Aiven MCP Server
Official Aiven MCP server: manage PostgreSQL, Kafka, applications and other services of the cloud data platform from an agent
- 28 ★ on the repository
- Last commit
- Apache-2.0
Broad access
Why this level
- Can create, change and delete cloud services and data
- Runs write SQL and produces Kafka messages
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add mcp/aiven-mcp-serverDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Can create, change and delete cloud services and data
- Runs write SQL and produces Kafka messages
This is third-party code. Review the repository files before installing.
What it does
The server exposes the Aiven platform API to the agent. The agent can list projects and services, create and change services, and read metrics and logs. For Kafka it handles topics, messages, connectors and Schema Registry; for PostgreSQL it runs SQL, reads query statistics and manages PgBouncer pools. A read-only mode and scoping tools to pg, kafka, application or integrations groups are available.
Who it is for. For teams running databases and queues on Aiven who want to operate them through an agent.
Good fit when
- You need service status, metrics and logs from Aiven
- You need to create a Kafka topic or debug a connector
- You need to query PostgreSQL on Aiven and find slow queries
Not a fit when
- Your databases are not hosted on Aiven
- The agent must not get write access to production infrastructure
Example request
List the services in my Aiven project and find the slowest queries in the orders databaseMCP
- Transport
- stdio, http
- Authentication
- OAuth
Environment variables
AIVEN_TOKENrequired, secret- Aiven API token, needed only for local stdio runs
AIVEN_READ_ONLY- true exposes only read-only tools
AIVEN_SERVICES_SCOPE- Comma-separated tool groups: pg, kafka, application, integrations
AIVEN_ALLOW_SECRETS- true enables the tool that returns passwords and connection URIs
Limitations
Requires an Aiven account. The hosted server uses OAuth, a local run needs an AIVEN_TOKEN and Node.js 18+. The server can delete services and data, so read_only is sensible for production. Documentation search works only on the hosted server.
How to disable. Remove the server with claude mcp remove aiven-mcp or delete the aiven-mcp block from the MCP config. Revoke the token in the Aiven console.
FAQ
How do I prevent changes?
Append ?read_only=true to the hosted URL or set AIVEN_READ_ONLY=true locally. Specific write tools can be re-enabled with write_allowlist.
Will it return database passwords?
The connection credentials tool is off by default and turns on only with AIVEN_ALLOW_SECRETS.
Discussion
No questions or reviews yet.
Related
MCP serversSelf-hosted MCP server for running commands on remote servers over SSH, with tokens and roles
Official Heroku MCP server: apps, dynos, add-ons, pipelines, logs and Postgres through the Heroku CLI
Official Render MCP server: services, deploys, logs, metrics and Postgres databases on Render
Buildkite MCP Server
buildkite-mcp-server
Official Buildkite MCP server: pipelines, builds, jobs, logs and test results for the agent
Microsoft's official MCP server for Azure: the agent sees subscription resources and works with Azure services on your behalf
Azure DevOps MCP server
Azure DevOps MCP Server
Official Microsoft MCP server for Azure DevOps: work items, repositories, builds, test plans, and wiki from the agent
README in short
The README offers three options: the Aiven-hosted server with OAuth, a local run via npx mcp-aiven with a token, and building from source. For the hosted URL it documents read_only, services_scope, write_allowlist and separate paths for AWS, Azure and Google Cloud marketplace customers. It warns that agents may take destructive actions. Tools are listed by group: core, Kafka, PostgreSQL, applications and docs.