Formio MCP server
Create and manage Form.io forms, resources, actions, roles, and projects from your AI agent.
7 stars147 downloads/wk
Reviews
Write oneNobody has reviewed Formio yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Formio tools (21, 7 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
action_createwrite actionCreate a new action on a form. Call action_type_get first to discover the required settings schema for the action type.
action_deletewrite actionDelete an action from a form. The action stops running on submissions immediately and is not recoverable — call action_get first if the settings may be needed again.
action_getGet a single action by ID from a form, including its handler, method, condition, and type-specific settings. Call action_list first to find the action ID.
action_listList the actions configured on a form — the server-side handlers that run when a submission is saved, such as save-to-resource, email, login, and role assignment.
action_type_getGet action type info and settings form schema. Call this before action_create to discover the required settings for the action type.
action_types_listList available action types for a form. Returns the catalog of action types the server supports.
action_updatewrite actionUpdate an existing action on a form. This is a full replacement of the action document — include every field you want to keep, and call action_get first if you do not already have it.
form_createwrite actionCreate a new form in the Form.io project mapped to the user's current working directory. IMPORTANT: Before calling this tool, use the formio-schema skill to construct a properly structured Form.io form JSON definition based on the user's requirements. The skill documents all component types, validation options, layout patterns, and conditional logic available in Form.io. New forms default to `revi
form_getFetch a single form definition from the Form.io project mapped to the user's current working directory, by form ID or path. Pass `draft: true` to fetch the form's current in-flight draft instead of the published form.
form_listList forms from the Form.io project mapped to the user's current working directory with optional filtering and pagination.
form_revision_getFetch a single immutable form revision from the Form.io project mapped to the current working directory. `version` accepts either the revision `_vid` (e.g. "3") or the revision document `_id` (24-character hex). To revert the live form to this revision, pass its `form` body to `form_update` with a `note` like `Revert to v<vid>`.
form_revisions_listList immutable published revision summaries for a single form in the Form.io project mapped to the current working directory. Returns compact revision metadata (_vid, _id, modified, user, _vnote) for the form identified by `formIdOrPath`. To inspect a specific revision body, call `form_revision_get` with the desired `_vid`. To revert the live form to a prior revision, pass that revision body to `f
form_updatewrite actionhelloSay hello — a connectivity check that confirms the server is running and reachable. Needs no Form.io project or credentials, so it is the first thing to try when other tools fail.
project_exportExport the complete template (roles, resources, forms, actions) of the Form.io project mapped to the user's current working directory as a portable JSON document. Use this to snapshot a project before importing changes.
project_getproject_importImport a template JSON into the existing Form.io project mapped to the user's current working directory, merging roles, resources, forms, and actions in one call. Use the formio-resource-planner skill to construct the template before calling this tool. WARNING: import merges into the existing project — use project_export first to snapshot.
project_setrole_createwrite actionCreate a new role in the Form.io project mapped to the user's current working directory.
role_listList all roles defined in the Form.io project mapped to the user's current working directory.
role_updatewrite actionUpdate an existing role in the Form.io project mapped to the user's current working directory. This is a full replacement — include all fields you want to preserve.
Public scan report
scanner v0.1.9 · 2026-09-19 · same rubric, same numbers if you re-run it
- Code scan109 source files scanned13/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 10 days ago15/15
- Maintainer identitynamespace and repository owner differ; GitHub account older than a year; website matches verified namespace8/10
Findings (1)
- highShell command built from a string (injection risk)
exec.shell-concatdist/auth.js: … : 'xdg-open'; exec(`${openCmd} "${loginUrl}"`, (err) => { …
Install directly
Runs npx -y @formio/mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add formio-mcp -- npx -y @formio/mcp
Formio: common questions
- Is Formio MCP server safe?
- With care: it is graded C, so read the findings first (65/100). Read the Formio safety report
- How do I install Formio?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does Formio need an API key?
- Yes. The registry entry asks for
FORMIO_API_KEY. - Is Formio maintained?
- The last commit was 10 days ago (2026-09-09). The latest release is v0.13.0.
- What can I use instead of Formio?
- Servers from other publishers that do the same job: MCP server, Agent-Native Forms MCP server and ContextStream MCP Server. Compare all Formio alternatives.
Alternatives to Formio
Same job from other publishers: the closest match first, then the best rated.
- MCPAuthorize consequential AI agent actions before executionnot reviewedEstablishedA
- not reviewedEstablishedA
- ContextStream MCP ServerProject memory, semantic code search, and grounded agent context.not reviewedEstablishedA
- Google SurfWeb, academic and code search with graph RAG, data lineage, ontology and cross-project schema links.not reviewedEstablishedB
- ProjectmemCoding agent memory — one local MCP server for every project. Warns before repeating failed fixes.not reviewedGrowingA