io.github.couchbase/mcp-server-couchbase

io.github.couchbase/mcp-server-couchbasev1.0.1Other

Couchbase MCP Server - Enable AI agents to connect to and interact with Couchbase clusters.

The current version, v1.0.1, was published to the official MCP registry on 2026-08-13. It is distributed as couchbase-mcp-server on PyPI and as the Docker image docker.io/couchbase/mcp-server:1.0.1, filed under Other by this index, and declares 33 environment variables. Removals and unreachable sources are measured across every server this index tracks, contract drift across the servers that answer in consecutive snapshots; the index's current counts put this record in context.

In-path gate · all MCP tools

Using io.github.couchbase/mcp-server-couchbase in Claude, Cursor, Gemini CLI, Cline, or Zed?

MCP tool contracts can change remotely with no version bump. The mcpindex gate pins each contract and HOLDs the call when it drifts-before your agent acts. Zero credentials. This is not the package install for this server itself (use Install this server for that).

Install the mcpindex gate (one command)

Rewrites your MCP host config so each server launches behind the gate. Inspect first: curl -fsSL https://mcpindex.ai/install.sh | less

uv tool install mcpindex-gate && mcpindex-config-wire

Auditable install path →Watch it hold a drift →

Trust verdict · v1 advisory · method

REVIEWstatus: PARTIALfresh until 2026-09-26 00:23 UTC

screened 2026-08-13tier: scannedgranularity: description-levelsource: registry

Semantic screen found no manipulation pattern in the description. Conformance probe not yet run.

mcpindex.integrity.descriptionpassINFO

evidence“No malicious instructions found”via static_description

Limits of this verdict

- Semantic screen only - the deterministic conformance probe has not run on this server
- Confidence is reported but not yet calibrated (v1)
- Screen reads the tool description, not the live behavior
- advisory
- registry description only no input schema
- screen model 8b
- Still current: the description we screened is unchanged, re-checked against the registry

Semantic screen: an LLM judge reads the tool description for hidden instructions (status PARTIAL). A pass means the description is not lying, not that the tool is safe: a high-capability tool with an honest description still warrants caution. The deterministic conformance probe has not been run on this server yet, so the screen here is semantic-only. Posture: advisory. Confidences are reported but not yet calibrated (calibrated=false at v1). Full verdict history is not shown on this page.

Own this server? Screen its description →

That verdict was true at screening time (snapshot 2026-09-19).

Contracts can change after screening, with no version bump. The gate pins io.github.couchbase/mcp-server-couchbase’s tool contracts on first sight and holds any silent change before your agent acts - the check that keeps being true on Tuesday.

See your first HOLD in 2 minutes →

Cite this record

People vet a server before wiring it in. One line on your project site or docs answers that with an independent record: screening verdict, registry provenance, contract drift history. It stays current as new screens and drift events land.

Markdown

[Independent trust record for io.github.couchbase/mcp-server-couchbase](https://mcpindex.ai/server/io-github-couchbase-mcp-server-couchbase) - screening verdict, registry provenance, and contract drift monitoring.

HTML

<a href="https://mcpindex.ai/server/io-github-couchbase-mcp-server-couchbase">Independent trust record for io.github.couchbase/mcp-server-couchbase</a> - screening verdict, registry provenance, and contract drift monitoring.

Embed this badge

A live verdict badge for your README or listing. It reflects the current screen, links back here, and updates when the verdict does.

Markdown

[![mcpindex](https://mcpindex.ai/api/v1/badge/io-github-couchbase-mcp-server-couchbase)](https://mcpindex.ai/server/io-github-couchbase-mcp-server-couchbase)

HTML

<a href="https://mcpindex.ai/server/io-github-couchbase-mcp-server-couchbase"><img src="https://mcpindex.ai/api/v1/badge/io-github-couchbase-mcp-server-couchbase" alt="mcpindex verdict" height="20" /></a>

Environment variables

CB_CONNECTION_STRING

Couchbase connection string. Required for connecting to the cluster.

