This server has been archived and is no longer actively maintained.
Nextcloud MCP Server is an MCP server that nextcloud MCP Server. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 47/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"nextcloud": {
"env": {
"NEXTCLOUD_HOST": "https://your.nextcloud.instance.com",
"NEXTCLOUD_PASSWORD": "your_app_password",
"NEXTCLOUD_USERNAME": "your_username"
},
"args": [
"nextcloud-mcp-server",
"run",
"--transport",
"stdio"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
A production-ready MCP server that connects AI assistants to your Nextcloud instance.
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
uvx 'nextcloud-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
nextcloud-mcp-server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )
## Summary The `POST /webhooks/nextcloud` endpoint has no authentication by default: `WEBHOOK_SECRET` defaults to `None` and is never required by startup validation. When unset, the receiver accepts any unauthenticated POST. The `user_id` is taken directly from the attacker-supplied payload and passed to Qdrant, allowing an unauthenticated attacker to delete or corrupt vector embeddings for any user. ## Details **Vulnerable file:** `nextcloud_mcp_server/vector/webhook_receiver.py`, function `ha
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in productivity / cloud
Gives AI development tools Firebase-specific capabilities and expertise.
Official MCP server for Anytype API - your encrypted, local and collaborative wiki.
Local-first AI memory with knowledge graphs and hybrid search. 17+ AI tools via MCP. Free.
Give AI agents access to your Obsidian vault via local files or Self-hosted LiveSync.
MCP Security Weekly
Get CVE alerts and security updates for Nextcloud Mcp Server and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.