MCP Servers in Production: Patterns for Connecting AI Agents to Kubernetes and Cloud APIs
The first wave of AI agents talked to infrastructure through bespoke wrappers: a Python script that called kubectl, a Lambda that polled CloudWatch, a chat plugin that hard-coded an OpenAPI spec. That worked for demos. It collapsed the moment an agent needed to talk to two systems at once, or get rotated credentials, or appear in a SOC 2 audit.
Model Context Protocol (MCP) is the answer that won, and by 2026 it has the ecosystem to prove it. The Python SDK alone shipped v2.2.0 on 2026-09-07.1 The spec was last revised 2025-06-18 and is now stable enough that AWS Labs, Microsoft, Google, Cloudflare, and Alibaba all ship vendor MCP servers against it.2 OWASP published an MCP-specific Top 10 in 2025 because the attack surface is real enough to warrant one.3
This post is the field guide I wish someone had handed me twelve months ago. It covers the transport choices, the Kubernetes deployment patterns, the cloud-vendor landscape, authentication, security, multi-server gateways, observability, and the operational checklist that turns a working prototype into a production control plane.