Couchbase MCP server

by couchbase·io.github.couchbase/mcp-server-couchbase·v1.1.0·34 stars

No reviews yet

Couchbase MCP servers: Operational and Operational Insights clusters.

A85/100grade A

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

A85/100

full report

Adoption

Established

34 stars1.1k downloads/wk

Reviews

Write one

Nobody has reviewed Couchbase yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Couchbase tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-11-03 · same rubric, same numbers if you re-run it

no findings

Code scan95 source files scanned; 95 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 1 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How Couchbase compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 85/100; higher than 70% of 48,255 servers
GitHub stars: 34; more than 92% of 28,688 servers
Downloads a week: 1,096; more than 95% of 12,191 servers with a package

Release history: 2 versions in the registry since 2026-08-13, latest 2026-11-02, typically one every 81 days.

Install Couchbase in Claude Code, Cursor or VS Code

claude mcp add mcp-server-couchbase -- uvx couchbase-mcp-server

Add to Cursor

What the publisher says

From the Couchbase repository's README, as published. We do not edit it. Read it on GitHub

Couchbase MCP Server

Couchbase MCP Server is a self-hosted Model Context Protocol (MCP) server that connects AI agents and LLM-powered assistants — Claude, Cursor, Windsurf, VS Code Copilot, and other MCP clients — to data in Couchbase clusters, whether hosted on Capella or self-managed. MCP is an open standard for letting AI assistants call tools and query external data sources; this server implements that standard for Couchbase, so an AI agent can inspect your cluster, run SQL++ queries, read and write documents, and analyze query performance using natural language instead of hand-written code.

It provides tools across categories including Cluster Health, Data Schema, Key-Value, Query, and Performance — with safety controls via read-only mode (on by default) and fine-grained tool disabling, so you can let an AI agent explore and query your data without risking unintended writes. It supports both STDIO and Streamable HTTP transports.

Couchbase MCP server is distributed as a Python Package Index (PyPI) package and via Docker. Enterprise support for Couchbase MCP Server is available by licensing Couchbase AI Data Plane, which also entitles use and enterprise support of Couchbase Agent Memory and Couchbase Agent Catalog.

For full documentation, visit mcp-server.couchbase.com.

[![Install in

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Couchbase: common questions

Is Couchbase MCP server safe?: Yes, by our scan: it is graded A (85/100). Read the Couchbase safety report
How do I install Couchbase?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Couchbase need an API key?: Yes. The registry entry asks for CB_PASSWORD, CB_MCP_EMBEDDING_MODEL_API_KEY, CB_MCP_EMBEDDING_MODEL_AWS_ACCESS_KEY_ID, CB_MCP_EMBEDDING_MODEL_AWS_SECRET_ACCESS_KEY and 2 more.
Is Couchbase maintained?: The last commit was 2 days ago (2026-11-02). The latest release is v1.1.0.
How does Couchbase compare with other MCP servers?: safety score 85/100 (higher than 70% of 48,255 servers); github stars 34 (more than 92% of 28,688 servers); downloads a week 1,096 (more than 95% of 12,191 servers with a package). Full comparison.

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: A · 85/100
Stars: 34
Downloads/wk: 1.1k
Price: Free
Licence: Apache-2.0
Transport: Local · mixed
Version: 1.1.0
Category: Everything else
Last release: 2026-11-02

