Which tool inspects containers directly on a node when the API server cannot help?

Answer: B. crictl

crictl is the command-line client for a CRI-compatible runtime and works without the API server.

Source: Debugging Kubernetes nodes with crictl (Kubernetes) — Debugging Kubernetes nodes with crictl