Atlas / MCP servers / cbcoutinho / Nextcloud

NextcloudCAUTION

Name: Nextcloud
Author: cbcoutinho

mcp/cbcoutinho/nextcloud

MCP server by cbcoutinho · mcp server · model context protocol · nextcloud · Audited 2026-10-03

⚑ Report / re-scan Source ↗

Nextcloud MCP Server

Verdict

CAUTION

Grade

Trust score

52 /100

Exposed tools

12 10r · 2w · 0d

Transport

stdio · streamable-http

License

AGPL-3.0

Stars

373

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/cbcoutinho/nextcloud-mcp-server/pkgs/container/nextcloud-mcp-server)

A production-ready MCP server that connects AI assistants to your Nextcloud instance.

Enable Large Language Models like Claude, GPT, and Gemini to interact with your Nextcloud data through a secure API. Create notes, manage calendars, organize contacts, work with files, and more - all through natural language conversations.

This is a dedicated standalone MCP server designed for external MCP clients like Claude Code and IDEs. It runs independently of Nextcloud (Docker, VM, Kubernetes, or local) and provides deep CRUD operations across Nextcloud apps.

[!NOTE] Want AI features inside Nextcloud instead? You can point Nextcloud's own Assistant at this server — see AI inside Nextcloud below.

[!TIP] Don't want to self-host? Astrolabe Cloud is a managed hosting service for this MCP server, aimed at users and teams who want advanced features like background sync and semantic search without operating the infrastructure themselves. The service is currently under development — sign up on the landing page to join the early-adopter list.

Quick Start

Run the server locally with uvx (no installation required):

NEXTCLOUD_HOST=https://your.nextcloud.instance.com \
NEXTCLOUD_USERNAME=your_username \
NEXTCLOUD_PASSWORD=your_app_password \
uvx nextcloud-mcp-server run --transport stdio

Or add it directly to your MCP client configuration (e.g. claude_desktop_config.json or .claude/settings.json):

{
"mcpServers": {
"nextcloud": {
"command": "uvx",
"args": ["nextcloud-mcp-server", "run", "--transport", "stdio"],

Read from source at commit 814ca78437c0OBSERVED · 2026-10-03

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add nextcloud-mcp-server --env CUSTOM_PROCESSOR_API_KEY=${CUSTOM_PROCESSOR_API_KEY} --env NEXTCLOUD_OIDC_TOKEN_TYPE=${NEXTCLOUD_OIDC_TOKEN_TYPE} --env NEXTCLOUD_PASSWORD=${NEXTCLOUD_PASSWORD} --env PACT_PASSWORD=${PACT_PASSWORD} -- uvx nextcloud-mcp-server

claude-desktop

{
  "mcpServers": {
    "nextcloud-mcp-server": {
      "command": "uvx",
      "args": [
        "nextcloud-mcp-server"
      ],
      "env": {
        "CUSTOM_PROCESSOR_API_KEY": "${CUSTOM_PROCESSOR_API_KEY}",
        "NEXTCLOUD_OIDC_TOKEN_TYPE": "${NEXTCLOUD_OIDC_TOKEN_TYPE}",
        "NEXTCLOUD_PASSWORD": "${NEXTCLOUD_PASSWORD}",
        "PACT_PASSWORD": "${PACT_PASSWORD}"
      }
    }
  }
}

Exposed tools (12)

10 read · 2 write · 0 destructive.

Tool	Risk	Description
`boom`	read	raise Bang
`denied`	read	raise ScopeDenied(
`get_item`	read	return Item(name=
`leaky_tool`	read	raise _http_error(404)
`my_tool`	read	client = await get_client(ctx)
`nc_notes_create_note`	write	return
`nc_semantic_search`	read	raise ValueError(
`peek`	read	A tool, to prove the bridge is live on tools/call too.
`raises_mcp_error`	read	The shape ~140 of our tool raise sites use.
`raises_nextcloud_404`	read	An unhandled Nextcloud HTTP failure escaping a tool.
`start_login`	write	Drives progressive consent exactly as the auth path does.
`tailored_tool`	read	raise MCPError(code=-1, message=

Trust audit

CAUTIONgrade F · trust 52/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (6 observation(s))
Network: declared (6 observation(s))
Shell: none-observed
Dependencies: pinned
Secrets in source: found

Findings (25)

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

env.sample:123

#   - "client_id"                   → loopback redirect URIs (http://localhost:*, http://127.0.0.1:*)

MEDIUMHard-coded secrets · secret.db_uri · CWE-798, CWE-321

tests/unit/test_decomposition_config.py:193

== "postgresql://mcp:p%40ss@db:5432/mcp?sslmode=require&connect_timeout=7"

MEDIUMHard-coded secrets · secret.db_uri · CWE-798, CWE-321

tests/unit/test_decomposition_config.py:217

== "postgresql://mcp:s@db/mcp?sslmode=require"

MEDIUMHard-coded secrets · secret.db_uri · CWE-798, CWE-321

tests/unit/test_decomposition_config.py:228

assert config_module.get_procrastinate_conninfo() == "postgresql://mcp:s@db/mcp"