Aiven MCP Server
Official Aiven MCP server: manage PostgreSQL, Kafka, applications and other services of the cloud data platform from an agent
Install
claude mcp add --scope user --transport http aiven-mcp "https://mcp.aiven.live/mcp"Hosted server; the client will ask you to authorize on Aiven.
This is third-party code. Review the repository files before installing.
What it does
The server exposes the Aiven platform API to the agent. The agent can list projects and services, create and change services, and read metrics and logs. For Kafka it handles topics, messages, connectors and Schema Registry; for PostgreSQL it runs SQL, reads query statistics and manages PgBouncer pools. A read-only mode and scoping tools to pg, kafka, application or integrations groups are available.
Who it is for. For teams running databases and queues on Aiven who want to operate them through an agent.
Good fit when
- You need service status, metrics and logs from Aiven
- You need to create a Kafka topic or debug a connector
- You need to query PostgreSQL on Aiven and find slow queries
Not a fit when
- Your databases are not hosted on Aiven
- The agent must not get write access to production infrastructure
Example request
List the services in my Aiven project and find the slowest queries in the orders databaseLimitations
Requires an Aiven account. The hosted server uses OAuth, a local run needs an AIVEN_TOKEN and Node.js 18+. The server can delete services and data, so read_only is sensible for production. Documentation search works only on the hosted server.
How to disable. Remove the server with claude mcp remove aiven-mcp or delete the aiven-mcp block from the MCP config. Revoke the token in the Aiven console.
MCP
- Transport
- stdio, http
- Authentication
- OAuth
| Environment variables | |
|---|---|
| AIVEN_TOKEN required, secret | Aiven API token, needed only for local stdio runs |
| AIVEN_READ_ONLY | true exposes only read-only tools |
| AIVEN_SERVICES_SCOPE | Comma-separated tool groups: pg, kafka, application, integrations |
| AIVEN_ALLOW_SECRETS | true enables the tool that returns passwords and connection URIs |
Security check
- Can create, change and delete cloud services and data
- Runs write SQL and produces Kafka messages
README in short
The README offers three options: the Aiven-hosted server with OAuth, a local run via npx mcp-aiven with a token, and building from source. For the hosted URL it documents read_only, services_scope, write_allowlist and separate paths for AWS, Azure and Google Cloud marketplace customers. It warns that agents may take destructive actions. Tools are listed by group: core, Kafka, PostgreSQL, applications and docs.
FAQ
How do I prevent changes?
Append ?read_only=true to the hosted URL or set AIVEN_READ_ONLY=true locally. Specific write tools can be re-enabled with write_allowlist.
Will it return database passwords?
The connection credentials tool is off by default and turns on only with AIVEN_ALLOW_SECRETS.
Related
An MCP server built into the Netdata agent: metrics, logs, alerts and live process, service and container data for an AI assistant
GitHub's official MCP server: code, issues, pull requests, Actions and security alerts straight from the agent
AWS's official MCP server suite: docs, IaC, containers, serverless, databases, cost and monitoring
A GitHub Action that runs Claude Code in pull requests and issues: answers mentions, reviews and makes changes