{
 "categories": [
  "platform",
  "developer-tools"
 ],
 "deployment": "hybrid",
 "evidence": [
  {
   "date": "2026-10-16",
   "fact": "homepage",
   "note": "The Kubernetes components page describes a Kubernetes cluster's control plane and worker nodes.",
   "source": "https://kubernetes.io/docs/concepts/overview/components/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "name",
   "note": "The page is Kubernetes documentation and names the product Kubernetes.",
   "source": "https://kubernetes.io/docs/concepts/overview/components/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "vendor",
   "note": "The documentation is published at kubernetes.io as the Kubernetes project.",
   "source": "https://kubernetes.io/docs/concepts/overview/components/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "license",
   "note": "The kubernetes/kubernetes LICENSE file is the Apache License, Version 2.0.",
   "source": "https://raw.githubusercontent.com/kubernetes/kubernetes/master/LICENSE",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "deployment",
   "note": "A cluster is a control plane plus worker nodes, and an optional cloud-controller-manager integrates with a cloud provider. The same software is used for small and large deployments. Deployment is hybrid.",
   "source": "https://kubernetes.io/docs/concepts/overview/components/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "platforms",
   "note": "The components page says a node may run systemd on a Linux node to supervise local components.",
   "source": "https://kubernetes.io/docs/concepts/overview/components/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.exists",
   "note": "The API overview says the REST API is the fundamental fabric of Kubernetes and that the API server handles all operations and external user commands.",
   "source": "https://kubernetes.io/docs/reference/using-api/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.kinds[0]",
   "note": "The page calls it the REST API. kube-apiserver exposes the Kubernetes HTTP API.",
   "source": "https://kubernetes.io/docs/reference/using-api/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.auth[0]",
   "note": "A valid client certificate signed by the cluster certificate authority authenticates the user. The username comes from the certificate subject common name.",
   "source": "https://kubernetes.io/docs/reference/access-authn-authz/authentication/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.auth[1]",
   "note": "Bearer token authentication sends Authorization Bearer. Service-account tokens are signed bearer tokens. Bootstrap tokens use the same header.",
   "source": "https://kubernetes.io/docs/reference/access-authn-authz/authentication/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.auth[2]",
   "note": "Kubernetes has native support for OpenID Connect tokens. The page says OpenID Connect is a flavor of OAuth 2.0 and that Kubernetes does not provide the identity provider.",
   "source": "https://kubernetes.io/docs/reference/access-authn-authz/authentication/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.coverage",
   "note": "The overview says everything in the Kubernetes platform is treated as an API object with an entry in the API reference. Coverage of the Kubernetes API is full. RBAC still limits each caller.",
   "source": "https://kubernetes.io/docs/reference/using-api/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.docs",
   "note": "Opened as the current Kubernetes API overview.",
   "source": "https://kubernetes.io/docs/reference/using-api/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.mcp.third_party[0]",
   "note": "The containers organization README describes a Go MCP server for Kubernetes and OpenShift with resource CRUD, pod logs and exec, Helm, and Tekton. GitHub reported a push on 2026-10-16, Apache-2.0, and archived false. The organization is not the Kubernetes project.",
   "source": "https://github.com/containers/kubernetes-mcp-server",
   "tier": "community"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.mcp.verdict",
   "note": "This pass opened one maintained third-party server. It does not establish that the Kubernetes project has no first-party server, so the verdict stays unknown.",
   "source": "https://github.com/containers/kubernetes-mcp-server",
   "tier": "community"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.cli.exists",
   "note": "Kubernetes documents kubectl as its command-line tool. It reads kubeconfig and supports -o json.",
   "source": "https://kubernetes.io/docs/reference/kubectl/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.data_access.export[0]",
   "note": "The API overview says JSON and Protobuf are the serialization schemas.",
   "source": "https://kubernetes.io/docs/reference/using-api/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "verdict.scores.api",
   "note": "A full REST object API with several authenticators and JSON output is broad and practical. Cluster-specific credentials and RBAC keep the score at 8 rather than 9.",
   "source": "https://kubernetes.io/docs/reference/using-api/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "verdict.scores.cli",
   "note": "Official kubectl covers resource operations, uses kubeconfig, and prints JSON. The default output is human-readable text, and the caller still needs cluster credentials. Score 8.",
