Is Streamnative Mcp Server safe to use?

Streamnative Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.

How do I install Streamnative Mcp Server?

Streamnative Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Streamnative Mcp Server do?

Streamnative Mcp Server provides 8 tools: all, Overview, Features, Installation, Usage and 3 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Streamnative Mcp Server?

Streamnative Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Streamnative Mcp Server actively maintained?

Streamnative Mcp Server is actively maintained — last commit was 10 days ago. It has 24 GitHub stars.

Streamnative MCP Server

Name: Streamnative MCP Server
Author: streamnative

Official

@modelcontextprotocol/inspector · by streamnative

Developer-friendly MCP server bridging Kafka and Pulsar protocols—built with ❤️ by StreamNative for an agentic, streaming-first future.

24 249.7k/wk 8 tools GitHub npm PyPI

No known CVEs

Apache-2.0 license

Actively maintained

Last commit 10d ago

Works with most clients

Transport: stdio, sse, http

8 tools · ~338 tok

Grade A · 0.2% of 200K ctx

MCPpedia last refreshed this data 8h ago

Edit this pageView history

Streamnative MCP Server is an MCP server that developer-friendly MCP server bridging Kafka and Pulsar protocols—built with ❤️ by StreamNative for an agentic, streaming-first future. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 93/100 on MCPpedia's security, maintenance and efficiency rubric.

Data

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp-streamnative": {
      "args": [
        "stdio",
        "--organization",
        "${STREAMNATIVE_CLOUD_ORGANIZATION_ID}",
        "--key-file",
        "${STREAMNATIVE_CLOUD_KEY_FILE}"
      ],
      "command": "${PATH_TO_SNMCP}/bin/snmcp"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/streamnative-mcp-server)](https://mcppedia.org/s/streamnative-mcp-server)

Read me

What Streamnative Mcp Server does

A Model Context Protocol (MCP) server for integrating AI agents with StreamNative Cloud resources and Apache Kafka/Pulsar messaging systems.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@modelcontextprotocol/inspector' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

93/100across 5 weighted dimensions

How we score →

0255075100

−7

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

2 fixed

CVE-2025-58444high · fixed

MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server

An XSS flaw exists in the MCP Inspector local development tool when it renders a redirect URL returned by a remote MCP server. If the Inspector connects to an untrusted server, a crafted redirect can inject script into the Inspector context and, via the built-in proxy, be leveraged to trigger arbitrary command execution on the developer machine. Version 0.16.6 hardens URL handling/validation and prevents script execution. > Thank you to the following researchers for their reports and contributi

Affected: >= 0Fixed in 0.16.6source →

CVE-2025-49596critical · fixed

MCP Inspector proxy server lacks authentication between the Inspector client and proxy

Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio. Users should immediately upgrade to version 0.14.1 or later to address these vulnerabilities. Credit: Rémy Marot <bughunters@tenable.com>

Affected: >= 0Fixed in 0.14.1source →

Inventory

Tools (8)

Click any tool to inspect its schema.

~338 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Streamnative Mcp Server safe to use?: Streamnative Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install Streamnative Mcp Server?: Streamnative Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Streamnative Mcp Server do?: Streamnative Mcp Server provides 8 tools: all, Overview, Features, Installation, Usage and 3 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Streamnative Mcp Server?: Streamnative Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Streamnative Mcp Server actively maintained?: Streamnative Mcp Server is actively maintained — last commit was 10 days ago. It has 24 GitHub stars.

Similar servers

Others in data

View all →

Supabase MCP Server96

Manage Supabase projects — databases, auth, storage, and edge functions

2.9k 4

Firecrawl Mcp Server95

🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM clients.

7.3k 4

Mcp Server Typescript94

DataForSEO API modelcontextprotocol server

240 9

Apify Mcp Server94

The Apify MCP server enables your AI agents to extract data from social media, search engines, maps, e-commerce sites, or any other website using thousands of ready-made scrapers, crawlers, and automation tools available on the Apify Store.

4.6k 1

MCP Security Weekly

Get CVE alerts and security updates for Streamnative Mcp Server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Data

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp-streamnative": {
      "args": [
        "stdio",
        "--organization",
        "${STREAMNATIVE_CLOUD_ORGANIZATION_ID}",
        "--key-file",
        "${STREAMNATIVE_CLOUD_KEY_FILE}"
      ],
      "command": "${PATH_TO_SNMCP}/bin/snmcp"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/streamnative-mcp-server)](https://mcppedia.org/s/streamnative-mcp-server)

Read me

What Streamnative Mcp Server does

A Model Context Protocol (MCP) server for integrating AI agents with StreamNative Cloud resources and Apache Kafka/Pulsar messaging systems.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@modelcontextprotocol/inspector' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

StreamNative MCP Server

A Model Context Protocol (MCP) server for integrating AI agents with StreamNative Cloud resources and Apache Kafka/Pulsar messaging systems.

