Aiven
About
Provides direct access to Aiven's cloud database and messaging services, enabling management of PostgreSQL, Kafka, ClickHouse, Valkey, and OpenSearch infrastructure through the Aiven API.
Details
- Repository
- Aiven-Open/mcp-aiven
- Transport
- SSE
- License
- Apache-2.0
Explore
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
AivenCommand (node, npx, python, etc.)npxArguments-
Argument 1
-y -
Argument 2
mcp-aiven
Environment-
AIVEN_TOKEN
your-token-here
Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
-
Argument 1
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
{
"mcpServers": {
"aiven": {
"type": "http",
"url": "https://mcp.aiven.live/mcp"
}
}
}
aiven_project_list
List projects.
aiven_project_get
Get project details.
aiven_list_project_clouds
List cloud platforms for a project.
aiven_project_vpc_list
List VPCs for a project.
aiven_service_list
List services.
aiven_service_type_plans
List plans with cloud availability.
aiven_service_plan_pricing
Get pricing for a plan in a specific cloud.
aiven_service_create
Create a service.
aiven_service_get
Get service information.
aiven_service_update
Update a service (plan, config, power state).
aiven_service_metrics_fetch
Fetch metrics for managed data services.
aiven_service_application_metrics_get
Fetch metrics for application services.
aiven_project_get_service_logs
Get service log entries.
aiven_service_query_activity
Fetch current queries for a service.
aiven_project_get_event_logs
Get project event log entries.
aiven_kafka_topic_list
List Kafka topics.
aiven_kafka_topic_create
Create a Kafka topic.
aiven_kafka_topic_get
Get Kafka topic info.
aiven_kafka_topic_update
Update a Kafka topic.
aiven_kafka_topic_delete
Delete a Kafka topic.
aiven_kafka_topic_message_list
Read messages from a Kafka topic.
aiven_kafka_topic_message_produce
Produce messages into a Kafka topic.
aiven_kafka_connect_available_connectors
List available connector types.
aiven_kafka_connect_list
List running connectors.
aiven_kafka_connect_create_connector
Create a connector.
aiven_kafka_connect_edit_connector
Edit a connector.
aiven_kafka_connect_get_connector_status
Get connector status.
aiven_kafka_connect_pause_connector
Pause a connector.
aiven_kafka_connect_resume_connector
Resume a connector.
aiven_kafka_connect_restart_connector
Restart a connector.
aiven_kafka_connect_delete_connector
Delete a connector.
aiven_kafka_schema_registry_subjects
List Schema Registry subjects.
aiven_kafka_schema_registry_subject_version_get
Get Schema Registry subject version.
aiven_pg_service_available_extensions
List available extensions.
aiven_pg_service_query_statistics
Fetch query statistics.
aiven_pg_bouncer_create
Create a PgBouncer connection pool.
aiven_pg_bouncer_update
Update a PgBouncer connection pool.
aiven_pg_bouncer_delete
Delete a PgBouncer connection pool.
aiven_pg_read
Run a read-only SQL query.
aiven_pg_write
Run a write SQL statement (INSERT, UPDATE, DELETE, CREATE TABLE, etc.).
aiven_pg_optimize_query
AI-powered query optimization (EverSQL).
aiven_application_deploy
Deploy a Dockerized application to Aiven.
aiven_application_redeploy
Rebuild and redeploy an existing application.
aiven_vcs_integration_list
List connected VCS (GitHub) accounts.
aiven_vcs_integration_repository_list
List repositories for a VCS integration.
aiven_docs_search
Search the official Aiven documentation in natural language.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"aiven": {
"env": {
"AIVEN_TOKEN": "your-token-here"
},
"args": [
"-y",
"mcp-aiven"
],
"command": "npx"
}
}
}
Linux
{
"env": {
"AIVEN_TOKEN": "your-token-here"
},
"args": [
"-y",
"mcp-aiven"
],
"command": "npx"
}
Macos
{
"env": {
"AIVEN_TOKEN": "your-token-here"
},
"args": [
"-y",
"mcp-aiven"
],
"command": "npx"
}
Windows
{
"env": {
"AIVEN_TOKEN": "your-token-here"
},
"args": [
"/c",
"npx",
"-y",
"mcp-aiven"
],
"command": "cmd"
}
- List and inspect Aiven projects— Useaiven_project_listandaiven_project_getto browse projects and view their details.
