server.json

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "io.github.couchbase/mcp-server-couchbase",
  "description": "Couchbase MCP Server - Enable AI agents to connect to and interact with Couchbase clusters.",
  "repository": {
    "url": "https://github.com/couchbase/mcp-server-couchbase",
    "source": "github"
  },
  "websiteUrl": "https://mcp-server.couchbase.com/",
  "version": "1.0.0.post1",
  "packages": [
    {
      "registryType": "pypi",
      "identifier": "couchbase-mcp-server",
      "version": "1.0.0.post1",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "name": "CB_CONNECTION_STRING",
          "description": "Couchbase connection string. Required for connecting to the cluster.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_USERNAME",
          "description": "Couchbase database username. Required for basic authentication.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_PASSWORD",
          "description": "Couchbase database password. Required for basic authentication.",
          "isRequired": false,
          "format": "string",
          "isSecret": true
        },
        {
          "name": "CB_CA_CERT_PATH",
          "description": "Couchbase CA certificate path. Required for TLS authentication in non Capella clusters.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_CLIENT_CERT_PATH",
          "description": "Couchbase client certificate path. Required for mTLS authentication.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_CLIENT_KEY_PATH",
          "description": "Couchbase client key path. Required for mTLS authentication.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_READ_ONLY_MODE",
          "description": "Couchbase read only mode. Set to true to allow disable write operations across both KV and query. KV write tools are not loaded and SQL++ queries that modify data are blocked. Set to false to allow data modification queries and tools.",
          "isRequired": false,
          "format": "boolean",
          "isSecret": false
        },
        {
          "name": "CB_MCP_TRANSPORT",
          "description": "Transport mode for the server (stdio, http or sse). Default is stdio",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_HOST",
          "description": "Host to run the MCP server on (default: 127.0.0.1). Used only for HTTP and SSE transport modes.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_PORT",
          "description": "Port to run the MCP server on (default: 8000). Used only for HTTP and SSE transport modes.",
          "isRequired": false,
          "format": "number",
          "isSecret": false
        },
        {
          "name": "CB_MCP_DISABLED_TOOLS",
          "description": "Tools to disable. Accepts comma-separated tool names (e.g., 'tool_1,tool_2') or a file path containing one tool name per line.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_CONFIRMATION_REQUIRED_TOOLS",
          "description": "Comma-separated tool names that require user confirmation before execution. Also accepts a file path containing one tool name per line. Requires the MCP client to support elicitation.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_LOG_LEVEL",
          "description": "Logging level for the MCP server. One of off, debug, info, warning, error. Use 'off' to disable logging entirely. Invalid values fall back to info. Default is info.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_LOG_SINKS",
          "description": "Comma-separated list of log destinations. Allowed values: stderr, file. Include 'file' to write per-level log files; include 'stderr' to write to the console. Default is stderr.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_LOG_FILE",
          "description": "Base path for the per-level log files. One rotating file is written per level (e.g. mcp_server.info.log, mcp_server.error.log). Only used when 'file' is in CB_MCP_LOG_SINKS. Default is mcp_server.log.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_LOG_MAX_BYTES",
          "description": "Maximum size in bytes per per-level log file before it rotates. Default is 1048576 (1 MB).",
          "isRequired": false,
          "format": "number",
          "isSecret": false
        },
        {
          "name": "CB_MCP_OAUTH_JWT_JWKS_URI",
          "description": "JWKS endpoint of the identity provider used to verify bearer JWT signatures. Required to enable OAuth, along with CB_MCP_OAUTH_JWT_ISSUER and CB_MCP_OAUTH_JWT_AUDIENCE. Only honored when CB_MCP_TRANSPORT=http.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_OAUTH_JWT_ISSUER",
          "description": "Expected JWT 'iss' claim value. Also advertised as the authorization server in Protected Resource Metadata when CB_MCP_OAUTH_MCP_BASE_URL is set. Required to enable OAuth.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_OAUTH_JWT_AUDIENCE",
          "description": "Expected JWT 'aud' claim value. Required to enable OAuth.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_OAUTH_JWT_ALGORITHM",
          "description": "JWT signing algorithm. One of RS256/384/512, ES256/384/512, PS256/384/512. Default is RS256.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_OAUTH_MCP_BASE_URL",