Credentials it needs

CB_CONNECTION_STRINGCouchbase connection string. Required for connecting to the cluster.
CB_USERNAMECouchbase database username. Required for basic authentication.
CB_PASSWORDsecretCouchbase database password. Required for basic authentication.
CB_CA_CERT_PATHCouchbase CA certificate path. Required for TLS authentication in non Capella clusters.
CB_CLIENT_CERT_PATHCouchbase client certificate path. Required for mTLS authentication.
CB_CLIENT_KEY_PATHCouchbase client key path. Required for mTLS authentication.
CB_MCP_READ_ONLY_MODECouchbase read only mode. Set to true to disable write operations: KV document, scope/collection and index write tools are not loaded, and SQL++ queries that modify data are blocked. Set to false to allow them. Default is true.
CB_MCP_TRANSPORTTransport mode for the server (stdio, http or sse). Default is stdio. OAuth is only honored with http.
CB_MCP_HOSTHost to run the MCP server on (default: 127.0.0.1). Used only for HTTP and SSE transport modes.
CB_MCP_PORTPort to run the MCP server on (default: 8000). Used only for HTTP and SSE transport modes.
CB_MCP_WORKERSNumber of server worker processes (default: 1). Values above 1 use more CPU cores, require the http transport, run in stateless HTTP mode, and cannot be combined with CB_MCP_CONFIRMATION_REQUIRED_TOOLS. Each worker writes log files named with the host and process id.
CB_MCP_STATELESS_HTTPHandle each HTTP request without per-session state (default: true when workers > 1, otherwise false). Only honored with the http transport; cannot be combined with CB_MCP_CONFIRMATION_REQUIRED_TOOLS.
CB_MCP_DISABLED_TOOLSTools to disable. Accepts comma-separated tool names (e.g., 'tool_1,tool_2') or a file path containing one tool name per line.
CB_MCP_CONFIRMATION_REQUIRED_TOOLSComma-separated tool names that require user confirmation before execution. Also accepts a file path containing one tool name per line. Requires the MCP client to support elicitation.
CB_MCP_LOG_LEVELLogging level for the MCP server. One of off, debug, info, warning, error. Use 'off' to disable logging entirely. Invalid values fall back to info. Default is info.
CB_MCP_LOG_SINKSComma-separated list of log destinations. Allowed values: stderr, file. Include 'file' to write per-level log files; include 'stderr' to write to the console. Default is stderr.
CB_MCP_LOG_FILEBase path for the per-level log files. One rotating file is written per level (e.g. mcp_server.info.log, mcp_server.error.log). Only used when 'file' is in CB_MCP_LOG_SINKS. Default is mcp_server.log.
CB_MCP_LOG_ROTATION_MAX_SIZE_MBGlobal maximum size in MB per-level log file before it rotates, inherited by every level unless overridden by a per-level CB_MCP_LOG_<LEVEL>_ROTATION_MAX_SIZE_MB. A value of 0 is invalid and falls back to the default (1 MB) with a startup warning. Default is 1 (1 MB).
CB_MCP_LOG_MAX_BYTES[DEPRECATED] Global rotation size in bytes; use CB_MCP_LOG_ROTATION_MAX_SIZE_MB (MB) instead. Still honored for backward compatibility but ignored when CB_MCP_LOG_ROTATION_MAX_SIZE_MB is also set. A value of 0 is invalid and falls back to the default with a startup warning.
CB_MCP_LOG_ERROR_ROTATION_MAX_SIZE_MBRotation size in MB for the ERROR log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for ERROR; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_WARNING_ROTATION_MAX_SIZE_MBRotation size in MB for the WARNING log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for WARNING; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_INFO_ROTATION_MAX_SIZE_MBRotation size in MB for the INFO log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for INFO; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_DEBUG_ROTATION_MAX_SIZE_MBRotation size in MB for the DEBUG log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for DEBUG; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_RETENTION_BACKUP_COUNTNumber of rotated backup files kept per-level log file, excluding the live file. Applies to every level unless overridden per level. Set to 0 to keep only the live file (still capped by the rotation size). Default is 1.
CB_MCP_LOG_ERROR_RETENTION_BACKUP_COUNTRotated backups kept for the ERROR log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for ERROR; inherits it when unset.
CB_MCP_LOG_WARNING_RETENTION_BACKUP_COUNTRotated backups kept for the WARNING log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for WARNING; inherits it when unset.
CB_MCP_LOG_INFO_RETENTION_BACKUP_COUNTRotated backups kept for the INFO log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for INFO; inherits it when unset.
CB_MCP_LOG_DEBUG_RETENTION_BACKUP_COUNTRotated backups kept for the DEBUG log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for DEBUG; inherits it when unset.
CB_MCP_OAUTH_JWT_JWKS_URIJWKS endpoint of the identity provider used to verify bearer JWT signatures. Required to enable OAuth, along with CB_MCP_OAUTH_JWT_ISSUER and CB_MCP_OAUTH_JWT_AUDIENCE. Only honored when CB_MCP_TRANSPORT=http.
CB_MCP_OAUTH_JWT_ISSUERExpected JWT 'iss' claim value. Also advertised as the authorization server in Protected Resource Metadata when CB_MCP_OAUTH_MCP_BASE_URL is set. Required to enable OAuth.
CB_MCP_OAUTH_JWT_AUDIENCEExpected JWT 'aud' claim value. Required to enable OAuth.
CB_MCP_OAUTH_JWT_ALGORITHMJWT signing algorithm. One of RS256/384/512, ES256/384/512, PS256/384/512. Default is RS256.
