Appwrite Security MCP Server

MCP server for Appwrite security audits. Scan permissions, get a structured fix proposal, all from inside Claude Code, Cursor, or Cline. Active probe confirms every leak live with an anonymous fetch.

Tools

apply_fix is intentionally not in v0.1 because Appwrite permission updates are full-replacement — a partial agent diff would silently drop perms. Apply manually in the Appwrite console after preview_fix.

Related MCP server: supabase-security-mcp

Install

{
  "mcpServers": {
    "appwrite-security": {
      "command": "npx",
      "args": ["-y", "@perufitlife/appwrite-security-mcp"],
      "env": {
        "APPWRITE_ENDPOINT": "https://cloud.appwrite.io/v1",
        "APPWRITE_PROJECT_ID": "...",
        "APPWRITE_API_KEY": "..."
      }
    }
  }
}

API key needs scopes: databases.read, collections.read, projects.read.

License

MIT. Open source. Built by @Perufitlife.

For the standalone CLI, see https://github.com/Perufitlife/appwrite-security-skill For Supabase MCP, see https://github.com/Perufitlife/supabase-security-mcp For PocketBase MCP, see https://github.com/Perufitlife/pocketbase-security-mcp