MCP.Market

Airflow MCP server

by abhishekbhakat·io.github.abhishekbhakat/airflow-mcp-server·v0.9.0·33 stars

An MCP server for Apache Airflow

C66/100grade C
What users say
No reviews yet
Be the first
Safety scan
C66/100

full report

Adoption
Growing

33 stars868 downloads/wk

Reviews

Write one

Nobody has reviewed Airflow yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Airflow tools (5)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • back_to_categories

    Return to browsing all categories

  • browse_categories

    Show all available Airflow categories with tool counts.

  • category_info

    Show information about current category tools.

  • get_current_category

    Get currently selected category.

  • select_category

    Switch to tools for specific category.

Public scan report

scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it

no findings
  • Code scan15 source files scanned; 12 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 352 days ago4/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 66/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Airflow compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
66/100
higher than 23% of 48,255 servers
Tools
5
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
33
more than 92% of 28,688 servers
Downloads a week
868
more than 93% of 12,191 servers with a package

What its tools let an agent do: 5 read

Install Airflow in Claude Code, Cursor or VS Code

claude mcp add airflow-mcp-server -- uvx airflow-mcp-server
Add to Cursor

What the publisher says

From the Airflow repository's README, as published. We do not edit it. Read it on GitHub

airflow-mcp-server: An MCP Server for controlling Airflow 3

mcp-name: io.github.abhishekbhakat/airflow-mcp-server

MCPHub Certification

This MCP server is certified by MCPHub. This certification ensures that airflow-mcp-server follows best practices for Model Context Protocol implementation.

Find on Glama

Overview

A Model Context Protocol server for controlling Airflow via Airflow APIs.

Demo Video

https://github.com/user-attachments/assets/f3e60fff-8680-4dd9-b08e-fa7db655a705

Setup

Usage with Claude Desktop

Stdio Transport (Default)

{
    "mcpServers": {
        "airflow-mcp-server": {
            "command": "uvx",
            "args": [
                "airflow-mcp-server",
                "--base-url",
                "http://localhost:8080",
                "--auth-token",
                "<jwt_token>"
            ]
        }
    }
}

See CONFIG.md for IDE-specific configuration examples across popular MCP clients.

HTTP Transport

{
    "mcpServers": {
        "airflow-mcp-server-http": {
            "command": "uvx",
            "args": [
                "airflow-mcp-server",
                "--http",
                "--port",
                "3000",
                "--base-url",
                "http://localhost:8080",
                "--auth-token",
                "<jwt_token>"
            ]
        }
    }
}

Note:

- Set base_url to the root Airflow URL (e.g., http://localhost:8080).

- Do not include /api/v2 in the base URL. The server will automatically fetch the OpenAPI spec from ${base_url}/openapi.json.

- Only JWT token is required for authentication. Cookie and basic auth are no longer supported in Airflow 3.0.

Transport Options

The server supports multiple transport protocols:

Stdio Transport (Default)

Standard input/output transport for direct process communication:

airflow-mcp-server --safe --base-url http://localhost:8080 --auth-token <jwt>

HTTP Transport

Uses Streamable HTTP for better scalability and web compatibility:

airflow-mcp-server --safe --http --port 3000 --base-url http://localhost:8080 --auth-token <jwt>

Note: SSE transport is deprecated. Use --http for new deployments as it provides better bidirectional communication and is the recommended approach by FastMCP.

Operation Modes

The server supports two operation modes:

  • Safe Mode (--safe): Only allows read-only operations (GET requests). This is useful when you want to prevent any modifications to your Airflow instance.
  • Unsafe Mode (--unsafe): Allows all operations including modifications. This is the default mode.

To start in safe mode:

airflow-mcp-server --safe

To explicitly start in unsafe mode (though this is default):

airflow-mcp-server --unsafe

Tool Discovery Modes

The server supports two tool discovery approaches:

  • Hierarchical Discovery (default): Tools are organized by categories (DAGs, Tasks, Connections, etc.). Browse categories first, then select specific tools. More manageable for large APIs.
  • Static Tools (--static-tools): All tools available immediately. Better for programmatic access but can be overwhelming.

To use static tools:

airflow-mcp-server --static-tools

Command Line Options

Usage: airflow-mcp-server [OPTIONS]

  MCP server for Airflow

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Airflow: common questions

Is Airflow MCP server safe?
With care: it is graded C, so read the findings first (66/100). Read the Airflow safety report
How do I install Airflow?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Airflow need an API key?
Yes. The registry entry asks for AUTH_TOKEN.
Is Airflow maintained?
The last commit was 386 days ago (2025-10-14). The latest release is v0.9.0.
How does Airflow compare with other MCP servers?
safety score 66/100 (higher than 23% of 48,255 servers); tools 5 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.