Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 7
- 4 9
- 3 2
- 2 0
- 1 0
Trust in production
- Trust it - 72%
- With caveats - 28%
- Wouldn't - 0%
89% would recommend this server
How reviewers scored it
- Setup & docs 4.4
- Auth experience 4.3
- Reliability 4.3
- Maintainer responsiveness 4.2
Why it got an A
Xata's own hosted server at api.xata.tech/mcp, over Streamable HTTP with OAuth sign-in (or a Xata API key with scopes for CI). It exposes 11 tools: five that search and call Xata's REST API (separate read, write and destructive tools, so a client can allow reads without allowing deletes), run_sql and describe_schema for a branch, and docs and skills lookups. run_sql is read-only by default; changing data or schema needs write=true and confirm=true, and destructive API calls need confirm=true. Connection strings and passwords are stripped from responses. Biggest deduction: the server is closed source and its last dated MCP changelog entry (2026-08-25) is more than 60 days old, so this grade rests on Xata's documentation and the vendor's xataio/claude-plugin repo (only a config that points at the hosted URL), and maintenance scores a band lower. There is no local or npm version of the server.
How to connect
Hosted, nothing to install: https://api.xata.tech/mcp (Streamable HTTP, OAuth on first use); Claude Code: claude mcp add --transport http xata https://api.xata.tech/mcpIs Xata MCP Server safe?
Is Xata MCP Server safe to use?
Xata MCP Server grades A (strong public trust signals). Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.
Does Xata MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Xata MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Databases & Data Stores
- A Airtable MCP ServerAirtable's own hosted server. List your workspaces and bases, read and search records, and create or update them, using the permissions you already have in Airtable.
- A Airtable MCP Server (community)A community-built Airtable server you run yourself. Lists bases and tables, reads, searches, creates, updates and deletes records, and can change table structure, using a personal access token you scope.
- A Aiven MCP ServerOfficial Aiven server to manage PostgreSQL, Kafka, OpenSearch and application services, run SQL, read Kafka topics and search the Aiven docs, with your Aiven permissions applied.
- A ClickHouse MCP ServerClickHouse's official hosted MCP server for ClickHouse Cloud - read-only SELECT queries, schema browsing, and service, backup, ClickPipes and billing tools, with OAuth or a scoped API key.
- A Databricks Managed MCP ServersDatabricks-hosted MCP servers in each workspace for Genie, SQL, Unity Catalog functions and vector search, signed in with OAuth and limited by Unity Catalog.
Embed this badge
[](https://trustedmcp.io/servers/xata-mcp)<a href="https://trustedmcp.io/servers/xata-mcp"><img src="https://trustedmcp.io/badge/xata-mcp.svg" alt="TrustedMCP grade A" height="80"></a>Community reviews
The Xata integration I wanted
Been running this for about a month now. Read-only mode is the first thing I enable, and it covers most of what I need.
Used for Debugging data issues in staging
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 5/5
No complaints after a month
Replaced a homegrown script with Xata MCP Server and have not looked back. Scoped the token to just what the agent needs and it respected that. Easy recommendation.
Used for Answering support questions from the database
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Clean integration, sensible permissions
Tried it on a side project first, then rolled it out at work. Updates land regularly, and nothing broke when I upgraded.
Used for Prototyping queries before writing code
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Recommended it to two teams already
Our agents call this dozens of times a day. Auth is handled properly, and revoking access later was one click. Gave it its own API key so I can revoke it without breaking anything else.
Used for Checking data quality after imports
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Saves me a context switch every hour
Replaced a homegrown script with Xata MCP Server and have not looked back. Sign-in flow was painless and I never had to paste a key into a config file. Easy recommendation.
Used for Incident investigation
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Set it up once, forgot about it
Of the Xata integrations I tried, this one is the most predictable. Scoped the token to just what the agent needs and it respected that. Turned on read-only mode on day one, highly recommend doing the same. Worth it, just do not skip the hardening steps.
Used for Debugging data issues in staging
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
OK for read-only work
Some tools are great, a couple feel half finished. The scope options are worth reading carefully, the defaults are broader than I wanted. I like that access goes through a proper sign-in instead of a long-lived secret on disk.
Used for Checking data quality after imports
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Better than the DIY script it replaced
I use this almost daily. Nothing to install, I just point the client at the URL. Read-only mode is the first thing I enable, and it covers most of what I need. Releases come often and the changelog is clear. Good choice if you need Xata in your agent.
Used for Generating SQL for ad-hoc reports
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Good defaults, good docs
Set this up for our team after comparing a few options. Hosted endpoint means no local process to babysit. I like that access goes through a proper sign-in instead of a long-lived secret on disk. It is in our production agent and I sleep fine.
Used for Read-only analytics questions
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Earned a permanent spot in my config
Installed it on a Friday, it was part of my workflow by Monday. The OAuth flow worked first time in Claude Code. Sign-in flow was painless and I never had to paste a key into a config file. Would recommend without hesitation.
Used for Incident investigation
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Surprisingly polished
Simple to set up in Cursor, simple to reason about. Hosted endpoint means no local process to babysit. Auth is handled properly, and revoking access later was one click. Fine in production if you sandbox it.
Used for Schema exploration during a migration
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Solid and well behaved
Clear tool names, sensible outputs, very few surprises. Auth is handled properly, and revoking access later was one click.
Used for Schema exploration during a migration
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Fine once configured properly
Good for experimenting, still deciding about production. You can tell it is actively maintained, the rough edges keep getting fixed. Sign-in flow was painless and I never had to paste a key into a config file. Keep permissions tight and it is a good tool.
Used for Generating SQL for ad-hoc reports
- Setup & docs 3/5
- Auth experience 5/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Trustworthy enough for real work
Hooked Xata MCP Server into Claude Code and it worked on the first try. You can tell it is actively maintained, the rough edges keep getting fixed. It is in our production agent and I sleep fine.
Used for Read-only analytics questions
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Easy win for our agent setup
Hooked Xata MCP Server into Claude Code and it worked on the first try. Scoped the token to just what the agent needs and it respected that. Nice to use something maintained by Xata rather than a random fork. Happy to run it in production.
Used for Answering support questions from the database
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Does what it says, no drama
Started with it as an experiment, now it is a fixture. Auth is handled properly, and revoking access later was one click. I would use it in prod, but only with a human approving writes.
Used for Checking data quality after imports
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Quietly reliable
Simple to set up in Cursor, simple to reason about. Hosted endpoint means no local process to babysit. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Happy to run it in production.
Used for Prototyping queries before writing code
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Worth the five minutes to set up
Clear tool names, sensible outputs, very few surprises. Filed an issue and got a reply within two days. Nothing to install, I just point the client at the URL. Auth is handled properly, and revoking access later was one click. Good choice if you need Xata in your agent.
Used for Schema exploration during a migration
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 3/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.