Server data from the Official MCP Registry
Read and write access to Airtable database schemas, tables, and records.
Read and write access to Airtable database schemas, tables, and records.
This MCP server provides read and write access to Airtable databases with appropriate authentication via API keys. The codebase demonstrates solid security practices including proper credential handling through environment variables, input validation via Zod schemas, and clear warnings about HTTP transport risks. Minor code quality issues (broad error catching, some logging concerns) and the use of loose object validation in one area prevent a higher score, but no critical vulnerabilities were identified. Supply chain analysis found 4 known vulnerabilities in dependencies (1 critical, 2 high severity). Package verification found 1 issue.
5 files analyzed · 10 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: AIRTABLE_API_KEY
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-domdomegg-airtable-mcp-server": {
"env": {
"AIRTABLE_API_KEY": "your-airtable-api-key-here"
},
"args": [
"-y",
"airtable-mcp-server"
],
"command": "npx"
}
}
}From the project's GitHub README.
A Model Context Protocol server that provides read and write access to Airtable databases. This server enables LLMs to inspect database schemas, then read and write records.
https://github.com/user-attachments/assets/c8285e76-d0ed-4018-94c7-20535db6c944
Follow the instructions on install-mcp, which generates the right config for your MCP client (Claude Code, Claude Desktop, Cursor, Cline, VS Code, and more).
You'll need an Airtable personal access token — create one here with scopes schema.bases:read and data.records:read (and optionally schema.bases:write, data.records:write, data.recordComments:read, data.recordComments:write), and access to the bases you want to use. It looks something like pat123.abc123 (but longer). Set it as AIRTABLE_API_KEY (replacing the placeholder in the generated config).
list_records
baseId (string, required): The ID of the Airtable basetableId (string, required): The ID of the table to querymaxRecords (number, optional): Maximum number of records to return. Defaults to 100.filterByFormula (string, optional): Airtable formula to filter recordssearch_records
baseId (string, required): The ID of the Airtable basetableId (string, required): The ID of the table to querysearchTerm (string, required): Text to search for in recordsfieldIds (array, optional): Specific field IDs to search in. If not provided, searches all text-based fields.maxRecords (number, optional): Maximum number of records to return. Defaults to 100.list_bases
list_tables
baseId (string, required): The ID of the Airtable basedetailLevel (string, optional): The amount of detail to get about the tables (tableIdentifiersOnly, identifiersOnly, or full)detailLevel)describe_table
baseId (string, required): The ID of the Airtable basetableId (string, required): The ID of the table to describedetailLevel (string, optional): The amount of detail to get about the table (tableIdentifiersOnly, identifiersOnly, or full)get_record
baseId (string, required): The ID of the Airtable basetableId (string, required): The ID of the tablerecordId (string, required): The ID of the record to retrievecreate_record
baseId (string, required): The ID of the Airtable basetableId (string, required): The ID of the tablefields (object, required): The fields and values for the new recordupdate_records
baseId (string, required): The ID of the Airtable basetableId (string, required): The ID of the tablerecords (array, required): Array of objects containing record ID and fields to updatedelete_records
baseId (string, required): The ID of the Airtable basetableId (string, required): The ID of the tablerecordIds (array, required): Array of record IDs to deletecreate_table
baseId (string, required): The ID of the Airtable basename (string, required): Name of the new tabledescription (string, optional): Description of the tablefields (array, required): Array of field definitions (name, type, description, options)update_table
baseId (string, required): The ID of the Airtable basetableId (string, required): The ID of the tablename (string, optional): New name for the tabledescription (string, optional): New description for the tablecreate_field
baseId (string, required): The ID of the Airtable basetableId (string, required): The ID of the tablename (string, required): Name of the new fieldtype (string, required): Type of the fielddescription (string, optional): Description of the fieldoptions (object, optional): Field-specific optionsupdate_field
baseId (string, required): The ID of the Airtable basetableId (string, required): The ID of the tablefieldId (string, required): The ID of the fieldname (string, optional): New name for the fielddescription (string, optional): New description for the fieldcreate_comment
baseId (string, required): The ID of the Airtable basetableId (string, required): The ID of the tablerecordId (string, required): The ID of the recordtext (string, required): The comment textparentCommentId (string, optional): Parent comment ID for threaded replieslist_comments
baseId (string, required): The ID of the Airtable basetableId (string, required): The ID of the tablerecordId (string, required): The ID of the recordpageSize (number, optional): Number of comments to return (max 100, default 100)offset (string, optional): Pagination offset for retrieving additional commentsThe server can also run in HTTP mode for use with remote MCP clients:
MCP_TRANSPORT=http PORT=3000 npx airtable-mcp-server
This starts a stateless HTTP server at http://localhost:3000/mcp.
[!WARNING] The HTTP transport has no built-in authentication, and binding to localhost or a private network is not a security boundary against browsers: a malicious website can use DNS rebinding to make a visitor's browser send requests to
http://localhost:3000/mcpand invoke tools — including reading, writing and deleting records — using this server's Airtable token.Only run HTTP mode where untrusted callers (including browsers on the same machine or network) cannot reach
/mcpwithout authenticating. In practice that means putting it behind a reverse proxy or gateway that requires a credential a browser won't attach cross-origin, such as anAuthorizationheader.If you just want to use this server with an MCP client on the same machine, use the default stdio transport instead — it doesn't open a port at all.
Pull requests are welcomed on GitHub! To get started:
npm installnpm run test to run testsnpm run buildnpm run build:watch to automatically build after editing src/index.ts. This means you can hit save, reload Claude Desktop (with Ctrl/Cmd+R), and the changes apply.Versions follow the semantic versioning spec.
To release:
npm version <major | minor | patch> to bump the versiongit push --follow-tags to push with tagsBe the first to review this server!
by Modelcontextprotocol · Productivity
Knowledge graph-based persistent memory across sessions
by Modelcontextprotocol · Productivity
Time and timezone conversion capabilities for your AI assistant
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.