CB_USERNAME

Couchbase database username. Required for basic authentication.

CB_PASSWORD

secret

Couchbase database password. Required for basic authentication.

CB_CA_CERT_PATH

Couchbase CA certificate path. Required for TLS authentication in non Capella clusters.

CB_CLIENT_CERT_PATH

Couchbase client certificate path. Required for mTLS authentication.

CB_CLIENT_KEY_PATH

Couchbase client key path. Required for mTLS authentication.

CB_MCP_READ_ONLY_MODE

Couchbase read only mode. Set to true to allow disable write operations across both KV and query. KV write tools are not loaded and SQL++ queries that modify data are blocked. Set to false to allow data modification queries and tools.

CB_MCP_TRANSPORT

Transport mode for the server (stdio, http or sse). Default is stdio

CB_MCP_HOST

Host to run the MCP server on (default: 127.0.0.1). Used only for HTTP and SSE transport modes.

CB_MCP_PORT

Port to run the MCP server on (default: 8000). Used only for HTTP and SSE transport modes.

CB_MCP_DISABLED_TOOLS

Tools to disable. Accepts comma-separated tool names (e.g., 'tool_1,tool_2') or a file path containing one tool name per line.

CB_MCP_CONFIRMATION_REQUIRED_TOOLS

Comma-separated tool names that require user confirmation before execution. Also accepts a file path containing one tool name per line. Requires the MCP client to support elicitation.

CB_MCP_LOG_LEVEL

Logging level for the MCP server. One of off, debug, info, warning, error. Use 'off' to disable logging entirely. Invalid values fall back to info. Default is info.

CB_MCP_LOG_SINKS

Comma-separated list of log destinations. Allowed values: stderr, file. Include 'file' to write per-level log files; include 'stderr' to write to the console. Default is stderr.

CB_MCP_LOG_FILE

Base path for the per-level log files. One rotating file is written per level (e.g. mcp_server.info.log, mcp_server.error.log). Only used when 'file' is in CB_MCP_LOG_SINKS. Default is mcp_server.log.

CB_MCP_LOG_ROTATION_MAX_SIZE_MB

Global maximum size in MB per-level log file before it rotates, inherited by every level unless overridden by a per-level CB_MCP_LOG_<LEVEL>_ROTATION_MAX_SIZE_MB. A value of 0 is invalid and falls back to the default (1 MB) with a startup warning. Default is 1 (1 MB).

CB_MCP_LOG_MAX_BYTES

[DEPRECATED] Global rotation size in bytes; use CB_MCP_LOG_ROTATION_MAX_SIZE_MB (MB) instead. Still honored for backward compatibility but ignored when CB_MCP_LOG_ROTATION_MAX_SIZE_MB is also set. A value of 0 is invalid and falls back to the default with a startup warning.

CB_MCP_LOG_ERROR_ROTATION_MAX_SIZE_MB

Rotation size in MB for the ERROR log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for ERROR; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.

CB_MCP_LOG_WARNING_ROTATION_MAX_SIZE_MB

Rotation size in MB for the WARNING log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for WARNING; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.

CB_MCP_LOG_INFO_ROTATION_MAX_SIZE_MB

Rotation size in MB for the INFO log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for INFO; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.

CB_MCP_LOG_DEBUG_ROTATION_MAX_SIZE_MB

Rotation size in MB for the DEBUG log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for DEBUG; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.

CB_MCP_LOG_RETENTION_BACKUP_COUNT

Number of rotated backup files kept per-level log file, excluding the live file. Applies to every level unless overridden per level. Set to 0 to keep only the live file (still capped by the rotation size). Default is 1.

CB_MCP_LOG_ERROR_RETENTION_BACKUP_COUNT

Rotated backups kept for the ERROR log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for ERROR; inherits it when unset.

CB_MCP_LOG_WARNING_RETENTION_BACKUP_COUNT

Rotated backups kept for the WARNING log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for WARNING; inherits it when unset.

