Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 6
- 4 3
- 3 1
- 2 0
- 1 0
Trust in production
- Trust it - 90%
- With caveats - 10%
- Wouldn't - 0%
90% would recommend this server
How reviewers scored it
- Setup & docs 4.4
- Auth experience 3.7
- Reliability 4.6
- Maintainer responsiveness 4.8
Why it got an A
Netlify's own MCP server (TypeScript; package.json says ISC, but the repo
has no license file). Netlify recommends the hosted server at
mcp.netlify.com/mcp, which signs you in with OAuth; the npm package
@netlify/mcp runs the same tools locally over stdio and borrows the token
from netlify login, or a personal access token if login fails. Tools
create and deploy projects, read deploys and logs, manage environment
variables and secrets, forms and submissions, extensions and access
controls. One low advisory (GHSA-hmhc-fgcq-m7rx) covered two SSRF bugs:
the hosted proxy could forward your Netlify token to another host, and the
design-import tool would fetch any HTTPS URL. Netlify fixed the hosted
server on 2026-08-12, before the advisory went public. Biggest deduction:
the OAuth sign-in hands the AI full access to your Netlify account,
including env vars and secrets, with no read-only mode, so keep tool
approval on.
How to connect
// Cursor MCP config (README config, local server)
{ "mcpServers": { "netlify": { "command": "npx",
"args": ["-y", "@netlify/mcp"] } } }// claude_desktop_config.json (README config, local server)
{ "mcpServers": { "netlify": { "command": "npx",
"args": ["-y", "@netlify/mcp"] } } }Is Netlify MCP Server safe?
Is Netlify MCP Server safe to use?
Netlify MCP Server grades A (strong public trust signals). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can.
Does Netlify MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Netlify MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Cloud & Hosting
- A AWS MCP ServerAWS's managed remote server for calling any AWS API, running sandboxed scripts, and searching AWS docs.
- A Cloudflare API MCP ServerOfficial hosted Cloudflare server that searches and calls the whole Cloudflare API (Workers, DNS, R2, D1, KV, firewall).
- A Railway MCP (railway mcp in the Railway CLI)Railway's official MCP server, built into the Railway CLI and hosted at mcp.railway.com, to list projects and services, redeploy, and manage feature flags.
- A Render MCP ServerRender's official MCP server, hosted at mcp.render.com or run locally, to create services and databases, read logs and metrics, update environment variables and trigger deploys.
- B Argo CD MCP Server (argocd-mcp)The Argo CD MCP server from argoproj-labs, run from npm or Docker, to list, create, sync and delete Argo CD applications and read resource trees, events and workload logs.
Embed this badge
[](https://trustedmcp.io/servers/netlify-mcp)<a href="https://trustedmcp.io/servers/netlify-mcp"><img src="https://trustedmcp.io/badge/netlify-mcp.svg" alt="TrustedMCP grade A" height="80"></a>Community reviews
Earned a permanent spot in my config
Replaced a homegrown script with Netlify MCP Server and have not looked back. Auth is handled properly, and revoking access later was one click. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. The OAuth flow worked first time in Claude Code. It is in our production agent and I sleep fine.
Used for Reading logs during incidents
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Worth the five minutes to set up
Clear tool names, sensible outputs, very few surprises. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. Nice to use something maintained by Netlify rather than a random fork. Happy to run it in production.
Used for Managing preview environments
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Saves me a context switch every hour
Installed it on a Friday, it was part of my workflow by Monday. You can tell it is actively maintained, the rough edges keep getting fixed.
Used for Spinning up test resources
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Does what it says, no drama
Of the Netlify integrations I tried, this one is the most predictable. I like that access goes through a proper sign-in instead of a long-lived secret on disk.
Used for Checking deploy status from chat
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Surprisingly polished
Tried it on a side project first, then rolled it out at work. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. Would recommend without hesitation.
Used for Reading logs during incidents
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 5/5
Does the job, docs could be better
Took longer to configure than I expected. Being official from Netlify counts for a lot when I pitch it to security. Scoped the token to just what the agent needs and it respected that.
Used for Spinning up test resources
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Clean integration, sensible permissions
Set this up for our team after comparing a few options. Filed an issue and got a reply within two days. Easy recommendation.
Used for Cost checks across projects
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Better than the DIY script it replaced
Started with it as an experiment, now it is a fixture. Auth is handled properly, and revoking access later was one click.
Used for Inventory of what is running where
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Trustworthy enough for real work
Hooked Netlify MCP Server into Claude Code and it worked on the first try. Releases come often and the changelog is clear. Auth is handled properly, and revoking access later was one click.
Used for Inventory of what is running where
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Good defaults, good docs
Our agents call this dozens of times a day. Sign-in flow was painless and I never had to paste a key into a config file. Read-only mode is the first thing I enable, and it covers most of what I need.
Used for Cost checks across projects
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.