CB_MCP_OAUTH_MCP_BASE_URLPublic base URL of this MCP server. When set, the server publishes RFC 9728 Protected Resource Metadata at <base_url>/.well-known/oauth-protected-resource/mcp so PRM-aware clients can discover the authorization server. Optional.
CB_MCP_OAUTH_SCOPE_READ_LABELOverride the OAuth scope label the server treats as 'read' access; advertised in PRM and matched against the token's scope/scp claim. Use when your IdP cannot emit the canonical form. Default is couchbase-mcp:read.
CB_MCP_OAUTH_SCOPE_WRITE_LABELOverride the OAuth scope label the server treats as 'write' access; same semantics as CB_MCP_OAUTH_SCOPE_READ_LABEL. Default is couchbase-mcp:write.
CB_MCP_AUDIT_LOG_ENABLEDEnable audit logging. Audit output is a separate sink from the CB_MCP_LOG_* operational logs, with a stable schema, its own retention, and events that cannot be filtered out. Default is false.
CB_MCP_AUDIT_LOG_SINKSComma-separated audit destinations: console, file, or both. 'console' writes to stderr, never stdout, because stdout carries the JSON-RPC protocol under the stdio transport. Default is console.
CB_MCP_EMBEDDING_MODEL_PROVIDEREmbedding provider for run_vector_query / run_vector_search: one of capella, openai, cohere, voyage, bedrock. Unset disables both tools' embedding step until configured.
CB_MCP_AUDIT_LOG_FILE_PATHPath to the audit log file, required when 'file' is in CB_MCP_AUDIT_LOG_SINKS. Each server process writes its own file with the host and process id inserted before the extension (audit.log becomes audit.myhost.1234.log), because a stdio deployment runs one process per client. If the path is missing the server still starts, with the file sink dropped and an error recorded.
CB_MCP_AUDIT_LOG_ROTATION_MAX_SIZE_MBMaximum size in MB the live audit file may reach before it rotates. 0 turns size-based rotation off. Default is 10 MB.
CB_MCP_AUDIT_LOG_ROTATION_INTERVALAge the live audit file may reach before it rotates, as <value><unit> where the unit is 'd' (24 hours) or 'w' (7 days) - for example 1d, 30d, 1w, 8w. 0 turns interval-based rotation off. Size and interval are independent: whichever falls due first rotates the file. Default is 1d.
CB_MCP_EMBEDDING_MODELModel name/ID for the configured embedding provider.
CB_MCP_AUDIT_LOG_RETENTION_MAX_BACKUPSNumber of rotated audit files retained, excluding the live file. Rotated files are gzipped and named with the UTC rotation time. Set to 0 to keep no backups: the live file is truncated at each rotation. Default is 10.
CB_MCP_AUDIT_LOG_TOOL_ARGSRecord tool argument values in the audit log. Off by default: there is no redaction in this release, so enabling this writes arguments verbatim, including the full document bodies passed to document-write tools. Review the audit file's retention and access controls before enabling it.
CB_MCP_AUDIT_LOG_DISABLED_EVENTSAudit events to suppress, as comma-separated numeric event ids (for example '61490,61492'), or a path to a file with one id per line. Ids are listed in the audit descriptor shipped with the package. Only filterable events can be suppressed: write and security events are always recorded, and an attempt to disable one is refused with a warning.
CB_MCP_EMBEDDING_MODEL_API_KEYsecretAPI key for the configured embedding provider. Not used by bedrock (uses the AWS credential chain / CB_MCP_EMBEDDING_MODEL_AWS_* instead).
CB_MCP_EMBEDDING_MODEL_ENDPOINTBase URL override for the configured embedding provider (e.g. an OpenAI-compatible local server, or a Capella Model Service deployment's own URL). Required when CB_MCP_EMBEDDING_MODEL_PROVIDER=capella.
CB_MCP_EMBEDDING_MODEL_AWS_ACCESS_KEY_IDsecretAWS access key ID, bedrock provider only. Omit to use the default AWS credential chain.
CB_MCP_EMBEDDING_MODEL_AWS_SECRET_ACCESS_KEYsecretAWS secret access key, bedrock provider only.
CB_MCP_EMBEDDING_MODEL_AWS_REGIONAWS region, bedrock provider only. Falls back to the AWS SDK's own region resolution if unset.
CB_OPERATIONAL_INSIGHTS_CONNECTION_STRINGOperational Insights (Enterprise Analytics) endpoint URL, e.g. http://localhost:8095 (local) or https://<host>:18095 (Capella). An HTTP(S) URL, not a couchbase:// connection string.
CB_OPERATIONAL_INSIGHTS_USERNAMEOperational Insights database username. Required for basic authentication.
CB_OPERATIONAL_INSIGHTS_PASSWORDsecretOperational Insights database password. Required for basic authentication.
CB_OPERATIONAL_INSIGHTS_CA_CERT_PATHOperational Insights CA certificate (trust store) path, used to verify the server certificate over https://.
CB_OPERATIONAL_INSIGHTS_CLIENT_CERT_PATHClient certificate path for mTLS: a PEM certificate (paired with the client key path) or a PKCS#12 bundle (.p12/.pfx). Requires an https:// connection string. When set, username/password are ignored.
CB_OPERATIONAL_INSIGHTS_CLIENT_KEY_PATHClient private key path (PEM) for mTLS. Leave unset when the client certificate is a PKCS#12 bundle that already contains the key.
CB_OPERATIONAL_INSIGHTS_CLIENT_CERT_PASSWORDsecretDecryption password for the client key or PKCS#12 bundle, if it is encrypted. Omit if the file is unencrypted.
