inspektor-gadget/ig-mcp-server

Exposes Inspektor Gadget's eBPF-powered kernel observability (DNS traces, TCP connections, syscalls, file activity) as dynamically-registered MCP tools, enabling LLMs to autonomously select relevant gadgets and correlate low-level telemetry across multiple data sources. Supports foreground/background execution modes, read-only production safety, and flexible deployment via stdio, Docker, or Kubernetes HTTP transport. Transforms raw kernel events into structured JSON enriched with Kubernetes metadata (pod, namespace, container), enabling AI-driven root cause analysis grounded in real evidence rather than speculation.