Six prompts. Three rogue pods. Full forensic report. How AI + Kubeshark MCP turns a Kubernetes breach alert into a resolved incident in under five minutes.

Kubeshark's MCP server gives AI agents and assistants direct access to Kubernetes network traffic — L4 flows, L7 API payloads, and full packet capture via the Model Context Protocol.

After more than two years in production, and based on extensive user feedback, we made a decision to take a step back and rethink some core assumptions. The result is Kubeshark V2.00 — a complete refactor of the original version.

Kubeshark and ZAP work together to scan API calls, detecting and alerting on potential threats and vulnerabilities. This document demonstrates Kubeshark’s scripting capabilities and a practical use case for integrating it with ZAP.