CB_MCP_OPERATIONAL_INSIGHTS_ASYNC_QUERY_RESULT_TIMEOUTTimeout in seconds for each async query request (start, status, fetch, discard, cancel). For a fetch it covers the whole download, so a result that takes longer than this to read fails. Positive integer, maximum 600; larger values are clamped to 600 with a warning, and any other invalid value is logged as a warning and the default is used. Default is 30.
CB_MCP_READ_ONLY_MODEOperational Insights read only mode. Set to true to disable write operations: the operational_insights_create_index and operational_insights_cancel_async_query tools are not loaded, and queries that modify data are blocked. Set to false to allow them. Default is true.
CB_MCP_TRANSPORTTransport mode for the server (stdio, http or sse). Default is stdio. OAuth is only honored with http.
CB_MCP_HOSTHost to run the MCP server on (default: 127.0.0.1). Used only for HTTP and SSE transport modes.
CB_MCP_PORTPort to run the MCP server on (default: 8001). Used only for HTTP and SSE transport modes.
CB_MCP_STATELESS_HTTPHandle each HTTP request without per-session state (default: true when workers > 1, otherwise false). Only honored with the http transport; cannot be combined with CB_MCP_CONFIRMATION_REQUIRED_TOOLS.
CB_MCP_DISABLED_TOOLSTools to disable. Accepts comma-separated tool names (e.g., 'tool_1,tool_2') or a file path containing one tool name per line.
CB_MCP_CONFIRMATION_REQUIRED_TOOLSComma-separated tool names that require user confirmation before execution. Also accepts a file path containing one tool name per line. Requires the MCP client to support elicitation.
CB_MCP_LOG_LEVELLogging level for the MCP server. One of off, debug, info, warning, error. Use 'off' to disable logging entirely. Invalid values fall back to info. Default is info.
CB_MCP_LOG_SINKSComma-separated list of log destinations. Allowed values: stderr, file. Include 'file' to write per-level log files; include 'stderr' to write to the console. Default is stderr.
CB_MCP_LOG_FILEBase path for the per-level log files. One rotating file is written per level (e.g. mcp_server_operational_insights.info.log, mcp_server_operational_insights.error.log). Only used when 'file' is in CB_MCP_LOG_SINKS. Default is mcp_server_operational_insights.log.
CB_MCP_LOG_ROTATION_MAX_SIZE_MBGlobal maximum size in MB per-level log file before it rotates, inherited by every level unless overridden by a per-level CB_MCP_LOG_<LEVEL>_ROTATION_MAX_SIZE_MB. A value of 0 is invalid and falls back to the default (1 MB) with a startup warning. Default is 1 (1 MB).
CB_MCP_LOG_MAX_BYTES[DEPRECATED] Global rotation size in bytes; use CB_MCP_LOG_ROTATION_MAX_SIZE_MB (MB) instead. Still honored for backward compatibility but ignored when CB_MCP_LOG_ROTATION_MAX_SIZE_MB is also set. A value of 0 is invalid and falls back to the default with a startup warning.
CB_MCP_LOG_ERROR_ROTATION_MAX_SIZE_MBRotation size in MB for the ERROR log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for ERROR; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_WARNING_ROTATION_MAX_SIZE_MBRotation size in MB for the WARNING log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for WARNING; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_INFO_ROTATION_MAX_SIZE_MBRotation size in MB for the INFO log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for INFO; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_DEBUG_ROTATION_MAX_SIZE_MBRotation size in MB for the DEBUG log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for DEBUG; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_RETENTION_BACKUP_COUNTNumber of rotated backup files kept per-level log file, excluding the live file. Applies to every level unless overridden per level. Set to 0 to keep only the live file (still capped by the rotation size). Default is 1.
CB_MCP_LOG_ERROR_RETENTION_BACKUP_COUNTRotated backups kept for the ERROR log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for ERROR; inherits it when unset.
CB_MCP_LOG_WARNING_RETENTION_BACKUP_COUNTRotated backups kept for the WARNING log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for WARNING; inherits it when unset.
CB_MCP_LOG_INFO_RETENTION_BACKUP_COUNTRotated backups kept for the INFO log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for INFO; inherits it when unset.
CB_MCP_LOG_DEBUG_RETENTION_BACKUP_COUNTRotated backups kept for the DEBUG log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for DEBUG; inherits it when unset.
CB_MCP_AUDIT_LOG_ENABLEDEnable audit logging. Audit output is a separate sink from the CB_MCP_LOG_* operational logs, with a stable schema, its own retention, and events that cannot be filtered out. Default is false. This server emits audit records under its own event block, 0x10000 (65536), so an event id names the server that produced it.
CB_MCP_AUDIT_LOG_SINKSComma-separated audit destinations: console, file, or both. 'console' writes to stderr, never stdout, because stdout carries the JSON-RPC protocol under the stdio transport. Default is console.
CB_MCP_AUDIT_LOG_FILE_PATHPath to the audit log file, required when 'file' is in CB_MCP_AUDIT_LOG_SINKS. Each server process writes its own file with the host and process id inserted before the extension (audit.log becomes audit.myhost.1234.log), because a stdio deployment runs one process per client. If the path is missing the server still starts, with the file sink dropped and an error recorded.
CB_MCP_AUDIT_LOG_ROTATION_MAX_SIZE_MBMaximum size in MB the live audit file may reach before it rotates. 0 turns size-based rotation off. Default is 10 MB.
