Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 3
- 4 1
- 3 2
- 2 0
- 1 0
Trust in production
- Trust it - 67%
- With caveats - 17%
- Wouldn't - 17%
83% would recommend this server
How reviewers scored it
- Setup & docs 4.0
- Auth experience 4.5
- Reliability 3.8
- Maintainer responsiveness 4.5
Why it got an A
This grade describes Aiven's own open-source server (Aiven-Open/mcp-aiven, Apache-2.0, npm mcp-aiven), which the README gives as the code behind the hosted endpoint at mcp.aiven.live. Aiven's Claude plugin (aiven/aiven-ai-plugins, a config-only repo) points at that hosted URL. Hosted use signs in with Aiven OAuth and everything is limited to what your Aiven user may do; the local stdio build takes an Aiven API token. Adding ?read_only=true to the URL (or AIVEN_READ_ONLY=true) drops every write tool, ?services_scope= narrows it to one service family, and a write allowlist re-enables chosen tools. Biggest deduction: none scored, but by default the server can create, update and delete services, drop Kafka topics and run write SQL (aiven_pg_write), and the README warns agents may take destructive actions; tools carry read-only/destructive annotations so a client can ask first, but the server does not ask itself, so switch read-only on for production projects. Released v1.20.0 on 2026-11-11 with ten human committers in the last 90 days.
How to connect
Hosted: claude mcp add --scope user --transport http aiven-mcp https://mcp.aiven.live/mcp (OAuth). Local: claude mcp add --scope user aiven-mcp -e AIVEN_TOKEN=your-token -- npx -y mcp-aivenIs Aiven MCP Server safe?
Is Aiven MCP Server safe to use?
Aiven MCP Server grades A: all four checks are at full marks. Strong public trust signals. It is still not a full audit, so give it the narrowest access that works.
Does Aiven MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Aiven MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Databases & Data Stores
- A Airtable MCP ServerAirtable's own hosted server. List your workspaces and bases, read and search records, and create or update them, using the permissions you already have in Airtable.
- A Airtable MCP Server (community)A community-built Airtable server you run yourself. Lists bases and tables, reads, searches, creates, updates and deletes records, and can change table structure, using a personal access token you scope.
- A ClickHouse MCP ServerClickHouse's official hosted MCP server for ClickHouse Cloud - read-only SELECT queries, schema browsing, and service, backup, ClickPipes and billing tools, with OAuth or a scoped API key.
- A Databricks Managed MCP ServersDatabricks-hosted MCP servers in each workspace for Genie, SQL, Unity Catalog functions and vector search, signed in with OAuth and limited by Unity Catalog.
- A MongoDB MCP ServerQuery and administer MongoDB and Atlas clusters from an agent.
Embed this badge
[](https://trustedmcp.io/servers/aiven-mcp)<a href="https://trustedmcp.io/servers/aiven-mcp"><img src="https://trustedmcp.io/badge/aiven-mcp.svg" alt="TrustedMCP grade A" height="80"></a>Community reviews
Does the job, docs could be better
I like it, with reservations. Releases come often and the changelog is clear. I will check back in a few releases.
Used for Answering support questions from the database
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Surprisingly polished
Tried it on a side project first, then rolled it out at work. Being official from Aiven counts for a lot when I pitch it to security. Filed an issue and got a reply within two days. Sign-in flow was painless and I never had to paste a key into a config file.
Used for Checking data quality after imports
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Set it up once, forgot about it
Been running this for about a month now. Scoped the token to just what the agent needs and it respected that. Easy recommendation.
Used for Generating SQL for ad-hoc reports
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Solid core, fiddly setup
Useful tool, though I would not hand it to a junior unsupervised. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent.
Used for Schema exploration during a migration
- Setup & docs 3/5
- Auth experience 5/5
- Reliability 2/5
- Maintainer responsiveness 5/5
Good defaults, good docs
Started with it as an experiment, now it is a fixture. Sign-in flow was painless and I never had to paste a key into a config file. Good choice if you need Aiven in your agent.
Used for Incident investigation
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Our team uses it every day
Our agents call this dozens of times a day. Nice to use something maintained by Aiven rather than a random fork. Auth is handled properly, and revoking access later was one click. Happy to run it in production.
Used for Read-only analytics questions
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.