MCP Aiven

What Aiven-Open/mcp-aiven MCP server does

Aiven-Open/mcp-aiven MCP server connects MCP-compatible clients with the Aiven cloud data platform. Its project and service tools can list projects, inspect project details, view available clouds and VPCs, enumerate services, compare service plans, check plan pricing, and create or update services. Service updates include plan, configuration, and power-state changes.

The server also exposes operational information for managed data and application services. Agents can fetch service metrics, application metrics, service logs, project event logs, and current queries for a service. The listed service types include PostgreSQL, Apache Kafka, ClickHouse, and OpenSearch, while the detailed Kafka tools cover topic and connector operations.

How it works

Aiven-Open/mcp-aiven MCP server can run as a hosted HTTP MCP endpoint at https://mcp.aiven.live/mcp, or locally as a child process using stdio. In remote mode, the MCP client authorizes with Aiven and sends a bearer token with requests. In local stdio mode, the process uses an Aiven API token supplied through AIVEN_TOKEN.

Remote deployments support query parameters that change the exposed tool surface. read_only=true removes write operations, while services_scope can limit tools to areas such as Kafka, PostgreSQL, applications, integrations, or core discovery. A write allowlist can selectively restore named write tools in read-only mode. Marketplace users can use AWS, Azure, or Google Cloud marketplace path segments for sign-in.

Setup and configuration

For local use, the documented package command is npx -y mcp-aiven, with Node.js 18 or later and AIVEN_TOKEN configured in the MCP client. The hosted endpoint can be added as an HTTP server in supported client configuration. Cursor and VS Code configuration examples are provided, and Claude Code has a command-line setup example.

Useful local environment settings include AIVEN_READ_ONLY, AIVEN_SERVICES_SCOPE, AIVEN_WRITE_ALLOWLIST, and AIVEN_ALLOW_SECRETS. The last option enables a connection-information tool that can return live credentials, passwords, connection URIs, and certificates; it is disabled in read-only mode. HTTP deployments can also configure the host, transport, request limits, and optional edge authentication.

Tools and capabilities

• Discover Aiven projects, clouds, VPCs, services, plans, and pricing.
• Create services and change service plans, configuration, or power state.
• Retrieve metrics, logs, event history, and active queries.
• List, create, inspect, update, and delete Kafka topics.
• Read Kafka topic messages and produce new messages.
• List, create, edit, inspect, pause, resume, and restart Kafka connectors.

Limitations and notes

Write-capable tools can create, modify, or delete services and data, including Kafka messages and topics. Access is limited by the authenticated Aiven user's permissions, but the agent may still perform consequential actions based on its interpretation of a prompt. Review proposed operations and follow organizational security procedures before using the server with production resources.

The hosted mode does not require AIVEN_TOKEN in the server environment because the client supplies a bearer token. Local mode does require the token. Enabling extra HTTP edge protection without matching Cloudflare configuration causes requests to fail, and enabling it without MCP_EDGE_AUTH_SECRET makes the process exit at startup.