CB_MCP_AUDIT_LOG_ROTATION_INTERVALAge the live audit file may reach before it rotates, as <value><unit> where the unit is 'd' (24 hours) or 'w' (7 days) - for example 1d, 30d, 1w, 8w. 0 turns interval-based rotation off. Size and interval are independent: whichever falls due first rotates the file. Default is 1d.
CB_MCP_AUDIT_LOG_RETENTION_MAX_BACKUPSNumber of rotated audit files retained, excluding the live file. Rotated files are gzipped and named with the UTC rotation time. Set to 0 to keep no backups: the live file is truncated at each rotation. Default is 10.
CB_MCP_AUDIT_LOG_TOOL_ARGSRecord tool argument values in the audit log. Off by default: there is no redaction in this release, so enabling this writes arguments verbatim, including the full document bodies passed to document-write tools. Review the audit file's retention and access controls before enabling it.
CB_MCP_AUDIT_LOG_DISABLED_EVENTSAudit events to suppress, as comma-separated numeric event ids (for example '61490,61492'), or a path to a file with one id per line. Ids are listed in the audit descriptor shipped with the package. Only filterable events can be suppressed: write and security events are always recorded, and an attempt to disable one is refused with a warning.
CB_MCP_OAUTH_JWT_JWKS_URIJWKS endpoint of the identity provider used to verify bearer JWT signatures. Required to enable OAuth, along with CB_MCP_OAUTH_JWT_ISSUER and CB_MCP_OAUTH_JWT_AUDIENCE. Only honored when CB_MCP_TRANSPORT=http.
CB_MCP_OAUTH_JWT_ISSUERExpected JWT 'iss' claim value. Also advertised as the authorization server in Protected Resource Metadata when CB_MCP_OAUTH_MCP_BASE_URL is set. Required to enable OAuth.
CB_MCP_OAUTH_JWT_AUDIENCEExpected JWT 'aud' claim value. Required to enable OAuth.
CB_MCP_OAUTH_JWT_ALGORITHMJWT signing algorithm. One of RS256/384/512, ES256/384/512, PS256/384/512. Default is RS256.
CB_MCP_OAUTH_MCP_BASE_URLPublic base URL of this MCP server. When set, the server publishes RFC 9728 Protected Resource Metadata at <base_url>/.well-known/oauth-protected-resource/mcp so PRM-aware clients can discover the authorization server. Optional.
CB_MCP_OAUTH_SCOPE_READ_LABELOverride the OAuth scope label the server treats as 'read' access; advertised in PRM and matched against the token's scope/scp claim. Use when your IdP cannot emit the canonical form. Default is couchbase-mcp:read.
CB_MCP_OAUTH_SCOPE_WRITE_LABELOverride the OAuth scope label the server treats as 'write' access; same semantics as CB_MCP_OAUTH_SCOPE_READ_LABEL. Default is couchbase-mcp:write.
CB_CONNECTION_STRINGCouchbase connection string. Required for connecting to the cluster.
CB_USERNAMECouchbase database username. Required for basic authentication.
CB_PASSWORDsecretCouchbase database password. Required for basic authentication.
CB_CA_CERT_PATHCouchbase CA certificate path. Required for TLS authentication in non Capella clusters.
CB_CLIENT_CERT_PATHCouchbase client certificate path. Required for mTLS authentication.
CB_CLIENT_KEY_PATHCouchbase client key path. Required for mTLS authentication.
CB_MCP_READ_ONLY_MODECouchbase read only mode. Set to true to disable write operations: KV document, scope/collection and index write tools are not loaded, and SQL++ queries that modify data are blocked. Set to false to allow them. Default is true.
CB_MCP_TRANSPORTTransport mode for the server (stdio, http or sse). Default is stdio. OAuth is only honored with http.
CB_MCP_HOSTHost to run the MCP server on (default: 127.0.0.1). Used only for HTTP and SSE transport modes.
CB_MCP_PORTPort to run the MCP server on (default: 8000). Used only for HTTP and SSE transport modes.
CB_MCP_WORKERSNumber of server worker processes (default: 1). Values above 1 use more CPU cores, require the http transport, run in stateless HTTP mode, and cannot be combined with CB_MCP_CONFIRMATION_REQUIRED_TOOLS. Each worker writes log files named with the host and process id.
CB_MCP_STATELESS_HTTPHandle each HTTP request without per-session state (default: true when workers > 1, otherwise false). Only honored with the http transport; cannot be combined with CB_MCP_CONFIRMATION_REQUIRED_TOOLS.
CB_MCP_DISABLED_TOOLSTools to disable. Accepts comma-separated tool names (e.g., 'tool_1,tool_2') or a file path containing one tool name per line.
CB_MCP_CONFIRMATION_REQUIRED_TOOLSComma-separated tool names that require user confirmation before execution. Also accepts a file path containing one tool name per line. Requires the MCP client to support elicitation.
CB_MCP_LOG_LEVELLogging level for the MCP server. One of off, debug, info, warning, error. Use 'off' to disable logging entirely. Invalid values fall back to info. Default is info.
CB_MCP_LOG_SINKSComma-separated list of log destinations. Allowed values: stderr, file. Include 'file' to write per-level log files; include 'stderr' to write to the console. Default is stderr.
CB_MCP_LOG_FILEBase path for the per-level log files. One rotating file is written per level (e.g. mcp_server.info.log, mcp_server.error.log). Only used when 'file' is in CB_MCP_LOG_SINKS. Default is mcp_server.log.
CB_MCP_LOG_ROTATION_MAX_SIZE_MBGlobal maximum size in MB per-level log file before it rotates, inherited by every level unless overridden by a per-level CB_MCP_LOG_<LEVEL>_ROTATION_MAX_SIZE_MB. A value of 0 is invalid and falls back to the default (1 MB) with a startup warning. Default is 1 (1 MB).
