ツール

Runs GitHub Actions workflows locally in Docker, so you can test .github/workflows changes without repeated commits and pushes, or use workflows as a local task runner. Needs Docker installed.

Kubernetes operations plugin from the wshobson/agents marketplace: a kubernetes-architect subagent plus four skills for manifest generation, Helm chart scaffolding, GitOps workflows and security policies. Community-maintained.

All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.

Define multi-container apps in compose.yaml and bring up services, databases, caches and the rest with one docker compose up, handy for agents setting up local dev and test dependencies. Maintained by Docker; included with Docker Desktop on macOS.

Daemonless, rootless container and pod manager with a Docker-compatible CLI for building, running and pushing OCI images. On macOS and Windows it runs inside a podman machine VM.

Kubernetes package manager that packages, installs, upgrades and rolls back releases with Chart templates, including ready-made charts from Artifact Hub. A CNCF graduated project; needs a kubeconfig to reach your cluster.

Google's official GKE basics skill: creating clusters, choosing Autopilot or Standard, getting kubectl credentials, configuring Workload Identity and deploying workloads, plus a list of common gotchas. Needs gcloud and a GCP project.

Google's official skill library, focused on Google Cloud: 100+ skills for gcloud, Cloud Run, GKE, BigQuery, IAM, monitoring and logging, and the Well-Architected Framework, plus Ads and Analytics.

Sealos's Kubernetes lifecycle CLI: one sealos run deploys a highly available cluster across multiple servers, and cluster images install databases, middleware and other apps, with offline delivery support. Linux only.

Programmable software delivery engine: write build, test and release pipelines with SDKs in Go, Python, TypeScript and five other languages, all running in containers so local and CI behave the same, with built-in OpenTelemetry tracing. Needs a container runtime such as Docker.

Scans container images, filesystem directories and SBOMs for known vulnerabilities across major Linux distro packages and many language ecosystems, ranks risk by EPSS and KEV, and filters results with OpenVEX. Good for vulnerability gates in CI. Maintained by Anchore.

Official AWS MCP to create and manage EKS clusters, deploy apps, manage Kubernetes resources, and read pod logs and events for troubleshooting. Read-only by default; writes need --allow-write and reading logs needs --allow-sensitive-data-access.

Manage Kubernetes clusters in natural language: translates intent into kubectl operations and runs them, and can serve as an MCP server for other agents. Uses Gemini by default (API key required) and also supports OpenAI and local models. Maintained by Google Cloud.

Docker's official CLI for building images, running and managing containers, viewing logs and pushing to registries, a foundational tool for agents setting up isolated environments. Needs a local or remote Docker Engine such as Docker Desktop.

From Dagger: gives every coding agent an isolated container and Git branch so several agents can work in parallel, and you can view command logs, take over the terminal or discard results anytime. Needs Docker and Git locally; still experimental.

From Dagger: gives each coding agent its own container and git branch so multiple agents work in parallel without interfering, with command logs and the ability to take over the terminal at any time. Connects via MCP; needs Docker and Git. Still experimental.

Microsoft's official Azure MCP: one server covering dozens of Azure services, including Storage, Cosmos DB, AKS, App Service, Key Vault and Monitor, so agents can query and manage cloud resources. Sign in to Azure first.

Kubernetes' official CLI for inspecting and managing Pods, Deployments, Services and other cluster resources, reading logs, executing commands in containers and applying YAML manifests. Requires a working kubeconfig for cluster access.

A native Go MCP server for Kubernetes and OpenShift: talks to the API server directly to create, read, update and delete any resource, view pod logs, exec commands and install Helm charts, without needing kubectl. Supports multiple clusters.

Fly.io's official CLI (fly): sign in, create and deploy apps, and list apps and check their status, reading fly.toml in the current directory to identify the app. Needs a Fly.io account.

Docker's official MCP gateway (the docker mcp CLI plugin): runs servers from the Docker MCP Catalog in isolated containers, manages secrets, OAuth and tool toggles centrally, and gives multiple clients one endpoint. Built into Docker Desktop 4.59+; Docker CE and other setups must build the plugin.

Manage Argo CD in natural language: list and inspect applications, create, update and delete them and trigger syncs, and view resource trees, workload logs and events. Maintained by Argo Project Labs; needs your Argo CD URL and an API token, with an optional read-only mode.

Official Docker skills: containerize projects, optimize and harden Dockerfile builds, orchestrate with Compose, use Docker Sandboxes and Docker Agent, with confirmation guardrails before deletes and other destructive actions.

Lets agents inspect Alibaba Cloud ACK clusters, run kubectl operations, query Prometheus metrics, control-plane and audit logs, and run resource diagnostics and health checks. Maintained by Alibaba Cloud; needs an AccessKey and cluster RBAC permissions.