- Manage Aiven services— Create, update, or retrieve services withaiven_service_create,aiven_service_update, andaiven_service_get.
- Work with Kafka topics and connectors— List, create, update, delete topics, produce/consume messages, and manage Kafka Connect connectors.
- Run SQL on PostgreSQL services— Execute read-only queries withaiven_pg_reador write statements withaiven_pg_write.
- Deploy and redeploy applications— Useaiven_application_deployandaiven_application_redeployto manage Dockerized apps on Aiven.
- Search Aiven documentation— Query official docs in natural language viaaiven_docs_search(hosted server only).
AModel Context Protocol(MCP) server for theAivencloud data platform.
Manage PostgreSQL, Apache Kafka, applications, and other Aiven services directly from AI assistants like Claude, Cursor, and VS Code Copilot.
[!WARNING]Use with care.This MCP server can create, modify, and delete Aiven services and data on your behalf. AI agents may execute destructive actions (dropping databases, deleting services, producing messages) based on their interpretation of your prompts. You are fully responsible for the actions taken through this tool.
Permissions:Access is governed by the Aiven user permissions associated with the authenticated account. The MCP server can only perform actions that your Aiven user is allowed to do.
AI Agent Security:AI agents may need access credentials (database connection strings, streaming tokens) to act on your behalf. Review what your agent is doing, especially in production environments. Follow your organization's security policies and do a risk assessment before giving AI agents access to sensitive resources.
The MCP server is hosted athttps://mcp.aiven.live/mcp. Your MCP client will prompt you to authorize on Aiven.
claude mcp add --scope user --transport http aiven-mcp "https://mcp.aiven.live/mcp"
{ "mcpServers": { "aiven-mcp": { "url": "https://mcp.aiven.live/mcp" } } }
Add to.vscode/mcp.jsonin your workspace:
{ "servers": { "aiven-mcp": { "type": "http", "url": "https://mcp.aiven.live/mcp" } } }
Enable read-only mode by adding?read_only=trueto the URL. All write operations will be excluded from the MCP:
{ "mcpServers": { "aiven-mcp": { "url": "https://mcp.aiven.live/mcp?read_only=true" } } }
Reduce the tool surface exposed to your AI agent by adding?services_scope=to the URL. Useful when you only work with a subset of Aiven services and want to keep the agent's context focused. Combine values with commas.core(project/service discovery) is always included implicitly.
Valid scopes:all,core,pg,kafka,application,integrations. Useallto explicitly load every tool (same as omitting the param).allcannot be combined with other scopes.
{ "mcpServers": { "aiven-mcp": { "url": "https://mcp.aiven.live/mcp?services_scope=kafka" } } }
https://mcp.aiven.live/mcp?services_scope=pg&read_only=true
Write Exceptions in Read-Only Mode (Remote)
Whenread_only=true, add?write_allowlist=to re-enable specific write tools while keeping everything else read-only. Useful when you want mostly-read access but still need to allow one write action, for example creating Kafka topics. Combine multiple tool names with commas. Ignored whenread_onlyis not enabled.
https://mcp.aiven.live/mcp?read_only=true&write_allowlist=aiven_kafka_topic_create
{ "mcpServers": { "aiven-mcp": { "url": "https://mcp.aiven.live/mcp/<marketplace>" } } }
The path segment combines with the query parameters above, for examplehttps://mcp.aiven.live/mcp/gcp?services_scope=pg&read_only=true.
Run the server locally as a child process of your MCP client. Requires Node.js 18+.