CB_MCP_LOG_INFO_RETENTION_BACKUP_COUNT

Rotated backups kept for the INFO log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for INFO; inherits it when unset.

CB_MCP_LOG_DEBUG_RETENTION_BACKUP_COUNT

Rotated backups kept for the DEBUG log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for DEBUG; inherits it when unset.

CB_MCP_OAUTH_JWT_JWKS_URI

JWKS endpoint of the identity provider used to verify bearer JWT signatures. Required to enable OAuth, along with CB_MCP_OAUTH_JWT_ISSUER and CB_MCP_OAUTH_JWT_AUDIENCE. Only honored when CB_MCP_TRANSPORT=http.

CB_MCP_OAUTH_JWT_ISSUER

Expected JWT 'iss' claim value. Also advertised as the authorization server in Protected Resource Metadata when CB_MCP_OAUTH_MCP_BASE_URL is set. Required to enable OAuth.

CB_MCP_OAUTH_JWT_AUDIENCE

Expected JWT 'aud' claim value. Required to enable OAuth.

CB_MCP_OAUTH_JWT_ALGORITHM

JWT signing algorithm. One of RS256/384/512, ES256/384/512, PS256/384/512. Default is RS256.

CB_MCP_OAUTH_MCP_BASE_URL

Public base URL of this MCP server. When set, the server publishes RFC 9728 Protected Resource Metadata at <base_url>/.well-known/oauth-protected-resource/mcp so PRM-aware clients can discover the authorization server. Optional.

CB_MCP_OAUTH_SCOPE_READ_LABEL

Override the OAuth scope label the server treats as 'read' access; advertised in PRM and matched against the token's scope/scp claim. Use when your IdP cannot emit the canonical form. Default is couchbase-mcp:read.

CB_MCP_OAUTH_SCOPE_WRITE_LABEL

Override the OAuth scope label the server treats as 'write' access; same semantics as CB_MCP_OAUTH_SCOPE_READ_LABEL. Default is couchbase-mcp:write.

CB_CONNECTION_STRING

Couchbase connection string. Required for connecting to the cluster.

CB_USERNAME

Couchbase database username. Required for basic authentication.

CB_PASSWORD

secret

Couchbase database password. Required for basic authentication.

CB_CA_CERT_PATH

Couchbase CA certificate path. Required for TLS authentication in non Capella clusters.

CB_CLIENT_CERT_PATH

Couchbase client certificate path. Required for mTLS authentication.

CB_CLIENT_KEY_PATH

Couchbase client key path. Required for mTLS authentication.

CB_MCP_READ_ONLY_MODE

Couchbase read only mode. Set to true to disable write operations across both KV and query. KV write tools are not loaded and SQL++ queries that modify data are blocked. Set to false to allow data modification queries and tools.

CB_MCP_TRANSPORT

Transport mode for the server (stdio, http or sse). Default is stdio

CB_MCP_HOST

Host to run the MCP server on (default: 127.0.0.1). Used only for HTTP and SSE transport modes.

CB_MCP_PORT

Port to run the MCP server on (default: 8000). Used only for HTTP and SSE transport modes.

CB_MCP_DISABLED_TOOLS

Tools to disable. Accepts comma-separated tool names (e.g., 'tool_1,tool_2') or a file path containing one tool name per line.

CB_MCP_CONFIRMATION_REQUIRED_TOOLS

Comma-separated tool names that require user confirmation before execution. Also accepts a file path containing one tool name per line. Requires the MCP client to support elicitation.

CB_MCP_LOG_LEVEL

Logging level for the MCP server. One of off, debug, info, warning, error. Use 'off' to disable logging entirely. Invalid values fall back to info. Default is info.

CB_MCP_LOG_SINKS

Comma-separated list of log destinations. Allowed values: stderr, file. Include 'file' to write per-level log files; include 'stderr' to write to the console. Default is stderr.