CB_MCP_LOG_MAX_BYTES[DEPRECATED] Global rotation size in bytes; use CB_MCP_LOG_ROTATION_MAX_SIZE_MB (MB) instead. Still honored for backward compatibility but ignored when CB_MCP_LOG_ROTATION_MAX_SIZE_MB is also set. A value of 0 is invalid and falls back to the default with a startup warning.
CB_MCP_LOG_ERROR_ROTATION_MAX_SIZE_MBRotation size in MB for the ERROR log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for ERROR; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_WARNING_ROTATION_MAX_SIZE_MBRotation size in MB for the WARNING log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for WARNING; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_INFO_ROTATION_MAX_SIZE_MBRotation size in MB for the INFO log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for INFO; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_DEBUG_ROTATION_MAX_SIZE_MBRotation size in MB for the DEBUG log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for DEBUG; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_RETENTION_BACKUP_COUNTNumber of rotated backup files kept per-level log file, excluding the live file. Applies to every level unless overridden per level. Set to 0 to keep only the live file (still capped by the rotation size). Default is 1.
CB_MCP_LOG_ERROR_RETENTION_BACKUP_COUNTRotated backups kept for the ERROR log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for ERROR; inherits it when unset.
CB_MCP_LOG_WARNING_RETENTION_BACKUP_COUNTRotated backups kept for the WARNING log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for WARNING; inherits it when unset.
CB_MCP_LOG_INFO_RETENTION_BACKUP_COUNTRotated backups kept for the INFO log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for INFO; inherits it when unset.
CB_MCP_LOG_DEBUG_RETENTION_BACKUP_COUNTRotated backups kept for the DEBUG log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for DEBUG; inherits it when unset.
CB_MCP_OAUTH_JWT_JWKS_URIJWKS endpoint of the identity provider used to verify bearer JWT signatures. Required to enable OAuth, along with CB_MCP_OAUTH_JWT_ISSUER and CB_MCP_OAUTH_JWT_AUDIENCE. Only honored when CB_MCP_TRANSPORT=http.
CB_MCP_OAUTH_JWT_ISSUERExpected JWT 'iss' claim value. Also advertised as the authorization server in Protected Resource Metadata when CB_MCP_OAUTH_MCP_BASE_URL is set. Required to enable OAuth.
CB_MCP_OAUTH_JWT_AUDIENCEExpected JWT 'aud' claim value. Required to enable OAuth.
CB_MCP_OAUTH_JWT_ALGORITHMJWT signing algorithm. One of RS256/384/512, ES256/384/512, PS256/384/512. Default is RS256.
CB_MCP_OAUTH_MCP_BASE_URLPublic base URL of this MCP server. When set, the server publishes RFC 9728 Protected Resource Metadata at <base_url>/.well-known/oauth-protected-resource/mcp so PRM-aware clients can discover the authorization server. Optional.
CB_MCP_OAUTH_SCOPE_READ_LABELOverride the OAuth scope label the server treats as 'read' access; advertised in PRM and matched against the token's scope/scp claim. Use when your IdP cannot emit the canonical form. Default is couchbase-mcp:read.
CB_MCP_OAUTH_SCOPE_WRITE_LABELOverride the OAuth scope label the server treats as 'write' access; same semantics as CB_MCP_OAUTH_SCOPE_READ_LABEL. Default is couchbase-mcp:write.
CB_MCP_AUDIT_LOG_ENABLEDEnable audit logging. Audit output is a separate sink from the CB_MCP_LOG_* operational logs, with a stable schema, its own retention, and events that cannot be filtered out. Default is false.
CB_MCP_AUDIT_LOG_SINKSComma-separated audit destinations: console, file, or both. 'console' writes to stderr, never stdout, because stdout carries the JSON-RPC protocol under the stdio transport. Default is console.
CB_MCP_EMBEDDING_MODEL_PROVIDEREmbedding provider for run_vector_query / run_vector_search: one of capella, openai, cohere, voyage, bedrock. Unset disables both tools' embedding step until configured.
CB_MCP_AUDIT_LOG_FILE_PATHPath to the audit log file, required when 'file' is in CB_MCP_AUDIT_LOG_SINKS. Each server process writes its own file with the host and process id inserted before the extension (audit.log becomes audit.myhost.1234.log), because a stdio deployment runs one process per client. If the path is missing the server still starts, with the file sink dropped and an error recorded.
CB_MCP_AUDIT_LOG_ROTATION_MAX_SIZE_MBMaximum size in MB the live audit file may reach before it rotates. 0 turns size-based rotation off. Default is 10 MB.
CB_MCP_AUDIT_LOG_ROTATION_INTERVALAge the live audit file may reach before it rotates, as <value><unit> where the unit is 'd' (24 hours) or 'w' (7 days) - for example 1d, 30d, 1w, 8w. 0 turns interval-based rotation off. Size and interval are independent: whichever falls due first rotates the file. Default is 1d.
CB_MCP_EMBEDDING_MODELModel name/ID for the configured embedding provider.
CB_MCP_AUDIT_LOG_RETENTION_MAX_BACKUPSNumber of rotated audit files retained, excluding the live file. Rotated files are gzipped and named with the UTC rotation time. Set to 0 to keep no backups: the live file is truncated at each rotation. Default is 10.
CB_MCP_AUDIT_LOG_TOOL_ARGSRecord tool argument values in the audit log. Off by default: there is no redaction in this release, so enabling this writes arguments verbatim, including the full document bodies passed to document-write tools. Review the audit file's retention and access controls before enabling it.