          "description": "Public base URL of this MCP server. When set, the server publishes RFC 9728 Protected Resource Metadata at <base_url>/.well-known/oauth-protected-resource/mcp so PRM-aware clients can discover the authorization server. Optional.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        }
      ],
      "packageArguments": [
        {
          "type": "named",
          "name": "--connection-string",
          "description": "Couchbase connection string. Required for connecting to the cluster.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--username",
          "description": "Couchbase database username. Required for basic authentication.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--password",
          "description": "Couchbase database password. Required for basic authentication.",
          "isRequired": false,
          "format": "string",
          "isSecret": true
        },
        {
          "type": "named",
          "name": "--ca-cert-path",
          "description": "Couchbase CA certificate path. Required for TLS authentication in non Capella clusters.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--client-cert-path",
          "description": "Couchbase client certificate path. Required for mTLS authentication.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--client-key-path",
          "description": "Couchbase client key path. Required for mTLS authentication.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--read-only-mode",
          "description": "Couchbase read only mode. Set to true to disable write operations across both KV and query. KV write tools are not loaded and SQL++ queries that modify data are blocked. Set to false to allow data modification queries and tools.",
          "isRequired": false,
          "format": "boolean",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--transport",
          "description": "Transport mode for the server (stdio, http or sse). Default is stdio",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--host",
          "description": "Host to run the MCP server on (default: 127.0.0.1). Used only for HTTP and SSE transport modes.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--port",
          "description": "Port to run the MCP server on (default: 8000). Used only for HTTP and SSE transport modes.",
          "isRequired": false,
          "format": "number",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--disabled-tools",
          "description": "Tools to disable. Accepts comma-separated tool names (e.g., 'tool_1,tool_2') or a file path containing one tool name per line.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--confirmation-required-tools",
          "description": "Comma-separated tool names that require user confirmation before execution. Also accepts a file path containing one tool name per line. Requires the MCP client to support elicitation.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--log-level",
          "description": "Logging level for the MCP server. One of off, debug, info, warning, error. Use 'off' to disable logging entirely. Invalid values fall back to info. Default is info.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--log-sinks",
          "description": "Comma-separated list of log destinations. Allowed values: stderr, file. Include 'file' to write per-level log files; include 'stderr' to write to the console. Default is stderr.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--log-file",
          "description": "Base path for the per-level log files. One rotating file is written per level (e.g. mcp_server.info.log, mcp_server.error.log). Only used when 'file' is in --log-sinks. Default is mcp_server.log.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--log-max-bytes",
          "description": "Maximum size in bytes per per-level log file before it rotates. Default is 1048576 (1 MB).",
          "isRequired": false,
          "format": "number",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--oauth-jwks-uri",
          "description": "JWKS endpoint of the identity provider used to verify bearer JWT signatures. Required to enable OAuth, along with --oauth-issuer and --oauth-audience. Only honored when --transport=http.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--oauth-issuer",
          "description": "Expected JWT 'iss' claim value. Also advertised as the authorization server in Protected Resource Metadata when --oauth-mcp-base-url is set. Required to enable OAuth.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--oauth-audience",
          "description": "Expected JWT 'aud' claim value. Required to enable OAuth.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--oauth-algorithm",
          "description": "JWT signing algorithm. One of RS256/384/512, ES256/384/512, PS256/384/512. Default is RS256.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "type": "named",
          "name": "--oauth-mcp-base-url",
          "description": "Public base URL of this MCP server. When set, the server publishes RFC 9728 Protected Resource Metadata at <base_url>/.well-known/oauth-protected-resource/mcp so PRM-aware clients can discover the authorization server. Optional.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        }