Overview

StreamNative MCP Server provides a standard interface for LLMs (Large Language Models) and AI agents to interact with StreamNative Cloud services, Apache Kafka, and Apache Pulsar. This implementation follows the Model Context Protocol specification, enabling AI applications to access messaging services through a standardized interface.

The server currently negotiates MCP protocol versions 2025-11-25, 2025-06-18, 2025-03-26, and 2024-11-05. The default preference is 2025-11-25, while older clients remain supported through protocol negotiation.

Features

StreamNative Cloud Integration:
- Connect to StreamNative Cloud resources with authentication
- Switch to clusters available in your organization
- Describe the status of clusters resources
Apache Kafka Support: Interact with Apache Kafka resources including:
- Kafka Admin operations (topics, partitions, consumer groups)
- Schema Registry operations
- Kafka Connect operations (*)
- Kafka Client operations (producers, consumers)
Apache Pulsar Support: Interact with Apache Pulsar resources including:
- Pulsar Admin operations (topics, namespaces, tenants, schemas, etc.)
- Pulsar Client operations (producers, consumers)
- Functions, Sources, and Sinks management
- Read-only MCP resources for context, catalog, and bounded admin summaries
Multiple Connection Options:
- Connect to StreamNative Cloud with service account authentication
- Connect directly to external Apache Kafka clusters
- Connect directly to external Apache Pulsar clusters

*: The Kafka Connect operations are only tested and verified on StreamNative Cloud.

Installation

Homebrew (macOS and Linux)

The easiest way to install streamnative-mcp-server is using Homebrew:

# Add the tap repository
brew tap streamnative/streamnative

# Install streamnative-mcp-server
brew install streamnative/streamnative/snmcp

Docker Image

StreamNative MCP Server releases the Docker Image to streamnative/snmcp, and it can be used to run both stdio server and sse server via docker command.

# Pull image from Docker Hub
docker pull streamnative/snmcp

Helm Chart (Kubernetes)

See charts/snmcp/README.md for Helm installation via the StreamNative chart repository.

From Github Release

Visit https://github.com/streamnative/streamnative-mcp-server/releases to get the latest binary of StreamNative MCP Server.

From Source

# Clone the repository
git clone https://github.com/streamnative/streamnative-mcp-server.git
cd streamnative-mcp-server

go mod tidy
go mod download

# Build the binary
make

Usage

Prerequisites

If you want to access to your StreamNative Cloud, you will need to have following resources ready:

Access to StreamNative Cloud.
StreamNative Cloud Organization
StreamNative Cloud instance and cluster
Service Account with admin role
Download the Service Account Key file

Start the MCP Server

Using stdio Server

# Start MCP server with StreamNative Cloud authentication
bin/snmcp stdio --organization my-org --key-file /path/to/key-file.json

# Start MCP server with StreamNative Cloud authentication and pre-configured context
# When --pulsar-instance and --pulsar-cluster are provided, context mutation tools are disabled
bin/snmcp stdio --organization my-org --key-file /path/to/key-file.json --pulsar-instance my-instance --pulsar-cluster my-cluster

# Start MCP server with external Kafka
bin/snmcp stdio --use-external-kafka --kafka-bootstrap-servers localhost:9092 --kafka-auth-type SASL_SSL --kafka-auth-mechan

... [View full README on GitHub](https://github.com/streamnative/streamnative-mcp-server#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

93/100across 5 weighted dimensions

How we score →

0255075100

−7

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

2 fixed

CVE-2025-58444high · fixed

MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server

Affected: >= 0Fixed in 0.16.6source →

CVE-2025-49596critical · fixed

MCP Inspector proxy server lacks authentication between the Inspector client and proxy

Affected: >= 0Fixed in 0.14.1source →

Inventory

Tools (8)

Click any tool to inspect its schema.

~338 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Streamnative Mcp Server safe to use?: Streamnative Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install Streamnative Mcp Server?: Streamnative Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Streamnative Mcp Server do?: Streamnative Mcp Server provides 8 tools: all, Overview, Features, Installation, Usage and 3 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Streamnative Mcp Server?: Streamnative Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Streamnative Mcp Server actively maintained?: Streamnative Mcp Server is actively maintained — last commit was 10 days ago. It has 24 GitHub stars.