CB_MCP_AUDIT_LOG_DISABLED_EVENTSAudit events to suppress, as comma-separated numeric event ids (for example '61490,61492'), or a path to a file with one id per line. Ids are listed in the audit descriptor shipped with the package. Only filterable events can be suppressed: write and security events are always recorded, and an attempt to disable one is refused with a warning.
CB_MCP_EMBEDDING_MODEL_API_KEYsecretAPI key for the configured embedding provider. Not used by bedrock (uses the AWS credential chain / CB_MCP_EMBEDDING_MODEL_AWS_* instead).
CB_MCP_EMBEDDING_MODEL_ENDPOINTBase URL override for the configured embedding provider (e.g. an OpenAI-compatible local server, or a Capella Model Service deployment's own URL). Required when CB_MCP_EMBEDDING_MODEL_PROVIDER=capella.
CB_MCP_EMBEDDING_MODEL_AWS_ACCESS_KEY_IDsecretAWS access key ID, bedrock provider only. Omit to use the default AWS credential chain.
CB_MCP_EMBEDDING_MODEL_AWS_SECRET_ACCESS_KEYsecretAWS secret access key, bedrock provider only.
CB_MCP_EMBEDDING_MODEL_AWS_REGIONAWS region, bedrock provider only. Falls back to the AWS SDK's own region resolution if unset.
CB_OPERATIONAL_INSIGHTS_CONNECTION_STRINGOperational Insights (Enterprise Analytics) endpoint URL, e.g. http://localhost:8095 (local) or https://<host>:18095 (Capella). An HTTP(S) URL, not a couchbase:// connection string.
CB_OPERATIONAL_INSIGHTS_USERNAMEOperational Insights database username. Required for basic authentication.
CB_OPERATIONAL_INSIGHTS_PASSWORDsecretOperational Insights database password. Required for basic authentication.
CB_OPERATIONAL_INSIGHTS_CA_CERT_PATHOperational Insights CA certificate (trust store) path, used to verify the server certificate over https://.
CB_OPERATIONAL_INSIGHTS_CLIENT_CERT_PATHClient certificate path for mTLS: a PEM certificate (paired with the client key path) or a PKCS#12 bundle (.p12/.pfx). Requires an https:// connection string. When set, username/password are ignored.
CB_OPERATIONAL_INSIGHTS_CLIENT_KEY_PATHClient private key path (PEM) for mTLS. Leave unset when the client certificate is a PKCS#12 bundle that already contains the key.
CB_OPERATIONAL_INSIGHTS_CLIENT_CERT_PASSWORDsecretDecryption password for the client key or PKCS#12 bundle, if it is encrypted. Omit if the file is unencrypted.
CB_MCP_OPERATIONAL_INSIGHTS_ASYNC_QUERY_RESULT_TIMEOUTTimeout in seconds for each async query request (start, status, fetch, discard, cancel). For a fetch it covers the whole download, so a result that takes longer than this to read fails. Positive integer, maximum 600; larger values are clamped to 600 with a warning, and any other invalid value is logged as a warning and the default is used. Default is 30.
CB_MCP_READ_ONLY_MODEOperational Insights read only mode. Set to true to disable write operations: the operational_insights_create_index and operational_insights_cancel_async_query tools are not loaded, and queries that modify data are blocked. Set to false to allow them. Default is true.
CB_MCP_TRANSPORTTransport mode for the server (stdio, http or sse). Default is stdio. OAuth is only honored with http.
CB_MCP_HOSTHost to run the MCP server on (default: 127.0.0.1). Used only for HTTP and SSE transport modes.
CB_MCP_PORTPort to run the MCP server on (default: 8001). Used only for HTTP and SSE transport modes.
CB_MCP_STATELESS_HTTPHandle each HTTP request without per-session state (default: true when workers > 1, otherwise false). Only honored with the http transport; cannot be combined with CB_MCP_CONFIRMATION_REQUIRED_TOOLS.
CB_MCP_DISABLED_TOOLSTools to disable. Accepts comma-separated tool names (e.g., 'tool_1,tool_2') or a file path containing one tool name per line.
CB_MCP_CONFIRMATION_REQUIRED_TOOLSComma-separated tool names that require user confirmation before execution. Also accepts a file path containing one tool name per line. Requires the MCP client to support elicitation.
CB_MCP_LOG_LEVELLogging level for the MCP server. One of off, debug, info, warning, error. Use 'off' to disable logging entirely. Invalid values fall back to info. Default is info.
CB_MCP_LOG_SINKSComma-separated list of log destinations. Allowed values: stderr, file. Include 'file' to write per-level log files; include 'stderr' to write to the console. Default is stderr.
CB_MCP_LOG_FILEBase path for the per-level log files. One rotating file is written per level (e.g. mcp_server_operational_insights.info.log, mcp_server_operational_insights.error.log). Only used when 'file' is in CB_MCP_LOG_SINKS. Default is mcp_server_operational_insights.log.
CB_MCP_LOG_ROTATION_MAX_SIZE_MBGlobal maximum size in MB per-level log file before it rotates, inherited by every level unless overridden by a per-level CB_MCP_LOG_<LEVEL>_ROTATION_MAX_SIZE_MB. A value of 0 is invalid and falls back to the default (1 MB) with a startup warning. Default is 1 (1 MB).
CB_MCP_LOG_MAX_BYTES[DEPRECATED] Global rotation size in bytes; use CB_MCP_LOG_ROTATION_MAX_SIZE_MB (MB) instead. Still honored for backward compatibility but ignored when CB_MCP_LOG_ROTATION_MAX_SIZE_MB is also set. A value of 0 is invalid and falls back to the default with a startup warning.
