Atlas / MCP servers / skyhook-io / Radar

RadarBLOCK

mcp/skyhook-io/radar

The missing open-source Kubernetes UI with a built-in MCP server for AI agents. See what's broken, why, and what changed. Issues, Topology, event timeline, Helm, GitOps, live service traffic, and cluster audits - all in one Go binary.

Verdict
BLOCK
Grade
F
Trust score
44 /100
Exposed tools
—
Transport
streamable-http
License
Apache-2.0
Stars
3,419
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

The missing open-source Kubernetes UI. Single binary. No account required. Free forever.

🌐 [radarhq.io](https://radarhq.io) · Docs · Releases

Topology, resources, Helm, GitOps, traffic, audit, upgrade impact, and MCP context for AI agents — from your laptop or in-cluster.

[](https://github.com/skyhook-io/radar/actions/workflows/ci.yml) [](https://github.com/skyhook-io/radar/actions/workflows/codeql.yml) [](https://github.com/skyhook-io/radar/releases/latest) [](https://github.com/skyhook-io/radar/releases) [](https://artifacthub.io/packages/helm/skyhook/radar) [](https://radarhq.io/community/chat) [](LICENSE) [](https://go.dev/)

Table of contents

  • Why Radar?
  • Installation
  • Usage
  • Views — T
Read from source at commit 9bf37b696bedOBSERVED · 2026-09-22
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code (oci)
claude mcp add radar:1.8.6 -- docker run -i --rm ghcr.io/skyhook-io/radar:1.8.6:None
03

Trust audit

BLOCKgrade F · trust 44/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (4 observation(s))
Network
declared (13 observation(s))
Shell
declared (3 observation(s))
Dependencies
not all pinned
Secrets in source
found

Findings (25)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
deploy/helm/radar/templates/clusterrole.yaml:190
# Pod exec (opt-in - enables terminal feature)
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
deploy/helm/radar/values.yaml:124
# Allow pod exec (enables terminal feature)
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
internal/k8s/capabilities.go:82
Exec             bool                     `json:"exec"`                    // Can create pods/exec (terminal feature)
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHNetwork egress · net.tls_off · CWE-200, CWE-319
internal/mcp/tools.go:605
"set verify=false only when you need a terse write result.",
Why it matters. certificate verification is disabled
Fix. leave verification on
HIGHNetwork egress · net.tls_off · CWE-200, CWE-319
internal/mcp/tools.go:621
"verify=false only when you need a terse write result.",
Why it matters. certificate verification is disabled
Fix. leave verification on
HIGHNetwork egress · net.tls_off · CWE-200, CWE-319
internal/trace/probes.go:737
portForwardCmd("svc", h.Resource.Namespace, h.Resource.Name, p.Port)+fmt.Sprintf("   # then: curl -k https://localhost:%d/", p.Port))
Why it matters. certificate verification is disabled
Fix. leave verification on
HIGHNetwork egress · net.tls_off · CWE-200, CWE-319
internal/trace/probes.go:1251
portForwardCmd("pod", h.Resource.Namespace, name, cp.Port)+fmt.Sprintf("   # then: curl -k https://localhost:%d/", cp.Port))
Why it matters. certificate verification is disabled
Fix. leave verification on
MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
web/src/components/ui/DiagnosticsOverlay.tsx:543
const fmt = (v: number) => v < 1000 ? `${v.toFixed(0)}μs` : `${(v / 1000).toFixed(2)}ms`
MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
web/src/components/ui/DiagnosticsOverlay.tsx:802
const fmtUs = (v: number) => v < 1000 ? `${Math.round(v)}μs` : `${(v / 1000).toFixed(2)}ms`
MEDIUMHard-coded secrets · secret.aws · CWE-798, CWE-321
pkg/ai/context/redact_auth_test.go:26
{"akia-control", "key=AKIAABCDEFGHIJKLMNOP", "key=[REDACTED]"},
MEDIUMHard-coded secrets · secret.db_uri · CWE-798, CWE-321
.github/workflows/ci.yml:80
RADAR_TEST_POSTGRES_DSN: postgres://radar:radar@localhost:5432/radar?sslmode=disable
MEDIUMHard-coded secrets · secret.db_uri · CWE-798, CWE-321
internal/timeline/manager_test.go:29
DSN:  "postgres://radar:[email protected]:1/radar?connect_timeout=1",
MEDIUMHard-coded secrets · secret.db_uri · CWE-798, CWE-321
internal/timeline/manager_test.go:54
DSN:  "postgres://radar:[email protected]:1/radar?connect_timeout=1",
MEDIUMHard-coded secrets · secret.db_uri · CWE-798, CWE-321
internal/timeline/manager_test.go:84
DSN:  "postgres://radar:[email protected]:1/radar?connect_timeout=1",
MEDIUMHard-coded secrets · secret.db_uri · CWE-798, CWE-321
pkg/audit/checks_test.go:2144
Data:       map[string]string{"db_credentials": "postgres://app:s3cretpass@db:5432/app"},
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
internal/cloudinstall/discovery_test.go:159
const token = "rhc_super_secret_literal"
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
internal/timeline/postgres_store_test.go:278
const password = "radar-keyword-secret"
MEDIUMHard-coded secrets · secret.github · CWE-798, CWE-321
pkg/ai/context/redact_test.go:20
input := "token=ghp_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghij"
MEDIUMHard-coded secrets · secret.github · CWE-798, CWE-321
pkg/ai/context/redact_test.go:160
input := "token: ghs_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghij"
MEDIUMHard-coded secrets · secret.private_key · CWE-798, CWE-321
web/src/components/diagnose/InvestigationResourceEvidence.test.tsx:26
"-----BEGIN RSA PRIVATE KEY-----\nMIIEabc\n-----END RSA PRIVATE KEY-----",
LOWInventory / provenance · inv.hidden_file · CWE-1104
.air.toml
.air.toml
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.goreleaser.yaml
.goreleaser.yaml
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.krew.yaml
.krew.yaml
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWFilesystem / path · fs.credential_store · CWE-22, CWE-59
.github/workflows/release-desktop.yml:38
mkdir -p ~/.kube
Why it matters. touches a credential store
LOWFilesystem / path · fs.credential_store · CWE-22, CWE-59
.github/workflows/release-desktop.yml:54
token: dummy' > ~/.kube/config
Why it matters. touches a credential store

Gates applied: no_behavioural_pass.

Audited 2026-09-22 · audit v0.4.1 · source sha 9bf37b696bedfull audit observations/trust-audit/mcp-server/skyhook-io__radar.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-09-229bf37b696bedBLOCKF44score 45 -> 44
2026-09-18be20d02ffc6bBLOCKF45first audit
05

Questions

What is the Radar MCP server?

The missing open-source Kubernetes UI with a built-in MCP server for AI agents. See what's broken, why, and what changed. Issues, Topology, event timeline, Helm, GitOps, live service traffic, and cluster audits - all in one Go binary.

Is Radar safe to connect to an agent?

No — not without reading the findings first. The audit graded it F (44/100) and found 7 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does Radar need?

It reads RADAR_CAPTURE_AUTHORIZATION from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does Radar run?

It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as @skyhook-io/radar-app at 0.3.1.

How current is this page?

The grade is for one exact copy of the source (9bf37b696bed), read on 2026-09-22. The repository is watched and re-audited when it changes.

Advertisement