Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 0
- 4 8
- 3 2
- 2 0
- 1 0
Trust in production
- Trust it - 50%
- With caveats - 50%
- Wouldn't - 0%
100% would recommend this server
How reviewers scored it
- Setup & docs 4.0
- Auth experience 3.5
- Reliability 3.8
- Maintainer responsiveness 4.1
Why it got a B
Wix's own server, hosted over HTTPS, with OAuth sign-in on first use and no key in a config file (an API key plus account ID is the documented alternative). It can write: update products, create coupons and bookings, send inbox emails, install apps, and create or publish sites. Wix's docs say it is your client's auto-run setting that decides whether you approve each call, so turn auto-run off. Biggest deduction: the server is closed source, so this grade rests on Wix's documentation and the wix/skills repo (Wix's own, a read-only mirror holding skills and config only, no server code), and we scored maintenance one band lower. The grant advertises no scopes and covers your whole Wix account. The docs give no dated changelog for the server.
How to connect
Hosted: https://mcp.wix.com/mcp (OAuth sign-in on first use); Claude Code plugin: /plugin install from the wix/skills repo (see its README)
Is Wix MCP Server safe?
Is Wix MCP Server safe to use?
Wix MCP Server grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.
Does Wix MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Wix MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Cloud & Hosting
- A Cloudflare API MCP ServerOfficial hosted Cloudflare server that searches and calls the whole Cloudflare API (Workers, DNS, R2, D1, KV, firewall).
- A Lovable MCP ServerOfficial hosted Lovable server that lists, creates, edits and deploys Lovable projects, runs SQL on a project's cloud database and reads analytics.
- A Netlify MCP ServerNetlify's official MCP server, hosted at mcp.netlify.com or run from npm, to create and deploy projects and manage env vars and secrets, forms, extensions and access controls.
- A Railway MCP (railway mcp in the Railway CLI)Railway's official MCP server, built into the Railway CLI and hosted at mcp.railway.com, to list projects and services, redeploy, and manage feature flags.
- A Render MCP ServerRender's official MCP server, hosted at mcp.render.com or run locally, to create services and databases, read logs and metrics, update environment variables and trigger deploys.
Community reviews
Decent, not set-and-forget
Good for experimenting, still deciding about production. Scoped the token to just what the agent needs and it respected that. Updates land regularly, and nothing broke when I upgraded. Worth it, just do not skip the hardening steps.
Used for Inventory of what is running where
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Better than the DIY script it replaced
Set this up for our team after comparing a few options. Nice to use something maintained by Wix rather than a random fork. Auth is handled properly, and revoking access later was one click. You can tell it is actively maintained, the rough edges keep getting fixed. I would use it in prod, but only with a human approving writes.
Used for Spinning up test resources
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
The Wix integration I wanted
Tried it on a side project first, then rolled it out at work. Auth is handled properly, and revoking access later was one click. Nice to use something maintained by Wix rather than a random fork. Recommended, with sensible guardrails.
Used for Checking deploy status from chat
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Solid and well behaved
Replaced a homegrown script with Wix MCP Server and have not looked back. The API key sits in the config file, so I made a dedicated key with minimal permissions.
Used for Managing preview environments
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Good defaults, good docs
Hooked Wix MCP Server into Claude Code and it worked on the first try. Updates land regularly, and nothing broke when I upgraded. Sign-in flow was painless and I never had to paste a key into a config file. Being official from Wix counts for a lot when I pitch it to security. It is in our production agent and I sleep fine.
Used for Reading logs during incidents
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Exactly what I needed from Wix
I use this almost daily. Releases come often and the changelog is clear.
Used for Inventory of what is running where
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Clean integration, sensible permissions
Clear tool names, sensible outputs, very few surprises. Nothing to install, I just point the client at the URL.
Used for Cost checks across projects
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Quietly reliable
Started with it as an experiment, now it is a fixture. Nothing to install, I just point the client at the URL. Easy recommendation.
Used for Cost checks across projects
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Earned a permanent spot in my config
Our agents call this dozens of times a day. Releases come often and the changelog is clear. Would recommend without hesitation.
Used for Checking deploy status from chat
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Good, but read the permissions first
Works well enough for what I need. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Being official from Wix counts for a lot when I pitch it to security. Filed an issue and got a reply within two days.
Used for Managing preview environments
- Setup & docs 4/5
- Auth experience 2/5
- Reliability 2/5
- Maintainer responsiveness 5/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.