CB_MCP_LOG_ERROR_ROTATION_MAX_SIZE_MBRotation size in MB for the ERROR log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for ERROR; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_WARNING_ROTATION_MAX_SIZE_MBRotation size in MB for the WARNING log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for WARNING; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_INFO_ROTATION_MAX_SIZE_MBRotation size in MB for the INFO log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for INFO; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_DEBUG_ROTATION_MAX_SIZE_MBRotation size in MB for the DEBUG log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for DEBUG; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.
CB_MCP_LOG_RETENTION_BACKUP_COUNTNumber of rotated backup files kept per-level log file, excluding the live file. Applies to every level unless overridden per level. Set to 0 to keep only the live file (still capped by the rotation size). Default is 1.
CB_MCP_LOG_ERROR_RETENTION_BACKUP_COUNTRotated backups kept for the ERROR log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for ERROR; inherits it when unset.
CB_MCP_LOG_WARNING_RETENTION_BACKUP_COUNTRotated backups kept for the WARNING log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for WARNING; inherits it when unset.
CB_MCP_LOG_INFO_RETENTION_BACKUP_COUNTRotated backups kept for the INFO log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for INFO; inherits it when unset.
CB_MCP_LOG_DEBUG_RETENTION_BACKUP_COUNTRotated backups kept for the DEBUG log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for DEBUG; inherits it when unset.
CB_MCP_AUDIT_LOG_ENABLEDEnable audit logging. Audit output is a separate sink from the CB_MCP_LOG_* operational logs, with a stable schema, its own retention, and events that cannot be filtered out. Default is false. This server emits audit records under its own event block, 0x10000 (65536), so an event id names the server that produced it.
CB_MCP_AUDIT_LOG_SINKSComma-separated audit destinations: console, file, or both. 'console' writes to stderr, never stdout, because stdout carries the JSON-RPC protocol under the stdio transport. Default is console.
CB_MCP_AUDIT_LOG_FILE_PATHPath to the audit log file, required when 'file' is in CB_MCP_AUDIT_LOG_SINKS. Each server process writes its own file with the host and process id inserted before the extension (audit.log becomes audit.myhost.1234.log), because a stdio deployment runs one process per client. If the path is missing the server still starts, with the file sink dropped and an error recorded.
CB_MCP_AUDIT_LOG_ROTATION_MAX_SIZE_MBMaximum size in MB the live audit file may reach before it rotates. 0 turns size-based rotation off. Default is 10 MB.
CB_MCP_AUDIT_LOG_ROTATION_INTERVALAge the live audit file may reach before it rotates, as <value><unit> where the unit is 'd' (24 hours) or 'w' (7 days) - for example 1d, 30d, 1w, 8w. 0 turns interval-based rotation off. Size and interval are independent: whichever falls due first rotates the file. Default is 1d.
CB_MCP_AUDIT_LOG_RETENTION_MAX_BACKUPSNumber of rotated audit files retained, excluding the live file. Rotated files are gzipped and named with the UTC rotation time. Set to 0 to keep no backups: the live file is truncated at each rotation. Default is 10.
CB_MCP_AUDIT_LOG_TOOL_ARGSRecord tool argument values in the audit log. Off by default: there is no redaction in this release, so enabling this writes arguments verbatim, including the full document bodies passed to document-write tools. Review the audit file's retention and access controls before enabling it.
CB_MCP_AUDIT_LOG_DISABLED_EVENTSAudit events to suppress, as comma-separated numeric event ids (for example '61490,61492'), or a path to a file with one id per line. Ids are listed in the audit descriptor shipped with the package. Only filterable events can be suppressed: write and security events are always recorded, and an attempt to disable one is refused with a warning.
CB_MCP_OAUTH_JWT_JWKS_URIJWKS endpoint of the identity provider used to verify bearer JWT signatures. Required to enable OAuth, along with CB_MCP_OAUTH_JWT_ISSUER and CB_MCP_OAUTH_JWT_AUDIENCE. Only honored when CB_MCP_TRANSPORT=http.
CB_MCP_OAUTH_JWT_ISSUERExpected JWT 'iss' claim value. Also advertised as the authorization server in Protected Resource Metadata when CB_MCP_OAUTH_MCP_BASE_URL is set. Required to enable OAuth.
CB_MCP_OAUTH_JWT_AUDIENCEExpected JWT 'aud' claim value. Required to enable OAuth.
CB_MCP_OAUTH_JWT_ALGORITHMJWT signing algorithm. One of RS256/384/512, ES256/384/512, PS256/384/512. Default is RS256.
CB_MCP_OAUTH_MCP_BASE_URLPublic base URL of this MCP server. When set, the server publishes RFC 9728 Protected Resource Metadata at <base_url>/.well-known/oauth-protected-resource/mcp so PRM-aware clients can discover the authorization server. Optional.
CB_MCP_OAUTH_SCOPE_READ_LABELOverride the OAuth scope label the server treats as 'read' access; advertised in PRM and matched against the token's scope/scp claim. Use when your IdP cannot emit the canonical form. Default is couchbase-mcp:read.
CB_MCP_OAUTH_SCOPE_WRITE_LABELOverride the OAuth scope label the server treats as 'write' access; same semantics as CB_MCP_OAUTH_SCOPE_READ_LABEL. Default is couchbase-mcp:write.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/couchbase-mcp-server-couchbase.svg)](https://mcp.market/server/couchbase-mcp-server-couchbase)

How the badge works