MCP, MCP server
Mcp Server Couchbase
Couchbase MCP Server is a self-hosted Model Context Protocol (MCP) server that connects AI agents and LLM-powered assistants — Claude, Cursor, Windsurf, VS Code Copilot, and other MCP clients
Compatibility: Not stated.
Grade C
One Medium finding. Read the findings before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit a1f3877ef6b3.
SECRETS_PATH_CREDENTIAL
Why this grade
- SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
src/cb_mcp/utils/operational/embeddings/registry.py, line 188
"(env vars, ~/.aws/credentials, instance role).",
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Note
requests shell access. The manifest names this permission.
PERMISSION_SHELL_DECLARED
src/cb_mcp/core/cli/group.py, line 84
default = self.commands.get(self.default_cmd or "")
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
scripts/run_matrix_local.sh, line 136
curl -s -X PUT \
scripts/run_matrix_local.sh, line 155
if curl -s -u "$CB_USERNAME:$CB_PASSWORD" \
scripts/run_matrix_local.sh, line 175
item_count=$(curl -s -u "$CB_USERNAME:$CB_PASSWORD" \
Show more
scripts/setup_test_data.py, line 70
with urllib.request.urlopen(req, timeout=10) as response:
.github/workflows/alert-on-pr.yml, line 54
pr_resp = requests.get(api_url, headers=headers, timeout=15)
.github/workflows/alert-on-pr.yml, line 69
resp = requests.post(webhook, json={"text": message}, timeout=15)
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/cb_mcp/utils/operational/embeddings/registry.py, line 188
"(env vars, ~/.aws/credentials, instance role).",
src/cb_mcp/utils/operational/embeddings/providers/bedrock.py, line 60
# credential chain (env vars, ~/.aws/credentials, instance role) —
src/cb_mcp/servers/operational_insights/cli.py, line 23
#: can run from the same shell/.env, so reusing them here would silently
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Concern
contains an encoded blob in a file that should be readable.
OBFUSCATION_ENCODED_BLOB
uv.lock, line 1
version = 1
src/cb_mcp/utils/operational/reference_datasets/couchbase_metrics.jsonl, line 1
{"schema_version": 1, "dataset_id": "couchbase_server_metrics", "title": "Couchbase Server metrics reference", "tools": ["get_cluster_metrics"], "source_url": "https://docs.couchba
README.md, line 11
[](https://docs.couchbase.com/mcp-server/get-started/overview.html) [.
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit a1f3877ef6b3. requests shell access. The manifest names this permission. can reach a host that is not written as a fixed address. reads a credential or environment file. contains an encoded blob in a file that should be readable.
Date and source
Date checked:
github.com
Commit graded: a1f3877ef6b3c68a28ff612e0eee0978a76c07a3
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.