Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
-
No community reviews yet
Ran this server? Tell others if you would trust it in production. Reviews are separate from our grade.
Write a reviewWhy it got a C
Laravel's own MCP server, an MIT-licensed dev dependency (v2.10.4, 2026-10-29) that runs on your machine over stdio and exposes tools to read your app's database schema and connections, run read-only SQL, read logs, browser logs and the last error, search version-matched Laravel-ecosystem docs, and run Tinker. Active (25 committers in 90 days) with one medium advisory, a read-only SQL gate bypass, patched in v2.6.0 before it was published; update past that version. Doc search sends your installed package list and queries to Laravel's hosted API (boost.laravel.com). Biggest deduction: no authentication at all, and Tinker runs model-written PHP inside your app with your .env and database, so keep it to local development, use a throwaway database, and approve each Tinker call.
How to connect
claude mcp add -s local -t stdio laravel-boost php artisan boost:mcpIs Laravel Boost safe?
Is Laravel Boost safe to use?
Laravel Boost grades C (usable with care). There is no login: anything that can start or reach it gets its full access. It shells out to helper programs or serves HTTP without enforced TLS, so keep it local and isolated.
Does Laravel Boost have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Laravel Boost support authentication?
No. It has no login of its own, so limit who and what can start it.
Alternatives in Developer Tools
- A Appwrite MCP ServerOfficial Appwrite server that exposes databases, users, functions, teams and storage as tools, hosted with OAuth or run locally with a project API key.
- A Atlassian Rovo MCP ServerOfficial hosted Atlassian server for Jira, Confluence, Jira Service Management, Compass, Bitbucket, Loom, Goals, Projects, and Teams, with OAuth 2.1 sign-in.
- A Buildkite MCP ServerOfficial Buildkite server for pipelines, builds, jobs, logs, annotations, and Test Engine data, hosted or local.
- A Dynatrace Remote MCP ServerDynatrace's hosted MCP server, running inside your Dynatrace SaaS environment, to run and explain DQL, look into problems, vulnerabilities and Kubernetes events, and forecast time series.
- A GitHub MCP ServerOfficial GitHub server for repos, issues, pull requests, Actions, and code security, hosted or local.
Embed this badge
[](https://trustedmcp.io/servers/laravel-boost)<a href="https://trustedmcp.io/servers/laravel-boost"><img src="https://trustedmcp.io/badge/laravel-boost.svg" alt="TrustedMCP grade C" height="80"></a>Community reviews
No published community reviews yet.
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.