Kafka MCP Enterprise Server

Scope: This is a stdio, in-memory conformance reference for the KIP-1318 security control model. Real brokers, Streamable HTTP, OAuth 2.1, EOS/fencing, Connect tooling, distributed rate/breaker state, and durable audit topics are specified in the KIP (Java production track under KAFKA-20436) and are not implemented here. Full matrix: doc/kip-alignment.md.

Implemented vs Spec-only

Area	This reference	KIP / Java track
Transport	stdio only	stdio + Streamable HTTP + OAuth
Backend	In-memory Kafka	Real Admin / Producer / Consumer
Tools	13 registered	~30+ (incl. Connect, EOS, group admin)
Resources	subset + Phase-1 lag/offsets	~20 kafka:// URIs
Rate / quarantine	per-process	optional distributed backend
Audit	in-memory hash chain	durable audit topic
Default allow-list	read/consume only (SECURE_DEFAULT_TOOLS)	same secure-by-default posture
Conformance	302/302 checks	KIP test plan

Website

Site	https://vaquarkhan.github.io/kafka-mcp-enterprise-server/
Source	site/ (index.html + local site/assets/site.css)
Deploy	.github/workflows/pages.yml publishes site/ on push to main

PyPI

pip install kafka-mcp-enterprise
echo {"jsonrpc":"2.0","id":1,"method":"tools/list"} | kafka-mcp-enterprise

Package	kafka-mcp-enterprise
CLI	kafka-mcp-enterprise
Import	import kafka_mcp
Optional	pip install kafka-mcp-enterprise[otel]
Publish	Tag v* → .github/workflows/publish.yml (Trusted Publishing / OIDC - see doc/publishing.md)

Agents & skills (Cursor, Kiro, ChatGPT, Gemini, Copilot, …)

AGENTS.md	AGENTS.md - canonical instructions for every coding agent
Skills	.cursor/skills/ (Cursor) · skills/ (portable)
Guide	doc/agents-and-skills.md - how to load in each IDE

---

Python conformance reference for KIP-1318: a Model Context Protocol (MCP) control plane for agent access to Kafka. The KIP's production target is Java. This package validates the fail-closed security model over stdio against an in-memory backend - it is not a drop-in for the forthcoming first-party Java MCP server.