RootCause is a local-first MCP server that turns natural-language requests into evidence-backed incident analysis, Kubernetes diagnostics, and safer operations.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"rootcause": {
"env": {
"KUBECONFIG": "/Users/you/.kube/config"
},
"args": [
"--config",
"/Users/you/.config/rootcause/config.toml"
],
"command": "rootcause"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
RootCause is a local-first MCP server that turns natural-language requests into evidence-backed incident analysis, Kubernetes diagnostics, and safer operations.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'agent-browser' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
Checked agent-browser against OSV.dev.
Click any tool to inspect its schema.
gcp_workload_diagnoseDiagnose issues with GCP workloads
k8s-helmKubernetes and Helm operations guidance
k8s-incidentKubernetes incident response and diagnostics
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in devops
MCP server for using the GitLab API
Enhanced MCP server for GitLab: group projects listing and activity tracking
Yunxiao MCP Server provides AI assistants with the ability to interact with the Yunxiao platform. It provides a set of tools that interact with Yunxiao's API, allowing AI assistants to manage Codeup repository, Project, Pipeline, Packages etc.
MCP server for Komodo - manage Docker containers, servers, stacks, and deployments via AI
MCP Security Weekly
Get CVE alerts and security updates for Rootcause and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
AI-native SRE for Kubernetes incidents.
RootCause is a local-first MCP server that turns natural-language requests into evidence-backed incident analysis, Kubernetes diagnostics, and safer operations.
Built in Go as a single binary, RootCause is optimized for low-friction local workflows using your existing kubeconfig identity.
🚀 Quick Start | 🌐 Client Setup | 🛠️ Tools | 🧩 Skills | 🔒 Safety | ⚙️ Config | 🏗️ Architecture | 🤝 Contributing
RootCause is built for SRE/operator workflows where speed matters, but unsafe automation is unacceptable.
| Need | RootCause answer |
|---|---|
| "What changed and why did this break?" | rootcause.incident_bundle, rootcause.change_timeline, rootcause.rca_generate |
| "Is it safe to restart or roll out now?" | k8s.restart_safety_check, k8s.best_practice, k8s.safe_mutation_preflight |
| "Is my platform ecosystem healthy?" | k8s.*_detect + k8s.diagnose_* for ArgoCD/Flux/cert-manager/Kyverno/Gatekeeper/Cilium |
| "Can I standardize SRE responses?" | Prompt templates + structured output from shared render/evidence pipeline |
Ask your AI assistant in natural language:
RootCause keeps its depth-first model: evidence-first diagnosis, root-cause analysis, and remediation flow instead of raw tool sprawl.
Power users can map these prompts to concrete tools in this README (Complete Feature Set, Toolchains, and Tools sections).
rootcause.incident_bundlerootcause.rca_generatek8s.restart_safety_check and k8s.best_practicek8s.safe_mutation_preflight before apply/patch/delete/scale operations| Area | RootCause Capability |
|---|---|
| Incident analysis | rootcause.incident_bundle, `rootcause.rca_g |