   "source": "https://kubernetes.io/docs/reference/kubectl/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "verdict.scores.mcp",
   "note": "One maintained third-party implementation with useful cluster operations is the 3-4 band. It also covers OpenShift, so it is not a Kubernetes-only server. Score 4.",
   "source": "https://github.com/containers/kubernetes-mcp-server",
   "tier": "community"
  },
  {
   "date": "2026-10-16",
   "fact": "freshness.watch[0].url",
   "note": "Opened and verified as the current Kubernetes API overview.",
   "source": "https://kubernetes.io/docs/reference/using-api/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "freshness.watch[1].url",
   "note": "Opened and verified as the current authentication page, including certificates, bearer tokens, and OpenID Connect.",
   "source": "https://kubernetes.io/docs/reference/access-authn-authz/authentication/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "freshness.watch[2].url",
   "note": "Opened and verified as the current kubectl reference overview.",
   "source": "https://kubernetes.io/docs/reference/kubectl/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "freshness.watch[3].url",
   "note": "Opened and verified as the containers organization's Kubernetes MCP server README.",
   "source": "https://github.com/containers/kubernetes-mcp-server",
   "tier": "community"
  }
 ],
 "freshness": {
  "last_verified": "2026-10-16",
  "volatility": "medium",
  "watch": [
   {
    "type": "docs",
    "url": "https://kubernetes.io/docs/reference/using-api/"
   },
   {
    "type": "docs",
    "url": "https://kubernetes.io/docs/reference/access-authn-authz/authentication/"
   },
   {
    "type": "cli",
    "url": "https://kubernetes.io/docs/reference/kubectl/"
   },
   {
    "type": "mcp",
    "url": "https://github.com/containers/kubernetes-mcp-server"
   }
  ]
 },
 "homepage": "https://kubernetes.io/docs/concepts/overview/components/",
 "id": "kubernetes",
 "license": "open-source",
 "modalities": {
  "agent_docs": {
   "llms_txt": "unknown"
  },
  "api": {
   "auth": [
    "client-certificate",
    "bearer",
    "oidc"
   ],
   "coverage": "full",
   "docs": "https://kubernetes.io/docs/reference/using-api/",
   "exists": true,
   "kinds": [
    "rest"
   ]
  },
  "cli": {
   "exists": true
  },
  "computer_use": {
   "issues": [],
   "viability": "unknown"
  },
  "data_access": {
   "export": [
    "json"
   ],
   "import": []
  },
  "extensibility": {
   "scripting": [],
   "webhooks": "unknown"
  },
  "integrations": {
   "make": "unknown",
   "n8n": "unknown",
   "power_automate": "unknown",
   "zapier": "unknown"
  },
  "mcp": {
   "first_party": "unknown",
   "third_party": [
    {
     "maintained": true,
     "registries": [],
     "repo": "https://github.com/containers/kubernetes-mcp-server"
    }
   ],
   "verdict": "unknown"
  },
  "rpa": {
   "drivability": "unknown",
   "notes": "No repeatable UI probe was run. Kubernetes is operated through the API server and kubectl. A web dashboard is an optional addon. This record is the Kubernetes project, not OpenShift, Rancher, or a hosted Kubernetes service.\n",
   "ui_stack": [],
   "vendor_support": []
  },
  "sdk": {
   "exists": "unknown",
   "languages": [],
   "official": "unknown"
  }
 },
 "name": "Kubernetes",
 "platforms": [
  "linux"
 ],
 "related": {
  "alternatives": [],
  "our_products": []
 },
 "schema_version": 1,
 "score_version": 1,
 "status": "active",
 "vendor": "Kubernetes",
 "verdict": {
  "best_path": "api",
  "scores": {
   "api": 8,
   "cli": 8,
   "computer_use": null,
   "integrations": null,
   "mcp": 4,
   "overall": 8,
   "rpa": null
  },
  "search": {
   "description": "The Kubernetes REST API is the cluster control plane. kubectl prints JSON. A containers-organization MCP server is third-party.",
   "title": "Kubernetes is automatable through its API"
  },
  "summary": "Kubernetes is automatable today through its API server. The project docs say the REST API is the fabric of the platform and that every operation, including external user commands, is a REST call the API server handles. Objects serialize as JSON or Protobuf. A client certificate signed by the cluster CA authenticates a user. Bearer tokens, including service-account tokens, are sent as Authorization Bearer. OpenID Connect tokens are also a documented authenticator. Normal user accounts are not Kubernetes objects. RBAC still decides what an authenticated caller can do. kubectl is the official command-line client. It reads kubeconfig and can print JSON with -o json. A maintained third-party MCP server in the containers organization talks to the API for Kubernetes and OpenShift, including resource CRUD, pod logs and exec, Helm, and Tekton. The containers organization is not the Kubernetes project, and this pass did not find a kubernetes.io page that declares there is no first-party MCP server, so first-party ownership stays unknown. Zapier, Make, Power Automate, and n8n were not opened. Computer-use viability is unassessed. The API and kubectl each score 8. The community MCP server scores 4. The API is the best path because kubectl and the MCP server are clients of that same API server.\n"
 }
}