CB_MCP_LOG_FILE

CB_MCP_LOG_ROTATION_MAX_SIZE_MB

CB_MCP_LOG_MAX_BYTES

CB_MCP_LOG_ERROR_ROTATION_MAX_SIZE_MB

Rotation size in MB for the ERROR log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for ERROR; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.

CB_MCP_LOG_WARNING_ROTATION_MAX_SIZE_MB

CB_MCP_LOG_INFO_ROTATION_MAX_SIZE_MB

Rotation size in MB for the INFO log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for INFO; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.

CB_MCP_LOG_DEBUG_ROTATION_MAX_SIZE_MB

Rotation size in MB for the DEBUG log file. Overrides CB_MCP_LOG_ROTATION_MAX_SIZE_MB for DEBUG; inherits it when unset. 0 is invalid and falls back to the inherited global with a startup warning.

CB_MCP_LOG_RETENTION_BACKUP_COUNT

CB_MCP_LOG_ERROR_RETENTION_BACKUP_COUNT

Rotated backups kept for the ERROR log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for ERROR; inherits it when unset.

CB_MCP_LOG_WARNING_RETENTION_BACKUP_COUNT

Rotated backups kept for the WARNING log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for WARNING; inherits it when unset.

CB_MCP_LOG_INFO_RETENTION_BACKUP_COUNT

Rotated backups kept for the INFO log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for INFO; inherits it when unset.

CB_MCP_LOG_DEBUG_RETENTION_BACKUP_COUNT

Rotated backups kept for the DEBUG log file. Overrides CB_MCP_LOG_RETENTION_BACKUP_COUNT for DEBUG; inherits it when unset.

CB_MCP_OAUTH_JWT_JWKS_URI

CB_MCP_OAUTH_JWT_ISSUER

Expected JWT 'iss' claim value. Also advertised as the authorization server in Protected Resource Metadata when CB_MCP_OAUTH_MCP_BASE_URL is set. Required to enable OAuth.

CB_MCP_OAUTH_JWT_AUDIENCE

Expected JWT 'aud' claim value. Required to enable OAuth.

CB_MCP_OAUTH_JWT_ALGORITHM

JWT signing algorithm. One of RS256/384/512, ES256/384/512, PS256/384/512. Default is RS256.

CB_MCP_OAUTH_MCP_BASE_URL

CB_MCP_OAUTH_SCOPE_READ_LABEL

CB_MCP_OAUTH_SCOPE_WRITE_LABEL

Override the OAuth scope label the server treats as 'write' access; same semantics as CB_MCP_OAUTH_SCOPE_READ_LABEL. Default is couchbase-mcp:write.

MCP quality score · maturity, not trust · methodology

freshness

completeness

installability

documentation

stability

Alternatives in Other

AgentRoam

ai.agentroam/agentroam

Buy travel eSIMs, gift cards and mobile top-ups with crypto — user confirms before any order.

Authoryze

ai.authoryze/authoryze

Give your AI agent a spending limit: approval controls and single-use virtual cards.

Countersign

io.github.countersign-network/countersign

Kill switch + spend guard for AI agents that spend money, across every wallet vendor at once.

Install this server

Claude Desktop (uvx)

{
  "mcpServers": {
    "mcp-server-couchbase": {
      "command": "uvx",
      "args": [
        "--",
        "couchbase-mcp-server"
      ],
      "env": {
        "CB_CONNECTION_STRING": "<cb_connection_string>",
        "CB_USERNAME": "<cb_username>",
        "CB_PASSWORD": "<your-cb_password>",
        "CB_CA_CERT_PATH": "<cb_ca_cert_path>",
        "CB_CLIENT_CERT_PATH": "<cb_client_cert_path>",
        "CB_CLIENT_KEY_PATH": "<cb_client_key_path>",
        "CB_MCP_READ_ONLY_MODE": "<cb_mcp_read_only_mode>",
        "CB_MCP_TRANSPORT": "<cb_mcp_transport>",
        "CB_MCP_HOST": "<cb_mcp_host>",
        "CB_MCP_PORT": "<cb_mcp_port>",
        "CB_MCP_DISABLED_TOOLS": "<cb_mcp_disabled_tools>",
        "CB_MCP_CONFIRMATION_REQUIRED_TOOLS": "<cb_mcp_confirmation_required_tools>",
        "CB_MCP_LOG_LEVEL": "<cb_mcp_log_level>",
        "CB_MCP_LOG_SINKS": "<cb_mcp_log_sinks>",
        "CB_MCP_LOG_FILE": "<cb_mcp_log_file>",
        "CB_MCP_LOG_ROTATION_MAX_SIZE_MB": "<cb_mcp_log_rotation_max_size_mb>",
        "CB_MCP_LOG_MAX_BYTES": "<cb_mcp_log_max_bytes>",
        "CB_MCP_LOG_ERROR_ROTATION_MAX_SIZE_MB": "<cb_mcp_log_error_rotation_max_size_mb>",
        "CB_MCP_LOG_WARNING_ROTATION_MAX_SIZE_MB": "<cb_mcp_log_warning_rotation_max_size_mb>",
        "CB_MCP_LOG_INFO_ROTATION_MAX_SIZE_MB": "<cb_mcp_log_info_rotation_max_size_mb>",
        "CB_MCP_LOG_DEBUG_ROTATION_MAX_SIZE_MB": "<cb_mcp_log_debug_rotation_max_size_mb>",
        "CB_MCP_LOG_RETENTION_BACKUP_COUNT": "<cb_mcp_log_retention_backup_count>",
        "CB_MCP_LOG_ERROR_RETENTION_BACKUP_COUNT": "<cb_mcp_log_error_retention_backup_count>",
        "CB_MCP_LOG_WARNING_RETENTION_BACKUP_COUNT": "<cb_mcp_log_warning_retention_backup_count>",
        "CB_MCP_LOG_INFO_RETENTION_BACKUP_COUNT": "<cb_mcp_log_info_retention_backup_count>",
        "CB_MCP_LOG_DEBUG_RETENTION_BACKUP_COUNT": "<cb_mcp_log_debug_retention_backup_count>",
        "CB_MCP_OAUTH_JWT_JWKS_URI": "<cb_mcp_oauth_jwt_jwks_uri>",
        "CB_MCP_OAUTH_JWT_ISSUER": "<cb_mcp_oauth_jwt_issuer>",
        "CB_MCP_OAUTH_JWT_AUDIENCE": "<cb_mcp_oauth_jwt_audience>",
        "CB_MCP_OAUTH_JWT_ALGORITHM": "<cb_mcp_oauth_jwt_algorithm>",
        "CB_MCP_OAUTH_MCP_BASE_URL": "<cb_mcp_oauth_mcp_base_url>",
        "CB_MCP_OAUTH_SCOPE_READ_LABEL": "<cb_mcp_oauth_scope_read_label>",
        "CB_MCP_OAUTH_SCOPE_WRITE_LABEL": "<cb_mcp_oauth_scope_write_label>"
      }
    }
  }
}

Claude Desktop (Docker)

