Airflow MCP server
io.github.abhishekbhakat/airflow-mcp-server·v0.9.0·33 starsAn MCP server for Apache Airflow
33 stars868 downloads/wk
Reviews
Write oneNobody has reviewed Airflow yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Airflow tools (5)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
back_to_categoriesReturn to browsing all categories
browse_categoriesShow all available Airflow categories with tool counts.
category_infoShow information about current category tools.
get_current_categoryGet currently selected category.
select_categorySwitch to tools for specific category.
Public scan report
scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it
- Code scan15 source files scanned; 12 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 352 days ago4/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Airflow compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 66/100
- higher than 23% of 48,255 servers
- Tools
- 5
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 33
- more than 92% of 28,688 servers
- Downloads a week
- 868
- more than 93% of 12,191 servers with a package
What its tools let an agent do: 5 read
Install Airflow in Claude Code, Cursor or VS Code
claude mcp add airflow-mcp-server -- uvx airflow-mcp-server
What the publisher says
From the Airflow repository's README, as published. We do not edit it. Read it on GitHub
airflow-mcp-server: An MCP Server for controlling Airflow 3
mcp-name: io.github.abhishekbhakat/airflow-mcp-server
MCPHub Certification
This MCP server is certified by MCPHub. This certification ensures that airflow-mcp-server follows best practices for Model Context Protocol implementation.
Find on Glama
Overview
A Model Context Protocol server for controlling Airflow via Airflow APIs.
Demo Video
https://github.com/user-attachments/assets/f3e60fff-8680-4dd9-b08e-fa7db655a705
Setup
Usage with Claude Desktop
Stdio Transport (Default)
{
"mcpServers": {
"airflow-mcp-server": {
"command": "uvx",
"args": [
"airflow-mcp-server",
"--base-url",
"http://localhost:8080",
"--auth-token",
"<jwt_token>"
]
}
}
}See CONFIG.md for IDE-specific configuration examples across popular MCP clients.
HTTP Transport
{
"mcpServers": {
"airflow-mcp-server-http": {
"command": "uvx",
"args": [
"airflow-mcp-server",
"--http",
"--port",
"3000",
"--base-url",
"http://localhost:8080",
"--auth-token",
"<jwt_token>"
]
}
}
}Note:
- Set base_url to the root Airflow URL (e.g., http://localhost:8080).
- Do not include /api/v2 in the base URL. The server will automatically fetch the OpenAPI spec from ${base_url}/openapi.json.
- Only JWT token is required for authentication. Cookie and basic auth are no longer supported in Airflow 3.0.
Transport Options
The server supports multiple transport protocols:
Stdio Transport (Default)
Standard input/output transport for direct process communication:
airflow-mcp-server --safe --base-url http://localhost:8080 --auth-token <jwt>HTTP Transport
Uses Streamable HTTP for better scalability and web compatibility:
airflow-mcp-server --safe --http --port 3000 --base-url http://localhost:8080 --auth-token <jwt>Note: SSE transport is deprecated. Use --http for new deployments as it provides better bidirectional communication and is the recommended approach by FastMCP.
Operation Modes
The server supports two operation modes:
- Safe Mode (--safe): Only allows read-only operations (GET requests). This is useful when you want to prevent any modifications to your Airflow instance.
- Unsafe Mode (--unsafe): Allows all operations including modifications. This is the default mode.
To start in safe mode:
airflow-mcp-server --safeTo explicitly start in unsafe mode (though this is default):
airflow-mcp-server --unsafeTool Discovery Modes
The server supports two tool discovery approaches:
- Hierarchical Discovery (default): Tools are organized by categories (DAGs, Tasks, Connections, etc.). Browse categories first, then select specific tools. More manageable for large APIs.
- Static Tools (--static-tools): All tools available immediately. Better for programmatic access but can be overwhelming.
To use static tools:
airflow-mcp-server --static-toolsCommand Line Options
Usage: airflow-mcp-server [OPTIONS]
MCP server for AirflowShortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Airflow: common questions
- Is Airflow MCP server safe?
- With care: it is graded C, so read the findings first (66/100). Read the Airflow safety report
- How do I install Airflow?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Airflow need an API key?
- Yes. The registry entry asks for
AUTH_TOKEN. - Is Airflow maintained?
- The last commit was 386 days ago (2025-10-14). The latest release is v0.9.0.
- How does Airflow compare with other MCP servers?
- safety score 66/100 (higher than 23% of 48,255 servers); tools 5 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.