshift-monitoring |
--service | Kubernetes service name | prometheus-operated |
--service-port | Kubernetes service port | 9090 |
--service-scheme | Service scheme (http/https) | https |
--kubeconfig | Path to kubeconfig file | auto-detect |
Precedence: --url / PROMETHEUS_URL > K8S auto-connect
Connection strategy:
- Direct URL (if
--urlorPROMETHEUS_URLis set) - K8S API proxy (auto-detect kubeconfig or in-cluster config)
Tools (11)
Basic Queries
| Tool | Description |
|---|---|
query | Execute a PromQL instant query |
queryRange | Execute a PromQL range query over time |
getTargets | Get scrape targets status |
getRules | Get alerting and recording rules |
getPrometheusStatus | Get server version and runtime info |
Cluster Diagnostics
| Tool | Description |
|---|---|
getClusterHealthOverview | Comprehensive cluster health overview |
diagnoseNode | Diagnose a specific node's health |
diagnoseNamespace | Diagnose a namespace's health |
Resource Analysis
| Tool | Description |
|---|---|
getTopResourceConsumers | Top CPU/memory/network consumers |
investigatePod | Deep investigation of a specific pod |
compareTimeRanges | Compare metrics between two time periods |
Example Prompts
"What's the current CPU usage across all nodes?"
"Show me the cluster health overview"
"Which pods are using the most memory?"
"Diagnose node worker-1"
"Are all scrape targets healthy?"
"Compare CPU usage now vs 24 hours ago"
"Investigate pod my-app in namespace production"
"What alerting rules are defined?"
Development
Build
make build # Build for current platform
make build-all-platforms # Cross-compile for all platforms
Container
podman build -f Containerfile -t mcp-prometheus .
Kubernetes / OpenShift Deployment
Container Image
The container image is available on GitHub Container Registry:
ghcr.io/jeanlopezxyz/mcp-prometheus:latest
Helm Chart
Deploy using the included Helm chart:
# Add the chart repository (or use local chart)
helm upgrade --install mcp-prometheus ./charts/mcp-prometheus \
--namespace mcp-servers \
--create-namespace \
--set openshift=true
Helm Values
| Parameter | Description | Default |
|---|---|---|
image.registry | Container registry | ghcr.io |
image.repository | Image repository | jeanlopezxyz/mcp-prometheus |
image.version | Image tag | latest |
openshift | Enable OpenShift Routes | false |
service.port | Service port | 8080 |
prometheus.namespace | Prometheus namespace | openshift-monitoring |
prometheus.service | Prometheus service name | prometheus-operated |
rbac.useClusterReader | Use cluster-reader role | true |
Example with custom Prometheus
helm upgrade --install mcp-prometheus ./charts/mcp-prometheus \
--namespace mcp-servers \
--set openshift=true \
--set prometheus.url=http://prometheus.monitoring:9090
License
常见问题
io.github.jeanlopezxyz/mcp-prometheus 是什么?
面向 Prometheus 监控的 Model Context Protocol (MCP) server,便于查询与集成监控数据。
相关 Skills
安全专家
by alirezarezvani
覆盖威胁建模、漏洞评估、安全架构设计、代码审计与渗透测试,内置 STRIDE、OWASP、加密模式和安全扫描流程,适合系统设计评审与上线前安全排查。
✎ 安全专家把威胁建模、漏洞分析到渗透测试串成一套流程,内置 STRIDE 与 OWASP 指南,做安全设计和排查更省心。
安全运营
by alirezarezvani
覆盖应用安全、漏洞管理与合规审计,支持代码/依赖扫描、CVE 评估、Secrets 检测和安全自动化,适合做安全基线落地、漏洞响应、审计检查与安全开发治理。
✎ 应用安全、漏洞管理和合规检查一套打通,还能自动化扫描与响应,帮团队更早发现并收敛风险。
安全审计
by alirezarezvani
安装前审计 Claude Code Skill 的代码执行、Prompt 注入和依赖供应链风险,支持本地目录或 Git 仓库扫描,输出 PASS/WARN/FAIL 结论及修复建议
✎ 把代码审查、漏洞扫描和合规检查串成一条线,帮团队更早发现风险,做安全治理更省心。
相关 MCP Server
by Sentry
搜索和分析 Sentry 错误报告,辅助调试。
✎ 把零散的 Sentry 错误报告变成可检索线索,帮你在海量报错里更快定位线上故障,排障调试明显省时。
by sinewaveai
为 AI agents 提供安全层:拦截 prompt injection、识别伪造 packages,并扫描漏洞风险。
✎ 给 AI Agent 补上关键安全层,能拦截 prompt 注入、识别伪造包并扫描漏洞风险,把防护前置更省心。
by pantheon-security
强化安全性的 NotebookLM MCP,集成 post-quantum encryption,提升数据防护能力。