      ]
    },
    {
      "registryType": "oci",
      "identifier": "docker.io/couchbase/mcp-server:1.0.0.post1",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "name": "CB_CONNECTION_STRING",
          "description": "Couchbase connection string. Required for connecting to the cluster.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_USERNAME",
          "description": "Couchbase database username. Required for basic authentication.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_PASSWORD",
          "description": "Couchbase database password. Required for basic authentication.",
          "isRequired": false,
          "format": "string",
          "isSecret": true
        },
        {
          "name": "CB_CA_CERT_PATH",
          "description": "Couchbase CA certificate path. Required for TLS authentication in non Capella clusters.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_CLIENT_CERT_PATH",
          "description": "Couchbase client certificate path. Required for mTLS authentication.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_CLIENT_KEY_PATH",
          "description": "Couchbase client key path. Required for mTLS authentication.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_READ_ONLY_MODE",
          "description": "Couchbase read only mode. Set to true to disable write operations across both KV and query. KV write tools are not loaded and SQL++ queries that modify data are blocked. Set to false to allow data modification queries and tools.",
          "isRequired": false,
          "format": "boolean",
          "isSecret": false
        },
        {
          "name": "CB_MCP_TRANSPORT",
          "description": "Transport mode for the server (stdio, http or sse). Default is stdio",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_HOST",
          "description": "Host to run the MCP server on (default: 127.0.0.1). Used only for HTTP and SSE transport modes.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_PORT",
          "description": "Port to run the MCP server on (default: 8000). Used only for HTTP and SSE transport modes.",
          "isRequired": false,
          "format": "number",
          "isSecret": false
        },
        {
          "name": "CB_MCP_DISABLED_TOOLS",
          "description": "Tools to disable. Accepts comma-separated tool names (e.g., 'tool_1,tool_2') or a file path containing one tool name per line.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_CONFIRMATION_REQUIRED_TOOLS",
          "description": "Comma-separated tool names that require user confirmation before execution. Also accepts a file path containing one tool name per line. Requires the MCP client to support elicitation.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_LOG_LEVEL",
          "description": "Logging level for the MCP server. One of off, debug, info, warning, error. Use 'off' to disable logging entirely. Invalid values fall back to info. Default is info.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_LOG_SINKS",
          "description": "Comma-separated list of log destinations. Allowed values: stderr, file. Include 'file' to write per-level log files; include 'stderr' to write to the console. Default is stderr.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_LOG_FILE",
          "description": "Base path for the per-level log files. One rotating file is written per level (e.g. mcp_server.info.log, mcp_server.error.log). Only used when 'file' is in CB_MCP_LOG_SINKS. Default is mcp_server.log.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_LOG_MAX_BYTES",
          "description": "Maximum size in bytes per per-level log file before it rotates. Default is 1048576 (1 MB).",
          "isRequired": false,
          "format": "number",
          "isSecret": false
        },
        {
          "name": "CB_MCP_OAUTH_JWT_JWKS_URI",
          "description": "JWKS endpoint of the identity provider used to verify bearer JWT signatures. Required to enable OAuth, along with CB_MCP_OAUTH_JWT_ISSUER and CB_MCP_OAUTH_JWT_AUDIENCE. Only honored when CB_MCP_TRANSPORT=http.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_OAUTH_JWT_ISSUER",
          "description": "Expected JWT 'iss' claim value. Also advertised as the authorization server in Protected Resource Metadata when CB_MCP_OAUTH_MCP_BASE_URL is set. Required to enable OAuth.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_OAUTH_JWT_AUDIENCE",
          "description": "Expected JWT 'aud' claim value. Required to enable OAuth.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_OAUTH_JWT_ALGORITHM",
          "description": "JWT signing algorithm. One of RS256/384/512, ES256/384/512, PS256/384/512. Default is RS256.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        },
        {
          "name": "CB_MCP_OAUTH_MCP_BASE_URL",
          "description": "Public base URL of this MCP server. When set, the server publishes RFC 9728 Protected Resource Metadata at <base_url>/.well-known/oauth-protected-resource/mcp so PRM-aware clients can discover the authorization server. Optional.",
          "isRequired": false,
          "format": "string",
          "isSecret": false
        }
      ]
    }
  ]
}