Inspektor Gadget

Inspektor Gadget MCP Server

AI interface to troubleshoot and observe Kubernetes/Container workloads.

What is an MCP Server?⁠

MCP Info

Image Building InfoDockerfile|https://github.com/inspektor-gadget/ig-mcp-server/blob/main/Dockerfile⁠

Docker Image built by|Docker Inc. Docker Scout Health Score| Verify Signature|COSIGN_REPOSITORY=mcp/signatures cosign verify mcp/inspektor-gadget --key https://raw.githubusercontent.com/docker/keyring/refs/heads/main/public/mcp/latest.pubLicence|Apache License 2.0

Available Tools (36)

Tools Details

Tool: gadget_advise_networkpolicy

Generate network policies according to the K8s traffic

Tool: gadget_advise_seccomp

Suggest a seccomp profile

Tool: gadget_audit_seccomp

Audit syscalls according to the seccomp profile

Tool: gadget_bpfstats

Get memory and CPU usage of eBPF programs and Gadgets

Tool: gadget_deadlock

use uprobe to trace pthread_mutex_lock and pthread_mutex_unlock in libc.so and detect potential deadlocks

Tool: gadget_fdpass

Trace file descriptor passing via a unix socket (SCM_RIGHTS)

Tool: gadget_fsnotify

enrich inotify or fanotify events

Tool: gadget_profile_blockio

Profile block I/O operations

Tool: gadget_profile_cpu

Profile CPU

Tool: gadget_profile_qdisc_latency

profile network scheduler latency

Tool: gadget_profile_tcprtt

Profile TCP connections' Round-Trip Time (RTT)

Tool: gadget_snapshot_process

Show running processes

Tool: gadget_snapshot_socket

Show TCP and UDP sockets

Tool: gadget_top_blockio

Periodically report input/output block device activity. This gadget requires Linux Kernel Version 6.5+

Tool: gadget_top_file

Periodically report read/write activity by file

Tool: gadget_top_process

Periodically report process statistics

Tool: gadget_top_tcp

Periodically report tcp send receive activity by connection

Tool: gadget_trace_bind

trace stream socket binding syscalls

Tool: gadget_trace_capabilities

trace security capability checks

Tool: gadget_trace_dns

trace dns requests and responses

Tool: gadget_trace_exec

trace process executions

Tool: gadget_trace_fsslower

Trace open, read, write and fsync operations slower than a threshold

Tool: gadget_trace_lsm

a strace for LSM tracepoints

Tool: gadget_trace_malloc

use uprobe to trace malloc and free in libc.so

Tool: gadget_trace_mount

trace mount syscalls

Tool: gadget_trace_oomkill

trace OOM killer

Tool: gadget_trace_open

trace open files

Tool: gadget_trace_signal

trace signal

Tool: gadget_trace_sni

trace sni

Tool: gadget_trace_ssl

use uprobe to capture data on read/recv or write/send functions of OpenSSL, GnuTLS, NSS and Libcrypto

Tool: gadget_trace_tcp

monitor connect, accept and close events of TCP connections

Tool: gadget_trace_tcpdrop

trace TCP packets dropped by the kernel

Tool: gadget_trace_tcpretrans

trace TCP retransmissions

Tool: gadget_traceloop

syscalls flight recorder

Tool: ig_deploy

Manage the deployment of Inspektor Gadget on target system

This tool may perform destructive updates.

This tool interacts with external entities.

Tool: ig_gadgets

Manage running gadgets

This tool is read-only. It does not modify its environment.

This tool may perform destructive updates.

This tool interacts with external entities.

Use this MCP Server

{
  "mcpServers": {
    "inspektor-gadget": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-v",
        "/local-directory:/local-directory",
        "mcp/inspektor-gadget",
        "-gadget-discoverer=artifacthub",
        "-gadget-images={{inspektor-gadget.gadget-images}}"
      ]
    }
  }
}

Why is it safer to run MCP Servers with Docker?⁠