Skip to main content

Aiven MCP Early availability

Create and manage Aiven services from AI assistants such as Cursor and Claude Code, including PostgreSQL®, Apache Kafka®, plans, metrics, logs, and service configuration. Enable read-only mode in the configuration tabs below to restrict the server to non-destructive operations, or limit tools to specific services to keep the assistant focused.

Prerequisites

  • An Aiven account
  • An MCP-compatible client, such as Cursor, Claude Code, Claude Desktop, VS Code, or Gemini CLI
  • MCP access enabled for your organization by an admin in the Aiven Console under Admin settings > Authentication > Allow MCP connection

Authentication uses OAuth 2.0 with PKCE; your browser opens on first connect so you can sign in and authorize MCP access.

Install the Aiven MCP

  1. Open a terminal.

  2. Choose your options below, then run the generated command:

    Subscribed through a cloud marketplace?

    Select your marketplace only if you subscribed to Aiven through AWS, Azure, or Google Cloud Marketplace. This helps you sign in to the correct console.

    claude mcp add --transport http aiven "https://mcp.aiven.live/mcp?read_only=true"
  3. Run /mcp and authenticate in your browser when prompted.

  4. Test the connection with a prompt such as List my Aiven projects. and approve the tool execution if prompted.

For more information, see the Claude Code MCP documentation.

What Aiven MCP can do

After you connect to Aiven MCP, you can work with Aiven resources in natural language. For example, you can do the following:

  • View resources: List projects, services, and integrations, or check the status, plan, and cloud region of a service.
  • Manage services: Create, update, and delete services such as PostgreSQL® and Apache Kafka®, and update service plans or configuration. To allow write operations, disable read-only mode.
  • Inspect and troubleshoot services: View service metrics, logs, and configuration to investigate issues.
  • Use Aiven documentation: Ask questions and get answers based on the Aiven documentation.

Security and responsibility

important

MCP tools can perform destructive operations on your Aiven services, including creating, modifying, and deleting services, databases, topics, and data.

AI agents run operations from natural language prompts, which can be misinterpreted. Using the Aiven MCP server can result in damage to or loss of data.

Aiven secures the MCP server and data in transit. Your selected AI agent provider determines how the agent uses your data, including whether it uses that data for training. Review the provider's terms before you enable the integration.

Decide whether to enable MCP access in your organization after evaluating the risks.

Under the shared responsibility model, security and compliance for MCP usage are shared between Aiven and your organization. Aiven secures the platform and API. You are responsible for the following:

  • Decide whether to enable MCP in your organization and evaluate the associated risks.
  • Control access by scoping API tokens to the minimum permissions needed (principle of least privilege) and rotating them regularly.
  • Review AI agent actions before they run, especially for write or delete operations on production resources.
  • Configure MCP servers securely, including enabling read-only mode to restrict the server to non-destructive operations.