--- title: "Introducing Kubeflow MCP: An Agent Interface for Cloud Native AI at Scale" url: https://daily.dev/posts/introducing-kubeflow-mcp-an-agent-interface-for-cloud-native-ai-at-scale-z8dfx6nql source_url: https://blog.kubeflow.org/introducing-kubeflow-mcp type: article source: "Kubeflow" published: 2026-08-12T15:54:34.521Z updated: 2026-08-12T15:55:04.720Z tags: ["kubernetes", "ai-agents", "mcp", "mlops"] reading_time: 8 upvotes: 8 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Introducing Kubeflow MCP: An Agent Interface for Cloud Native AI at Scale **[Kubeflow](https://daily.dev/sources/kubeflow)** · 8 min read · 8 upvotes · 0 comments ## Summary Kubeflow has released an open MCP (Model Context Protocol) server that lets AI agents directly operate Kubeflow infrastructure—submitting training jobs, checking GPU resources, and streaming logs—without a human copy-pasting commands and errors between an agent and a cluster. The server exposes 23 tools across planning, discovery, training, monitoring, lifecycle, and platform phases, with two-phase confirmation gating any job-creating or destructive action. It ships with four personas (readonly, data-scientist, ml-engineer, platform-admin), three token-efficient tool-loading modes (full, progressive, semantic), platform auto-detection for OpenShift/EKS/GKE/Kind, rate limiting, circuit breakers, and OpenTelemetry tracing. Currently only the Kubeflow Trainer client is implemented (requires Trainer v2.2+, Kubernetes 1.27+, Python 3.10–3.12), with Optimizer/Katib, Model Registry, Pipelines, Spark Operator, and Feast planned as future MCP clients. Setup instructions cover installing via pip and connecting from Cursor IDE or Claude Code. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is the Kubeflow MCP Server and what does it let AI agents do? It is an open-source MCP (Model Context Protocol) server that exposes Kubeflow operations as tools AI agents can call directly, such as submitting training jobs, checking GPU resources, and streaming logs. Instead of an agent generating scripts a human must run manually, the agent calls tools like pre_flight and fine_tune, previews the job spec, and submits it only after explicit user approval. It currently implements the Kubeflow Trainer client with 23 tools. _Track new agent-native infrastructure tools like this as they ship on daily.dev._ ### What are the requirements to run the Kubeflow MCP server? It requires Python 3.10 to 3.12, Kubernetes 1.27 or newer, and a cluster with Kubeflow Trainer v2.2 or later installed. It can be installed via pip install kubeflow-mcp and started with the kubeflow-mcp serve command, configurable with flags for persona, tool-exposure mode, transport (stdio, http, sse), and authentication token. _Developers evaluating MLOps tooling versions can follow setup changes like this on daily.dev._ ### How does the Kubeflow MCP server prevent an AI agent from accidentally deleting or creating training jobs? It uses two-phase confirmation: every job-creating or destructive operation (training submission, job deletion, runtime create/patch/delete) previews the full spec first and only proceeds after explicit user approval. It also enforces ownership guards so non-admin personas can only modify jobs they created through the MCP server, alongside input validation, credential masking, and DNS rebinding protection. _Anyone weighing safety guardrails for agent-driven infra can compare approaches like this on daily.dev._ --- Tags: [#kubernetes](https://daily.dev/tags/kubernetes), [#ai-agents](https://daily.dev/tags/ai-agents), [#mcp](https://daily.dev/tags/mcp), [#mlops](https://daily.dev/tags/mlops) [View this post on daily.dev](https://daily.dev/posts/introducing-kubeflow-mcp-an-agent-interface-for-cloud-native-ai-at-scale-z8dfx6nql)