Atlas / MCP servers / conduktor / kafka-mcp

kafka-mcpCAUTION

mcp/conduktor/kafka-mcp

MCP server for Apache Kafka — built into Conduktor Console. Topics, consumer groups, schemas and cluster health, under your existing RBAC.

Verdict
CAUTION
Grade
B
Trust score
87 /100
Exposed tools
—
Transport
stdio · streamable-http
License
Apache-2.0
Stars
1
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Put an AI assistant in charge of your Kafka estate.

Not a chat window onto a cluster. A way for agents — yours, or ours — to see what is actually happening across every cluster you run, and to act on it: reclaim the topics nobody consumes, attribute cost back to the teams spending it, catch the certificate expiring next month, restart the connector that failed at 3am, label the topics whose owner left the company.

The MCP endpoint ships inside Conduktor Console. There is nothing to deploy, and nothing new to secure: the assistant inherits the RBAC, audit trail and ownership model you already run.

Try it first

No Kafka to hand? demo/ brings up a cluster, Console and the MCP endpoint with docker compose up -d, seeded with topics, traffic and a consumer group that is deliberately behind.

Setup

Create a Personal Access Token in Console, then point your MCP client at your own Console:

{
"mcpServers": {
"conduktor": {
"command": "npx",
"args": ["-y", "@conduktor/mcp"],
"env": {
"CONDUKTOR_CONSOLE_URL": "https://console.acme-corp.com",
"CONDUKTOR_API_TOKEN": "your-personal-access-token"
}
}
}
}

/api/mcp is appended for you. Pasting a URL that already ends in it works too.

Connecting without the package

@conduktor/mcp wraps `mcp-remote`. Call it yourself if you prefer:

{
"mcpServers": {
"conduktor": {
"command": "npx",
"args": [
"mcp-remote",
"https://console.acme-corp.com/api/mcp",
"--header",
"Authorization: Bearer ${CONDUKTOR_API_TOKEN}"
],
"env": { "CONDUKTOR_API_TOKEN": "your-personal-
Read from source at commit 6daad756399cOBSERVED · 2026-10-11
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code (npm)
claude mcp add mcp --env CONDUKTOR_API_TOKEN=${CONDUKTOR_API_TOKEN} -- npx -y @conduktor/[email protected]
03

Trust audit

CAUTIONgrade B · trust 87/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (1 observation(s))
Shell
none-observed
Dependencies
not all pinned
Secrets in source
found

Findings (4)

HIGHHard-coded secrets · secret.db_uri · CWE-798, CWE-321
demo/console-config.yaml:2
url: postgresql://postgres:pwd@postgres/postgres
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
mcp-remote
Why it matters. 1 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table
INFOPrompt injection · prompt.credential_read · CWE-94, CWE-1427
demo/README.md:22
Create a Personal Access Token in Console (**Settings → API keys**), then:
Why it matters. asks the agent to read credentials

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha 6daad756399cfull audit observations/trust-audit/mcp-server/conduktor__kafka-mcp.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-116daad756399cCAUTIONB87first audit
05

Questions

What is the kafka-mcp MCP server?

MCP server for Apache Kafka — built into Conduktor Console. Topics, consumer groups, schemas and cluster health, under your existing RBAC.

Is kafka-mcp safe to connect to an agent?

With care. The audit graded it B (87/100) and found 4 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does kafka-mcp need?

It reads CONDUKTOR_API_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does kafka-mcp run?

It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @conduktor/mcp at 1.0.1.

How current is this page?

The grade is for one exact copy of the source (6daad756399c), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement