# Aiven-Open/mcp-aiven [Health: Active]

**Category:** 🗄️ Databases  
**Repository:** https://github.com/Aiven-Open/mcp-aiven  
**GitHub Stars:** 28  
**npm Downloads (last month):** 1060  
**Views:** 7  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/aiven-open-mcp-aiven

## Description
Navigate your Aiven projects and interact with the PostgreSQL®, Apache Kafka®, ClickHouse® and OpenSearch® services

## Tools
Capabilities this server exposes over MCP:

- **aiven_project_list** — List projects
- **aiven_project_get** — Get project details
- **aiven_list_project_clouds** — List cloud platforms for a project
- **aiven_project_vpc_list** — List VPCs for a project
- **aiven_service_list** — List services
- **aiven_service_type_plans** — List plans with cloud availability
- **aiven_service_type_get** — Get default and available engine versions for a service type
- **aiven_service_plan_pricing** — Get pricing for a plan in a specific cloud
- **aiven_service_create** — Create a service
- **aiven_service_get** — Get service information
- **aiven_service_update** — Update a service (plan, config, power state)
- **aiven_service_metrics_fetch** — Fetch metrics for managed data services
- **aiven_service_application_metrics_get** — Fetch metrics for application services
- **aiven_project_get_service_logs** — Get service log entries
- **aiven_service_query_activity** — Fetch current queries for a service
- **aiven_project_get_event_logs** — Get project event log entries
- **aiven_kafka_topic_list** — List Kafka topics
- **aiven_kafka_topic_create** — Create a Kafka topic
- **aiven_kafka_topic_get** — Get Kafka topic info
- **aiven_kafka_topic_update** — Update a Kafka topic
- **aiven_kafka_topic_delete** — Delete a Kafka topic
- **aiven_kafka_topic_message_list** — Read messages from a Kafka topic
- **aiven_kafka_topic_message_produce** — Produce messages into a Kafka topic
- **aiven_kafka_connect_available_connectors** — List available connector types
- **aiven_kafka_connect_list** — List running connectors
- **aiven_kafka_connect_create_connector** — Create a connector
- **aiven_kafka_connect_edit_connector** — Edit a connector
- **aiven_kafka_connect_get_connector_status** — Get connector status
- **aiven_kafka_connect_pause_connector** — Pause a connector
- **aiven_kafka_connect_resume_connector** — Resume a connector
- **aiven_kafka_connect_restart_connector** — Restart a connector
- **aiven_kafka_connect_delete_connector** — Delete a connector
- **aiven_kafka_schema_registry_subjects** — List Schema Registry subjects
- **aiven_kafka_schema_registry_subject_version_get** — Get Schema Registry subject version
- **aiven_pg_service_available_extensions** — List available extensions
- **aiven_pg_service_query_statistics** — Fetch query statistics
- **aiven_pg_bouncer_create** — Create a PgBouncer connection pool
- **aiven_pg_bouncer_update** — Update a PgBouncer connection pool
- **aiven_pg_bouncer_delete** — Delete a PgBouncer connection pool
- **aiven_pg_read** — Run a read-only SQL query
- **aiven_pg_write** — Run a write SQL statement (INSERT, UPDATE, DELETE, CREATE TABLE, etc.)
- **aiven_pg_optimize_query** — AI-powered query optimization (EverSQL)
- **aiven_application_create** — Create and initially deploy a Containerfile/Dockerfile application; returns 409 if the service already exists
- **aiven_application_redeploy** — Rebuild an existing application from its configured repository without changing service configuration
- **aiven_vcs_integration_initialize** — Start the browser-based flow for connecting a GitHub account
- **aiven_vcs_integration_list** — List connected VCS (GitHub) accounts
- **aiven_vcs_integration_repository_list** — List repositories for a VCS integration
- **aiven_vcs_integration_repository_branch_list** — List repository branches and their current commit SHAs
- **aiven_vcs_integration_repository_container_manifest_files_list** — Find candidate Containerfile, Dockerfile, and Compose manifests
- **aiven_vcs_integration_repository_scan_container_manifest** — Derive candidate Aiven service configurations from a Containerfile, Dockerfile, or supported parts of a Compose file
- **aiven_docs_search** — Search the official Aiven documentation in natural language. Only available on the hosted server (`https://mcp.aiven.live/mcp`) — not exposed in self-hosted deployments.

