{
  "markdown": "<p align=\"center\">\n  <img src=\"https://raw.githubusercontent.com/kubeshark/assets/master/svg/kubeshark-logo.svg\" alt=\"Kubeshark\" height=\"120px\"/>\n</p>\n\n<p align=\"center\">\n    <a href=\"https://github.com/kubeshark/kubeshark/releases/latest\"><img alt=\"Release\" src=\"https://img.shields.io/github/v/release/kubeshark/kubeshark?logo=GitHub&style=flat-square\"></a>\n    <a href=\"https://hub.docker.com/r/kubeshark/worker\"><img alt=\"Docker pulls\" src=\"https://img.shields.io/docker/pulls/kubeshark/worker?color=%23099cec&logo=Docker&style=flat-square\"></a>\n    <a href=\"https://discord.gg/WkvRGMUcx7\"><img alt=\"Discord\" src=\"https://img.shields.io/discord/1042559155224973352?logo=Discord&style=flat-square&label=discord\"></a>\n    <a href=\"https://join.slack.com/t/kubeshark/shared_invite/zt-3jdcdgxdv-1qNkhBh9c6CFoE7bSPkpBQ\"><img alt=\"Slack\" src=\"https://img.shields.io/badge/slack-join_chat-green?logo=Slack&style=flat-square\"></a>\n</p>\n\n<p align=\"center\"><b>Network Observability for SREs & AI Agents</b></p>\n\n<p align=\"center\">\n  <a href=\"https://demo.kubeshark.com/\">Live Demo</a> · <a href=\"https://docs.kubeshark.com\">Docs</a>\n</p>\n\n---\n\nKubeshark indexes cluster-wide network traffic at the kernel level using eBPF — delivering instant answers to any query using network, API, and Kubernetes semantics.\n\n**What you can do:**\n\n- **Download Retrospective PCAPs** — cluster-wide packet captures filtered by nodes, time, workloads, and IPs. Store PCAPs for long-term retention and later investigation.\n- **Visualize Network Data** — explore traffic matching queries with API, Kubernetes, or network semantics through a real-time dashboard.\n- **See Encrypted Traffic in Plain Text** — automatically decrypt TLS/mTLS traffic using eBPF, with no key management or sidecars required.\n- **Integrate with AI** — connect your favorite AI assistant (e.g. Claude, Copilot) to include network data in AI-driven workflows like incident response and root cause analysis.\n\n![Kubeshark](https://github.com/kubeshark/assets/raw/master/png/stream.png)\n\n---\n\n## Get Started\n\n```bash\nhelm repo add kubeshark https://helm.kubeshark.com\nhelm install kubeshark kubeshark/kubeshark\nkubectl port-forward svc/kubeshark-front 8899:80\n```\n\nOpen `http://localhost:8899` in your browser. You're capturing traffic.\n\n> For production use, we recommend using an [ingress controller](https://docs.kubeshark.com/en/ingress) instead of port-forward.\n\n**Connect an AI agent** via MCP:\n\n```bash\nbrew install kubeshark\nclaude mcp add kubeshark -- kubeshark mcp\n```\n\n[MCP setup guide →](https://docs.kubeshark.com/en/mcp)\n\n---\n\n### Network Data for AI Agents\n\nKubeshark exposes cluster-wide network data via [MCP](https://docs.kubeshark.com/en/mcp) — enabling AI agents to query traffic, investigate API calls, and perform root cause analysis through natural language.\n\n> *\"Why did checkout fail at 2:15 PM?\"*\n> *\"Which services have error rates above 1%?\"*\n> *\"Show TCP retransmission rates across all node-to-node paths\"*\n> *\"Trace request abc123 through all services\"*\n\nWorks with Claude Code, Cursor, and any MCP-compatible AI.\n\n![MCP Demo](https://github.com/kubeshark/assets/raw/master/gif/mcp-demo.gif)\n\n[MCP setup guide →](https://docs.kubeshark.com/en/mcp)\n\n### AI Skills\n\nOpen-source, reusable skills that teach AI agents domain-specific workflows on top of Kubeshark's MCP tools:\n\n| Skill | Description |\n|-------|-------------|\n| **[Network RCA](skills/network-rca/)** | Retrospective root cause analysis — snapshots, dissection, PCAP extraction, trend comparison |\n| **[KFL](skills/kfl/)** | KFL (Kubeshark Filter Language) expert — writes, debugs, and optimizes traffic filters |\n\nInstall as a Claude Code plugin:\n\n```\n/plugin marketplace add kubeshark/kubeshark\n/plugin install kubeshark\n```\n\nOr clone and use directly — skills trigger automatically based on conversation context.