You must provide your Aiven API token via theAIVEN_TOKENenvironment variable.Create a token here.
claude mcp add --scope user aiven-mcp -e AIVEN_TOKEN=your-token-here -- npx -y mcp-aiven
Cursor, VS Code-- add to your MCP client config:
{ "mcpServers": { "aiven-mcp": { "command": "npx", "args": ["-y", "mcp-aiven"], "env": { "AIVEN_TOKEN": "your-token-here" } } } }
- Cursor: Cursor Settings > MCP Servers
- VS Code:.vscode/mcp.jsonin your workspace
Run a local build of the server (useful for development and testing):
pnpm install && pnpm generate:api-types && pnpm generate && pnpm build && AIVEN_TOKEN="<YOUR_TOKEN>" MCP_TRANSPORT="http" PORT=3000 node dist/index.js
The server listens on port 3000 by default. Connect your MCP client tohttp://localhost:3000/mcp.
To point a remote deployment at a custom host (e.g. your local build), setMCP_HOST:
MCP_HOST=http://localhost:3000 node dist/index.js
In remote (HTTP) mode,AIVEN_TOKENis not needed. Your MCP client sends your token as a Bearer token with each request.
Production HTTP traffic is rate-limited in two layers: Cloudflare enforces a per-client-IP limit (configured in the Cloudflare dashboard), and this server enforcesMCP_HTTP_RATE_LIMIT_*per bearer token onPOST /mcp.
WhenEXTRA_PROTECTION=true, any mismatch betweenMCP_EDGE_AUTH_SECRETand the value Cloudflare injects asX-Edge-Authcausesevery request to return 403(exceptGET /health). Both values are environment/config on opposite sides of the wire, so the only recovery path is to fix the secret and redeploy or update Cloudflare.
- Cloudflare Transform Rule— Add a rule that setsX-Edge-Auth(and, if used for PG tools,X-Client-IP) on traffic to the MCP origin. Note the secret value you configure.
- MCP_EDGE_AUTH_SECRET— Deploy the server with this env var set to thesamesecret as the Transform Rule. LeaveEXTRA_PROTECTIONunset orfalsefor now; verify the origin still accepts traffic.
- EXTRA_PROTECTION=true— Enable only after steps 1–2 are live and matched. Confirm a normal MCP request succeeds and direct origin access withoutX-Edge-Authis rejected.
- Secret rotation— Update Cloudflare andMCP_EDGE_AUTH_SECRETtogether (or briefly setEXTRA_PROTECTION=false), redeploy, then re-enable. Never rotate one side alone while the flag is on.
IfEXTRA_PROTECTION=trueat startup andMCP_EDGE_AUTH_SECRETis missing, the process exits immediately with an error.
While rejections continue, the server logs a misconfig warning at most once every 15 minutes (reset after a request with validX-Edge-Auth), so a secret mismatch is visible in logs without one line per rejected request.
SeeCONTRIBUTING.mdfor development setup, running locally, and adding new tools.
Interact with your AWS environment using natural language to query and manage resources. Requires local AWS credentials.
Interact with your AWS environment using natural language. Requires local AWS credentials.
A read-only MCP server for retrieving information and diagnosing issues in Kubernetes clusters.
Deploy full-stack apps (Postgres, Redis, S3, workers, backups) from Claude or curl. 59 MCP tools
An MCP server for managing databases and services on the Tembo Cloud platform.
Interact with the Neon serverless Postgres platform
MCP-PostgreSQL-Ops is a professional MCP server for PostgreSQL database operations, monitoring, and management. Supports PostgreSQL 12-17 with comprehensive database analysis, performance monitoring, and intelligent maintenance recommendations through natural language queries.
Interact with Neon Postgres databases using natural language to manage projects, branches, queries, and migrations via the Neon API.
An MCP server for PostgreSQL providing index tuning, explain plans, health checks, and safe SQL execution.
An MCP interface for the rails-pg-extras gem, providing PostgreSQL metadata and performance analysis through LLM prompts.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.