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "mcp-aiven": {
    "command": "npx",
    "args": ["-y","mcp-aiven"],
    "env": {
      "AIVEN_TOKEN": ""
    }
  }
}
```

**Requires environment variables:** `AIVEN_TOKEN` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What Aiven-Open/mcp-aiven MCP server does

Aiven-Open/mcp-aiven MCP server gives MCP clients access to Aiven project and service operations. It supports discovery and management for Aiven-hosted PostgreSQL, Apache Kafka, applications, ClickHouse, and OpenSearch services, although the listed service-specific tools focus mainly on Kafka and core project or service operations.

Project tools list projects, retrieve project details, enumerate cloud platforms, and inspect project VPCs. Service tools list services, inspect available plans and engine versions, calculate plan pricing for a cloud, create or update services, retrieve service information, and fetch service metrics. Additional tools retrieve managed-service or application-service metrics, service logs, query activity, and project event logs.

Kafka tools cover topic creation, inspection, updates, deletion, message reads, and message production. Kafka Connect tools list connector types and running connectors, create or edit connectors, inspect connector status, and pause or resume connectors.

## How it works

Aiven-Open/mcp-aiven MCP server can run as a hosted HTTP endpoint or as a local child process using stdio. The hosted endpoint is `https://mcp.aiven.live/mcp`; the MCP client authorizes against Aiven and sends a bearer token with requests. A local installation runs through `npx` and uses an Aiven API token from the `AIVEN_TOKEN` environment variable.

The remote endpoint supports query parameters for read-only operation, service scopes, and selected write exceptions. Read-only mode removes write tools, while a write allowlist can restore named write operations such as Kafka topic creation. Service scopes limit the exposed tool set; `core` discovery is included when a scope is selected. Available scopes are `all`, `core`, `pg`, `kafka`, `application`, `integrations`, and `opensearch`. The material notes that OpenSearch currently has no dedicated tools and exposes core functionality only.

## Setup and configuration

For remote use, configure the MCP client with the hosted URL. Marketplace customers can use `/aws`, `/azure`, or `/gcp` path segments so authentication uses the corresponding marketplace console. Cursor and VS Code use MCP configuration entries, while Claude Code can add the endpoint from the command line.

For local stdio use, install Node.js 18 or newer and provide `AIVEN_TOKEN`. The package can be launched with `npx -y mcp-aiven`. Local development uses the repository build process and can start an HTTP listener on port 3000.

Useful configuration variables include `AIVEN_READ_ONLY`, `AIVEN_SERVICES_SCOPE`, `AIVEN_WRITE_ALLOWLIST`, `MCP_TRANSPORT`, and `MCP_HOST`. `AIVEN_ALLOW_SECRETS` can expose a connection-information tool containing live credentials, but it is disabled during read-only operation. HTTP deployments also support request rate-limit settings and optional edge-header protection through `EXTRA_PROTECTION` and `MCP_EDGE_AUTH_SECRET`.

## Limitations and notes

Aiven-Open/mcp-aiven MCP server can create, change, and delete services or data, including deleting Kafka topics and producing Kafka messages. Agent instructions can therefore lead to destructive actions. Access is limited by the authenticated Aiven user's permissions, but those permissions do not replace review or environment safeguards.

Enabling secret access places passwords, connection URIs, certificates, or other live connection details in the agent conversation. Avoid enabling it unless the client and surrounding policies can handle those credentials safely. HTTP deployments should also account for the documented bearer-token and Cloudflare rate-limiting layers.

_Full upstream README: https://allmcps.com/mcp/aiven-open-mcp-aiven/readme_

