mcp/inspektor-gadget repository overview

⁠Inspektor Gadget MCP Server

AI interface to troubleshoot and observe Kubernetes/Container workloads.

What is an MCP Server?⁠

⁠MCP Info

⁠Image Building Info

Attribute	Details
Dockerfile	https://github.com/inspektor-gadget/ig-mcp-server/blob/32e48f93ef8486c1918989248671843f3f27de2f/Dockerfile⁠
Commit	32e48f93ef8486c1918989248671843f3f27de2f
Docker Image built by	Docker Inc.
Docker Scout Health Score
Verify Signature	COSIGN_REPOSITORY=mcp/signatures cosign verify mcp/inspektor-gadget --key https://raw.githubusercontent.com/docker/keyring/refs/heads/main/public/mcp/latest.pub
Licence	Apache License 2.0

⁠Available Tools (37)

⁠Tools Details

⁠Tool: gadget_advise_networkpolicy

Generate network policies according to the K8s traffic

⁠Tool: gadget_advise_seccomp

Suggest a seccomp profile

⁠Tool: gadget_audit_seccomp

Audit syscalls according to the seccomp profile

⁠Tool: gadget_bpfstats

Get memory and CPU usage of eBPF programs and Gadgets

⁠Tool: gadget_deadlock

use uprobe to trace pthread_mutex_lock and pthread_mutex_unlock in libc.so and detect potential deadlocks

⁠Tool: gadget_fdpass

Trace file descriptor passing via a unix socket (SCM_RIGHTS)

⁠Tool: gadget_fsnotify

enrich inotify or fanotify events

⁠Tool: gadget_profile_blockio

Profile block I/O operations

⁠Tool: gadget_profile_cpu

Profile CPU

⁠Tool: gadget_profile_qdisc_latency

profile network scheduler latency

⁠Tool: gadget_profile_tcprtt

Profile TCP connections' Round-Trip Time (RTT)

⁠Tool: gadget_snapshot_process

Show running processes

⁠Tool: gadget_snapshot_socket

Show TCP and UDP sockets

⁠Tool: gadget_tcpdump

Capture network packets

⁠Tool: gadget_top_blockio

Periodically report input/output block device activity. This gadget requires Linux Kernel Version 6.5+

⁠Tool: gadget_top_file

Periodically report read/write activity by file

⁠Tool: gadget_top_process

Periodically report process statistics

⁠Tool: gadget_top_tcp

Periodically report tcp send receive activity by connection

⁠Tool: gadget_trace_bind

trace stream socket binding syscalls

⁠Tool: gadget_trace_capabilities

trace security capability checks

⁠Tool: gadget_trace_dns

trace dns requests and responses

⁠Tool: gadget_trace_exec

trace process executions

⁠Tool: gadget_trace_fsslower

Trace open, read, write and fsync operations slower than a threshold

⁠Tool: gadget_trace_lsm

a strace for LSM tracepoints

⁠Tool: gadget_trace_malloc

use uprobe to trace malloc and free in libc.so

⁠Tool: gadget_trace_mount

trace mount syscalls

⁠Tool: gadget_trace_oomkill

trace OOM killer

⁠Tool: gadget_trace_open

trace open files

⁠Tool: gadget_trace_signal

trace signal

⁠Tool: gadget_trace_sni

trace sni

⁠Tool: gadget_trace_ssl

use uprobe to capture data on read/recv or write/send functions of OpenSSL, GnuTLS, NSS and Libcrypto

⁠Tool: gadget_trace_tcp

monitor connect, accept and close events of TCP connections

⁠Tool: gadget_trace_tcpdrop

trace TCP packets dropped by the kernel

⁠Tool: gadget_trace_tcpretrans

trace TCP retransmissions

⁠Tool: gadget_traceloop

syscalls flight recorder

⁠Tool: ig_deploy

Manage the deployment of Inspektor Gadget on target system

This tool may perform destructive updates.

This tool interacts with external entities.

⁠Tool: ig_gadgets

Manage running gadgets

This tool is read-only. It does not modify its environment.

This tool may perform destructive updates.

This tool interacts with external entities.

⁠Use this MCP Server

{
  "mcpServers": {
    "inspektor-gadget": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-v",
        "/local-directory:/local-directory",
        "mcp/inspektor-gadget",
        "-gadget-discoverer=artifacthub",
        "-gadget-images={{inspektor-gadget.gadget-images}}"
      ]
    }
  }
}

Why is it safer to run MCP Servers with Docker?⁠