{
  "mcpServers": {
    "mcp-server-couchbase": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "--",
        "docker.io/couchbase/mcp-server:1.0.1"
      ],
      "env": {
        "CB_CONNECTION_STRING": "<cb_connection_string>",
        "CB_USERNAME": "<cb_username>",
        "CB_PASSWORD": "<your-cb_password>",
        "CB_CA_CERT_PATH": "<cb_ca_cert_path>",
        "CB_CLIENT_CERT_PATH": "<cb_client_cert_path>",
        "CB_CLIENT_KEY_PATH": "<cb_client_key_path>",
        "CB_MCP_READ_ONLY_MODE": "<cb_mcp_read_only_mode>",
        "CB_MCP_TRANSPORT": "<cb_mcp_transport>",
        "CB_MCP_HOST": "<cb_mcp_host>",
        "CB_MCP_PORT": "<cb_mcp_port>",
        "CB_MCP_DISABLED_TOOLS": "<cb_mcp_disabled_tools>",
        "CB_MCP_CONFIRMATION_REQUIRED_TOOLS": "<cb_mcp_confirmation_required_tools>",
        "CB_MCP_LOG_LEVEL": "<cb_mcp_log_level>",
        "CB_MCP_LOG_SINKS": "<cb_mcp_log_sinks>",
        "CB_MCP_LOG_FILE": "<cb_mcp_log_file>",
        "CB_MCP_LOG_ROTATION_MAX_SIZE_MB": "<cb_mcp_log_rotation_max_size_mb>",
        "CB_MCP_LOG_MAX_BYTES": "<cb_mcp_log_max_bytes>",
        "CB_MCP_LOG_ERROR_ROTATION_MAX_SIZE_MB": "<cb_mcp_log_error_rotation_max_size_mb>",
        "CB_MCP_LOG_WARNING_ROTATION_MAX_SIZE_MB": "<cb_mcp_log_warning_rotation_max_size_mb>",
        "CB_MCP_LOG_INFO_ROTATION_MAX_SIZE_MB": "<cb_mcp_log_info_rotation_max_size_mb>",
        "CB_MCP_LOG_DEBUG_ROTATION_MAX_SIZE_MB": "<cb_mcp_log_debug_rotation_max_size_mb>",
        "CB_MCP_LOG_RETENTION_BACKUP_COUNT": "<cb_mcp_log_retention_backup_count>",
        "CB_MCP_LOG_ERROR_RETENTION_BACKUP_COUNT": "<cb_mcp_log_error_retention_backup_count>",
        "CB_MCP_LOG_WARNING_RETENTION_BACKUP_COUNT": "<cb_mcp_log_warning_retention_backup_count>",
        "CB_MCP_LOG_INFO_RETENTION_BACKUP_COUNT": "<cb_mcp_log_info_retention_backup_count>",
        "CB_MCP_LOG_DEBUG_RETENTION_BACKUP_COUNT": "<cb_mcp_log_debug_retention_backup_count>",
        "CB_MCP_OAUTH_JWT_JWKS_URI": "<cb_mcp_oauth_jwt_jwks_uri>",
        "CB_MCP_OAUTH_JWT_ISSUER": "<cb_mcp_oauth_jwt_issuer>",
        "CB_MCP_OAUTH_JWT_AUDIENCE": "<cb_mcp_oauth_jwt_audience>",
        "CB_MCP_OAUTH_JWT_ALGORITHM": "<cb_mcp_oauth_jwt_algorithm>",
        "CB_MCP_OAUTH_MCP_BASE_URL": "<cb_mcp_oauth_mcp_base_url>",
        "CB_MCP_OAUTH_SCOPE_READ_LABEL": "<cb_mcp_oauth_scope_read_label>",
        "CB_MCP_OAUTH_SCOPE_WRITE_LABEL": "<cb_mcp_oauth_scope_write_label>"
      }
    }
  }
}

Verdict API

curl -s mcpindex.ai/api/v1/trust/server/io-github-couchbase-mcp-server-couchbase

Free-tier verdict as JSON: decision + dimensions + severity. Call it from your agent before it invokes a tool it just discovered.

Details

version: v1.0.1
category: Other
verdict expires: 2026-09-26
quality: 90 / 100
operator: couchbase

Listing

Listed from the official MCP registry. Unclaimed by its maintainer. Maintainer? Email us →

Provenance

Each verdict is bound to a hash of the exact description it judged, so a re-crawl that changes the text produces a new record rather than silently inheriting this one. Verdict history is hash-chained and anchored to Bitcoin via OpenTimestamps (latest confirmed at block 967,507). Verify it yourself.

Links

Repository →Website →