Kafka MCP Enterprise Server

Product packaging image for the PyPI package (not a web UI).

PyPI

pip install kafka-mcp-enterprise
echo {"jsonrpc":"2.0","id":1,"method":"tools/list"} | kafka-mcp-enterprise

Package	kafka-mcp-enterprise
CLI	kafka-mcp-enterprise
Import	import kafka_mcp
Optional	pip install kafka-mcp-enterprise[otel]
Publish	Tag v* → .github/workflows/publish.yml (Trusted Publishing / OIDC - see doc/publishing.md)

Agents & skills (Cursor, Kiro, ChatGPT, Gemini, Copilot, …)

AGENTS.md	AGENTS.md - canonical instructions for every coding agent
Skills	.cursor/skills/ (Cursor) · skills/ (portable)
Guide	doc/agents-and-skills.md - how to load in each IDE

---

Reference implementation of KIP-1318: a first-party Model Context Protocol (MCP) server for Apache Kafka-secure by design, fail-closed by default, and built for agent workloads that must not become a confused deputy on your cluster.

KIP	KIP-1318: MCP Server for Apache Kafka
Jira	KAFKA-20436 - Implement KIP-1318
Discuss	[DISCUSS] KIP-1318 on [email protected]
This repo	Stdlib Python reference / conformance server (teaching, demos, security validation)
KIP production target	Java module (tools/mcp-server) wrapping native Kafka clients - see the KIP

Scope clarity: The Apache Kafka project tracks the official implementation under KAFKA-20436. This repository is an independent, zero-dependency reference that encodes the enterprise control plane, error model, and conformance tests so designs can be validated before or alongside the Java work. It is not a drop-in replacement for the forthcoming first-party Java MCP server.

---

Why this exists

AI agents need governed Kafka access-not ad-hoc scripts, unbounded consumes, or shared “god” principals. KIP-1318 proposes a standalone MCP process (stdio / HTTP) that exposes tools and kafka:// resources without changing the Kafka wire protocol. This reference implements the full enterprise control plane below.

Broker ACLs remain authoritative. Guardrails here complement them; they never replace them.

What’s included

Documentation product image (not a web UI). Checklist of what this Python stdio reference implements: fail-closed pipeline, DLP, 11 tools, kafka:// resources, tests, and examples.

How it runs

flowchart LR
  Agent["Agent / IDE"]
  MCP["kafka-mcp-enterprise<br/>stdio JSON-RPC + pipeline"]
  Kafka["Kafka<br/>ACLs authoritative"]
  Agent -->|"MCP tools/call"| MCP
  MCP -->|"Admin / Produce / Consume"| Kafka

This repo: Python stdlib reference (in-memory Kafka for tests). KIP production track: Java (tools/mcp-server / [KAFKA-20436](https://issues.apa