A simple Neo4j MCP server
MCP Neo4j Cypher is an MCP server that a simple Neo4j MCP server. Its tool list has not been published yet over stdio, requires no API key, and scores 30/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"mcp-neo4j-cypher": {
"command": "uvx",
"args": [
"mcp-neo4j-cypher"
]
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
A simple Neo4j MCP server
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
uvx 'mcp-neo4j-cypher' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures
### Summary The `read_only` mode in `mcp-neo4j-cypher` versions prior to 0.6.0 can be bypassed using `CALL` procedures. ### Details #### Impact The enforcing of `read_only` mode in vulnerable versions could be bypassed by certain APOC procedures. #### Patches v0.6.0 release hardened the checks around the mode. The only way to guarantee the server actions is to limit the permissions of the db credentials available to the server. ### Notes Impacts for server-side request forgery vulnerabilitie
Neo4j Cypher MCP server is vulnerable to DNS rebinding
### Impact DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend sufficient time there for DNS rebinding to succeed. ### Patches CORS Middleware added to Cypher MCP server v0.4.0 that blocks all web-based access by default. ### Workarounds If you cannot u
This server is missing a description. Tools and install config are also missing. If you've used it, help the community.
Add informationBe the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in data
Token-efficient database MCP server for PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, SQLite
Extract data from any website with thousands of scrapers, crawlers, and automations on Apify Store ⚡
Firecrawl, the context API for AI agents: search, scrape, interact with the web, plus paper search.
Manage Supabase projects — databases, auth, storage, and edge functions
MCP Security Weekly
Get CVE alerts and security updates for Mcp Neo4j Cypher and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.