The Neon MCP Server implements the Model Context Protocol (MCP), letting AI assistants interact with your Neon projects on your behalf. Your AI agent can interact with Neon via MCP tools or by running Neon CLI commands directly.
Security
The Neon MCP Server grants broad database management capabilities. Always review and authorize actions requested by the LLM before execution. Restrict access to trusted users only. See MCP security guidance.
Quick setup
Install the Neon MCP server into your coding agents with neon mcp:
npx neon@latest mcpIt prompts for where to write the config, which agents to install into, and how to authenticate, then writes it for you.
For agents that support plugins (such as Cursor, Claude Code, and Codex), neon plugins installs the Neon plugin, which bundles the MCP server and agent skills:
npx neon@latest pluginsTo set up the MCP server together with agent skills and a linked Neon project, run neon init in a terminal:
npx neon@latest initConfig generator
Use the generator to build an MCP config for your editor and auth method, including the Authorization header for API key or remote agent setups.
Configuration
All tools are available by default; select categories to narrow the agent's access through the category query param.
Result
npx add-mcp@latest https://mcp.neon.tech/mcp \
--name Neon{
"mcpServers": {
"Neon": {
"type": "http",
"url": "https://mcp.neon.tech/mcp"
}
}
}Claude connector
The Neon MCP server is an official Claude connector, so you don't need a custom connector URL. To add it in Claude.ai or Claude Desktop:
- Open Settings from your profile menu (bottom-left of the sidebar).
- Select Connectors (sometimes shown under Customize > Connectors).
- Click Browse connectors (top-right of that page), find Neon, and add it.
- Authorize access to your Neon account.
For other clients, use Quick setup or the config generator above.
Access control
The Neon MCP Server supports URL parameters to restrict scope and permissions. Append them to the MCP URL (https://mcp.neon.tech/mcp).
Read-only mode
Append ?readonly=true to restrict the server to read operations:
https://mcp.neon.tech/mcp?readonly=trueSELECT queries and schema inspection remain available. Write operations (creating branches, running migrations, modifying auth config) are disabled.
With OAuth, you can also choose read-only scope during the authorization flow instead of using the URL parameter.
Project-scoped mode
Scope all operations to a single project:
https://mcp.neon.tech/mcp?projectId=<your-project-id>Cross-project search and navigation are disabled in this mode.
Category filtering
Restrict active tools to specific categories using ?category=<name> (repeatable):
https://mcp.neon.tech/mcp?category=querying&category=schemaSee Available tools for the full category list. To verify which tools are active for a given config without authenticating:
curl "https://mcp.neon.tech/api/list-tools?readonly=true&category=querying"MCP security guidance
We recommend MCP for development and testing only, not production environments.
- Use MCP only for local development or IDE-based workflows
- Never connect MCP agents to production databases
- Avoid exposing production or PII data; use anonymized data only
- Always review and authorize LLM-requested actions before execution
- Restrict MCP access to trusted users and regularly audit access
Allowlist IP addresses
The hosted Neon MCP Server (mcp.neon.tech) connects to your Neon databases from the following static IP addresses:
34.192.103.4623.22.233.166
If IP Allow is enabled on your project, add these addresses to your allowlist so the MCP server can connect.
Database diagnostics
When you ask why a branch is slow, large, or behind, the MCP server can run inspect_database instead of inventing catalog SQL. It exposes the same 15 read-only checks as neon inspect db: table and index sizes, unused indexes, sequential scans, long-running and stalled queries and locks, heavy and frequent statements, cache hit rate and working set, autovacuum and bloat, and replication state. The stalled-queries check reports active queries running longer than 30 seconds, with their waits, blockers, parallel workers, query IDs, and query text.
Pick a check with the check parameter (for example table-sizes or unused-indexes). The tool runs inside a read-only transaction, so it works with ?readonly=true. It belongs to the querying category, not observability. Some checks need pg_stat_statements or the neon extension; the tool reports that and asks before suggesting installation.
Available tools
Tools are grouped into categories. Use the ?category= URL parameter to restrict which categories are active. You can pass it more than once to enable multiple categories.
| Category | What it enables |
|---|---|
Project management (projects) | List, create, describe, and delete projects; list organizations |
Branch management (branches) | Create, reset, and delete branches; manage Postgres roles and databases |
Compute endpoints (endpoints) | List, create, start, suspend, and restart branch computes |
Snapshots (snapshots) | Create, restore, and schedule snapshots |
Schema (schema) | Inspect tables and columns; compare schemas |
SQL (querying) | Execute queries and transactions; apply schema changes on a temporary branch; run the same diagnostics as neon inspect db |
Managed Better Auth (neon_auth) | Provision Auth; manage OAuth providers, trusted domains, and users |
Neon Data API (data_api) | Enable, update, and disable the Data API for a branch |
Observability (observability) | Query function and storage logs; check AI Gateway availability |
Documentation (docs) | Look up Neon documentation from within your assistant (no OAuth required) |
Functions (functions) | List, deploy, update, and delete Neon Functions |
Object storage (storage) | Manage buckets and objects; create presigned URLs |
Search and navigation tools (search across projects, fetch resource details by ID) are available by default but disabled in project-scoped mode.
Schema tools accept schema-qualified table names, such as crm.contacts. An unqualified name resolves against the database search_path, which defaults to the public schema.
The querying category includes inspect_database, which runs the same 15 read-only checks as neon inspect db: relation and index sizes, unused indexes, sequential scans, active queries and locks, stalled queries running longer than 30 seconds, heavy and frequent statements, cache hit rate and working set, autovacuum and bloat, and replication state. Some checks need pg_stat_statements or the neon extension; the tool asks before suggesting CREATE EXTENSION.
note
The observability tools query Neon Functions logs and object storage logs, which are part of the Neon backend beta, currently available in AWS us-east-2 only. Log querying returns results only for projects in a supported region. Database diagnostics via inspect_database are under querying, not observability.
Troubleshooting
For per-client setup instructions, see Connect MCP clients.
Deprecated local stdio
important
The local stdio package (@neondatabase/mcp-server-neon) is deprecated. Use the hosted server at https://mcp.neon.tech/mcp.
If your client only supports local stdio servers, put one of these in the client config so mcp-remote bridges to Streamable HTTP.
OAuth:
{
"mcpServers": {
"Neon": {
"command": "npx",
"args": ["-y", "mcp-remote@latest", "https://mcp.neon.tech/mcp"]
}
}
}API key:
{
"mcpServers": {
"Neon": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://mcp.neon.tech/mcp",
"--header",
"Authorization:${NEON_AUTH_HEADER}"
],
"env": {
"NEON_AUTH_HEADER": "Bearer <YOUR_NEON_API_KEY>"
}
}
}
}Deprecated HTTP+SSE transport
important
The hosted Neon MCP Server uses Streamable HTTP at https://mcp.neon.tech/mcp. The older HTTP+SSE endpoint (https://mcp.neon.tech/sse) is deprecated and will stop working on or after October 1, 2026. When it is retired it returns 410 Gone. SSE is not supported with API key authentication.
If your client still points at /sse, change the URL to https://mcp.neon.tech/mcp.
Resources
Need help?
Join our Discord Server to ask questions or see what others are doing with Neon. For paid plan support options, see Support.