kafka-mcpCAUTION
MCP server for Apache Kafka — built into Conduktor Console. Topics, consumer groups, schemas and cluster health, under your existing RBAC.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Put an AI assistant in charge of your Kafka estate.
Not a chat window onto a cluster. A way for agents — yours, or ours — to see what is actually happening across every cluster you run, and to act on it: reclaim the topics nobody consumes, attribute cost back to the teams spending it, catch the certificate expiring next month, restart the connector that failed at 3am, label the topics whose owner left the company.
The MCP endpoint ships inside Conduktor Console. There is nothing to deploy, and nothing new to secure: the assistant inherits the RBAC, audit trail and ownership model you already run.
Try it first
No Kafka to hand? demo/ brings up a cluster, Console and the MCP endpoint with docker compose up -d, seeded with topics, traffic and a consumer group that is deliberately behind.
Setup
Create a Personal Access Token in Console, then point your MCP client at your own Console:
{
"mcpServers": {
"conduktor": {
"command": "npx",
"args": ["-y", "@conduktor/mcp"],
"env": {
"CONDUKTOR_CONSOLE_URL": "https://console.acme-corp.com",
"CONDUKTOR_API_TOKEN": "your-personal-access-token"
}
}
}
}/api/mcp is appended for you. Pasting a URL that already ends in it works too.
Connecting without the package
@conduktor/mcp wraps `mcp-remote`. Call it yourself if you prefer:
{
"mcpServers": {
"conduktor": {
"command": "npx",
"args": [
"mcp-remote",
"https://console.acme-corp.com/api/mcp",
"--header",
"Authorization: Bearer ${CONDUKTOR_API_TOKEN}"
],
"env": { "CONDUKTOR_API_TOKEN": "your-personal-6daad756399cOBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add mcp --env CONDUKTOR_API_TOKEN=${CONDUKTOR_API_TOKEN} -- npx -y @conduktor/[email protected]Trust audit
CAUTIONgrade B · trust 87/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (4)
url: postgresql://postgres:pwd@postgres/postgres
mcp-remote
Create a Personal Access Token in Console (**Settings → API keys**), then:
Gates applied: no_behavioural_pass.
6daad756399cfull audit observations/trust-audit/mcp-server/conduktor__kafka-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 6daad756399c | CAUTION | B | 87 | first audit |
Questions
What is the kafka-mcp MCP server?
MCP server for Apache Kafka — built into Conduktor Console. Topics, consumer groups, schemas and cluster health, under your existing RBAC.
Is kafka-mcp safe to connect to an agent?
With care. The audit graded it B (87/100) and found 4 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does kafka-mcp need?
It reads CONDUKTOR_API_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does kafka-mcp run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @conduktor/mcp at 1.0.1.
How current is this page?
The grade is for one exact copy of the source (6daad756399c), read on 2026-10-11. The repository is watched and re-audited when it changes.