About kubesense-skills
kubesense-skills is a collection of observability skills for KubeSense, organized around telemetry surfaces. It guides agents through logs, traces, metrics, infrastructure, alerts, dashboards, SLOs, and query conventions, with most skills using the KubeSense MCP server.
Key features
- 01Log search and aggregation
- 02Trace latency and error analysis
- 03Metrics and infrastructure queries
- 04Alert and dashboard workflows
- 05SLO and Datadog migration guidance
- 06SQL and SPL query patterns
Use cases
- 01Investigating log errors and slow requests
- 02Reviewing Kubernetes or cloud metrics
- 03Creating alerts, dashboards, and SLOs
- 04Routing observability questions to relevant skills
MCP support
Most skills require a connected KubeSense MCP server for querying and validation. kubesense-slo uses the REST API directly and has no MCP tools, while some skills can generate JSON offline.
Install
Copy the command and run it in a terminal.
npx skills add https:/ / github.com/ kubesense-ai/ kubesense-mcp-skills --skill kubesense-skillsAfter installing, type/kubesense-skillsin Claude Code to confirm it loaded.
Bundled files
References and scripts installed along with SKILL.md.
README.mdpackage-lock.jsondrafts/README.mdkubesense-investigate.mdkubesense-alerts/references/datadog-migration.mdimport-json.mdkubesense-dashboards/references/variables-and-rows.mdpanel-config.mdkubesense-mcp/references/multi-query.mdfield-catalog.mdkubesense-metrics/references/cloud-metric-catalog.mdmetric-catalog.mdkubesense-slo/references/api-payloads.mddatadog-migration.mdkubesense-sql/references/recipes.mdDetails
From the project READMEKubeSense Skills
Observability skills for KubeSense, grouped by telemetry surface.
Skills
| Skill | Description |
|---|---|
| kubesense-mcp | The tool layer — connection, auth, the full tool inventory, the WHERE/field-name contract every query skill inherits. Start here. |
| kubesense-logs | Search and aggregate logs |
| kubesense-traces | Spans, latency percentiles, error rates, distributed-trace waterfalls |
| kubesense-metrics | PromQL/MetricsQL over Kubernetes, infrastructure and cloud-provider (AWS/GCP/Azure/Atlas/Confluent/Kong) metrics |
| kubesense-spl | SPL — the piped log query language, and its inverted field contract |
| kubesense-sql | Raw ClickHouse SQL over logs and traces — joins, CTEs, window functions |
| kubesense-infra | Cluster inventory: clusters, nodes, pods, workloads, infra failures, recent deploys |
| kubesense-alerts | List, investigate, and create alert rules; generate import JSON; migrate Datadog monitors |
| kubesense-dashboards | Create dashboards, or generate preset JSON to import |
| kubesense-slo | Create and manage service level objectives; error budgets, burn-rate alerting, Datadog SLO migration |
Routing
| The user is asking… | Skill |
|---|---|
| "show me errors / grep the logs" | kubesense-logs |
| "p99 latency / slow requests / which service is failing" | kubesense-traces |
| "CPU, memory, disk, saturation, capacity" | kubesense-metrics |
| "how is my RDS / EC2 / Azure VM / Atlas cluster doing" | kubesense-metrics |
| "what's running / why is this pod restarting / what changed" | kubesense-infra |
| "alert me when… / what's firing / convert this Datadog monitor" | kubesense-alerts |
| "build me a dashboard" | kubesense-dashboards |
| "track an SLO / error budget / port a Datadog SLO" | kubesense-slo |
| a query needing a join, CTE, or window function | kubesense-sql |
| "search the logs with a pipeline" / SPL tab | kubesense-spl |
| "this alert fired — what's wrong?" | kubesense-alerts, then kubesense-infra |
| a tool returned a field-name or WHERE error | kubesense-mcp |
Prerequisites
Every skill except kubesense-dashboards, kubesense-alerts and kubesense-slo
(which can generate JSON offline) needs the KubeSense MCP server connected. Those
three need it for their validate and create tools, and for discovering real metric and
field names — offline they fall back to JSON built from names the user supplies.
kubesense-slo has no MCP tools at all: it drives the REST API directly, and uses the
MCP query tools only to discover names.
The MCP server is served by kubeapi at /mcp over Streamable HTTP and authenticates
with the same credentials as the REST API.
claude mcp add --scope user --transport http kubesense \
https://<your-kubesense-host>/mcp \
--header "x-api-key: <your-api-key>"
See kubesense-mcp for auth alternatives and verification.
Two Rules That Apply Everywhere
-
Discover before querying. Never invent a field name, metric name, cluster name, or label. Every surface has a discovery tool; a guessed name either errors or — worse — returns an empty result that reads like "zero".
-
Field names are catalog labels, not storage columns. Logs/traces queries take
type,instance,service,method,status_code— notlevel,pod_name,app_service,subtype,return_code. The alert engine accepts a different set. See kubesense-mcp for the contract and kubesense-alerts for the divergence.
Install
npx skills add kubesense-ai/kubesense-mcp-skills --full-depth -y
Important
--full-depthis required. Without it the installer stops at this rootSKILL.mdand installs only this index — 1 skill instead of 11 — with no warning.If you are reading this as the only installed KubeSense skill, that is what happened. Re-run the command above with
--full-depth.
Verify with npx skills add kubesense-ai/kubesense-mcp-skills --list --full-depth, which
should report 11 skills. Or pick individual skills — see the README.