Debezium MCP server
Debezium / Kafka Connect CDC connector management for AI agents — governed, secret-safe.
1 stars251 downloads/wk
Reviews
Write oneNobody has reviewed Debezium yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Debezium tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it
- Code scan27 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 2 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
How Debezium compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 89/100
- higher than 87% of 915 Security servers
- GitHub stars
- 1
- more than 60% of 587 Security servers
- Downloads a week
- 251
- more than 77% of 248 Security servers with a package
Release history: 2 versions in the registry since 2026-09-12, latest 2026-09-29, typically one every 17 days.
Install Debezium in Claude Code, Cursor or VS Code
Runs npx -y @dockndevai/mcp-debezium on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mcp-debezium -- npx -y @dockndevai/mcp-debezium
What the publisher says
From the Debezium repository's README, as published. We do not edit it. Read it on GitHub
mcp-debezium
A Model Context Protocol server for Debezium (via the Kafka Connect REST API). It lets an MCP-capable client (Claude Desktop, Claude Code, etc.) monitor and manage change-data-capture connectors — status, config, restarts, lifecycle — with behaviour controlled entirely by flags.
Safe by default: it starts read-only, can be scoped to an allowlist of connectors, protects critical connectors from mutation, redacts credentials in connector configs, and gates deletion behind an explicit opt-in.
Features
- Monitoring — worker/cluster info, connector list, plugins, per-connector config, status (with failed-task traces), and topics.
- Management — create/update, pause/resume, restart connector or a single task.
- Lifecycle — delete connectors (admin).
- Access modes — read-only → read-write → admin, layered so a mode never exposes tools above its level.
- Credential redaction — database.password and other secret-shaped config values are replaced with REDACTED before results are returned.
- Security flags — connector allowlist, protected connectors, delete gating, dry-run, and JSON audit logging (see below).
Security model
Tools
Read (read-only+): clusterinfo, listconnectors, listconnectorplugins, getconnector, getconnectorconfig, getconnectorstatus, getconnector_topics
Write (read-write+): createconnector, updateconnectorconfig, pauseconnector, resumeconnector, restartconnector, restart_task
Admin (admin): deleteconnector (needs DEBEZIUMALLOW_DELETE)
Quickstart — add to your agent
Published on npm as @dockndevai/mcp-debezium. No clone or build needed — your MCP client runs it on demand with npx. Start in read-only mode; see .env.example for every variable and docs/CLIENTS.md for the full per-client guide.
Claude Code (CLI)
claude mcp add debezium -e CONNECT_URL="http://localhost:8083" -e DEBEZIUM_MODE="read-only" -- npx -y @dockndevai/mcp-debeziumClaude Desktop · Cursor · Windsurf — same block in claudedesktopconfig.json, .cursor/mcp.json, or ~/.codeium/windsurf/mcp_config.json:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Debezium: common questions
- Is Debezium MCP server safe?
- Yes, by our scan: it is graded A (89/100). Read the Debezium safety report
- How do I install Debezium?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Debezium need an API key?
- No secret keys are declared. It reads 2 settings from the environment.
- Is Debezium maintained?
- The last commit was 33 days ago (2026-10-02). The latest release is v0.3.0.
- What can I use instead of Debezium?
- Servers from other publishers that do the same job: Skylos MCP server, MCP Safety Warden MCP server and chunk-invariance MCP server.
- How does Debezium compare with other Security MCP servers?
- safety score 89/100 (higher than 87% of 915 Security servers); github stars 1 (more than 60% of 587 Security servers); downloads a week 251 (more than 77% of 248 Security servers with a package). Full comparison.
Alternatives to Debezium
Same job from other publishers: the closest match first, then the best rated.
- SkylosDead code, security, secrets detection and code quality for Python, TypeScript, Go.not reviewedEstablishedC
- MCP Safety WardenMCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.not reviewedGrowingA
- chunk-invarianceChecks whether your streaming redactor leaks a secret split across chunks; writes a pytest for it.not reviewedGrowingA
- SafeWeaveSecurity scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.not reviewedGrowingC
MCP ZAP ServerSafe, self-hosted ZAP operator for guided AI security scans and reports.not reviewedGrowingB