\n\n[AI Skills docs →](https://docs.kubeshark.com/en/mcp/skills)\n\n---\n\n### Query with API, Kubernetes, and Network Semantics\n\nKubeshark indexes cluster-wide network traffic by parsing it according to protocol specifications, with support for HTTP, gRPC, Redis, Kafka, DNS, and more. A single [KFL query](https://docs.kubeshark.com/en/v2/kfl2) can combine all three semantic layers — Kubernetes identity, API context, and network attributes — to pinpoint exactly the traffic you need. No code instrumentation required.\n\n![KFL query combining API, Kubernetes, and network semantics](https://github.com/kubeshark/assets/raw/master/png/kfl-semantics.png)\n\n[KFL reference →](https://docs.kubeshark.com/en/v2/kfl2) · [Traffic indexing →](https://docs.kubeshark.com/en/v2/l7_api_dissection)\n\n### Workload Dependency Map\n\nA visual map of how workloads communicate, showing dependencies, traffic volume, and protocol usage across the cluster.\n\n![Service Map](https://github.com/kubeshark/assets/raw/master/png/servicemap.png)\n\n[Learn more →](https://docs.kubeshark.com/en/v2/service_map)\n\n### Traffic Retention & PCAP Export\n\nCapture and retain raw network traffic cluster-wide, including decrypted TLS. Download PCAPs scoped by time range, nodes, workloads, and IPs — ready for Wireshark or any PCAP-compatible tool. Store snapshots in cloud storage (S3, Azure Blob, GCS) for long-term retention and cross-cluster sharing.\n\n![Traffic Retention](https://github.com/kubeshark/assets/raw/master/png/snapshots-list.png)\n\n[Snapshots guide →](https://docs.kubeshark.com/en/v2/traffic_snapshots) · [Cloud storage →](https://docs.kubeshark.com/en/snapshots_cloud_storage)\n\n---\n\n## Features\n\n| Feature | Description |\n|---------|-------------|\n| [**Traffic Snapshots**](https://docs.kubeshark.com/en/v2/traffic_snapshots) | Point-in-time snapshots with cloud storage (S3, Azure Blob, GCS), PCAP export for Wireshark |\n| [**Traffic Indexing**](https://docs.kubeshark.com/en/v2/l7_api_dissection) | Real-time and delayed L7 indexing with request/response matching and full payloads |\n| [**Protocol Support**](https://docs.kubeshark.com/en/protocols) | HTTP, gRPC, GraphQL, Redis, Kafka, DNS, and more |\n| [**TLS Decryption**](https://docs.kubeshark.com/en/encrypted_traffic) | eBPF-based decryption without key management, included in snapshots |\n| [**AI Integration**](https://docs.kubeshark.com/en/mcp) | MCP server + open-source AI skills for network RCA and traffic filtering |\n| [**KFL Query Language**](https://docs.kubeshark.com/en/v2/kfl2) | CEL-based query language with Kubernetes, API, and network semantics |\n| [**100% On-Premises**](https://docs.kubeshark.com/en/air_gapped) | Air-gapped support, no external dependencies |\n\n---\n\n## Install\n\n| Method | Command |\n|--------|---------|\n| Helm | `helm repo add kubeshark https://helm.kubeshark.com && helm install kubeshark kubeshark/kubeshark` |\n| Homebrew | `brew install kubeshark && kubeshark tap` |\n| Binary | [Download](https://github.com/kubeshark/kubeshark/releases/latest) |\n\n[Installation guide →](https://docs.kubeshark.com/en/install)\n\n---\n\n## Contributing\n\nWe welcome contributions. See [CONTRIBUTING.md](CONTRIBUTING.md).\n\n## License\n\n[Apache-2.0](LICENSE)\n",
  "bytes": 7064,
  "sha": "b34bc36f22770ab62a6a3efce9d9c87b51f67f407dac9331af562f8744119abc",
  "repo_slug": "kubeshark/kubeshark",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_kubeshark_mcp_a7fb66d3/readme"
}