Kafka MCP

Findings (17)

• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  dnspython@2.8.0: 1 known vulnerability

  GHSA-45c3-73f7-pv4m

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  mcp@1.26.0: 7 known vulnerabilities

  PYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  python-multipart@0.0.22: 6 known vulnerabilities

  PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039, PYSEC-2026-3040 +1 more

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  starlette@0.52.1: 5 known vulnerabilities

  PYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  idna@3.11: 1 known vulnerability

  PYSEC-2026-215

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  opentelemetry-api@1.39.1: 1 known vulnerability

  GHSA-xcq7-p3pf-p88h

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  pydantic-settings@2.13.1: 1 known vulnerability

  GHSA-4xgf-cpjx-pc3j

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  pygments@2.19.2: 1 known vulnerability

  PYSEC-2026-2987

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  python-dotenv@1.2.1: 1 known vulnerability

  PYSEC-2026-2270

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)
• lowLow. Minor, or common in normal tools. Shown for information.
  Contacted these domains while starting up (no manifest to compare against)

  pypi.org

Network activity

Tools exposed (19)

• describe_cluster

  Returns information about the Kafka cluster (brokers, controller).

• describe_brokers

  Returns a list of brokers with their details.

• list_topics

  Returns a list of all topic names in the cluster.

• describe_topic

  Returns detailed information about a specific topic.

• create_topic

  Creates a new topic.

• delete_topic

  Deletes a topic.

• create_partitions

  Increases the number of partitions for a topic. Note: Partition count can only be increased, not decreased.

• describe_configs

  Get dynamic configs for a resource. resource_type: "topic", "broker", or "group" (case insensitive)

• alter_configs

  Update dynamic configs for a resource. resource_type: "topic", "broker", or "group" configs: Dictionary of config key-value pairs

• consume_messages

  Consumes messages from a topic. offset_spec: 'earliest', 'latest', or specific integer offset. timeout: seconds to wait for messages.

• list_consumer_groups

  Lists all consumer groups.

• describe_consumer_group

  Describes a specific consumer group.

• get_consumer_group_offsets

  Get the committed offsets and lag for a specific consumer group and topic. Returns the committed offset, high/low watermarks, and calculated lag for each partition.

• reset_consumer_group_offset

  Resets the offset of a consumer group using AdminClient. offset_spec: 'earliest', 'latest', or a specific integer offset string. dry_run: If True, only calculates and returns the proposed offset changes without applying them. force: If True, forces the modification even if the group is active or STA

• rewind_consumer_group_offset_by_timestamp

  Rewinds consumer group offsets manually based on a specific timestamp. Finds offsets matching the timestamp using Consumer, then sets using AdminClient. dry_run: If True, only calculates and returns the proposed offset changes without applying them. force: If True, forces the modification even if th

• produce_message

  Produces a message to a topic.

• describe_cluster_health

  Summarizes Kafka health signals exposed by Prometheus JMX Exporter.

• get_broker_metrics

  Returns curated or filtered raw JMX Exporter metrics for one or all brokers.

• get_topic_metrics

  Returns JMX Exporter metrics labeled for a Kafka topic.