Atlas / MCP servers / confluentinc / Confluent

ConfluentCAUTION

Name: Confluent
Author: confluentinc

mcp/confluentinc/confluent

MCP server by confluentinc · Audited 2026-10-06

⚑ Report / re-scan Source ↗

Verdict

CAUTION

Grade

Trust score

81 /100

Exposed tools

1 1r · 0w · 0d

Transport

sse · stdio · streamable-http

License

MIT

Stars

167

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://www.npmjs.com/package/@confluentinc/mcp-confluent) [](LICENSE)

An open-source MCP server that enables AI assistants to interact with Confluent Cloud, Confluent Platform, and standalone Apache Kafka deployments through natural language. It provides 50+ tools across Kafka, Flink SQL, Schema Registry, Connectors, Tableflow, and more -- usable from any MCP-compatible client including Claude Desktop, Claude Code, Cursor, VS Code, Goose, and Gemini CLI.

[!TIP] Already a Confluent Cloud customer? Confluent offers a fully managed MCP server with no local server to run and no dependencies to install. It provides access to your Confluent Cloud resources with AI-powered connector diagnostics, governed by your existing RBAC permissions. Use this open-source server if you need Confluent Platform / self-managed Kafka support, or want to customize and extend the toolset. NOTE: The open-source MCP server is a community-supported project. Confluent doesn’t provide dedicated support for it, and support is best-effort only, with no service level commitments. If you run into an issue or want to contribute, open an issue or pull request directly in this repository.

Quick Start

Prerequisites: Node.js 22.19.0+. If you want to interact with Confluent Cloud, you need to create an account first.

Generate a quick config.yaml file in your project root:

npx @confluentinc/mcp-confluent --init-config

Edit the config.yaml file with your connection details, then:

npx @confluentinc/mcp-confluent --config ./config.yaml

See Getting Started for full setup instructions

Read from source at commit 82b223578decOBSERVED · 2026-10-06

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add mcp-confluent --env CONFLUENT_CLOUD_PASSWORD=${CONFLUENT_CLOUD_PASSWORD} --env TELEMETRY_WRITE_KEY=${TELEMETRY_WRITE_KEY} -- npx -y @confluentinc/[email protected]

claude-desktop

{
  "mcpServers": {
    "mcp-confluent": {
      "command": "npx",
      "args": [
        "-y",
        "@confluentinc/[email protected]"
      ],
      "env": {
        "CONFLUENT_CLOUD_PASSWORD": "${CONFLUENT_CLOUD_PASSWORD}",
        "TELEMETRY_WRITE_KEY": "${TELEMETRY_WRITE_KEY}"
      }
    }
  }
}

Exposed tools (1)

1 read · 0 write · 0 destructive.

Tool	Risk	Description
`mcp`	read	Model Context Protocol endpoints

Trust audit

CAUTIONgrade B · trust 81/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (3 observation(s))
Network: declared (1 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: found

Findings (25)

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532

src/server-main.ts:154

console.log(apiKey);

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532

src/server-main.ts:157

console.log(`MCP_API_KEY=${apiKey}\n`);

MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321

test-fixtures/yaml_configs/invalid/server-auth-disabled-with-api-key.yaml:10

api_key: "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"

LOWInventory / provenance · inv.hidden_file · CWE-1104

.cursorignore

.cursorignore

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.env.integration.example

.env.integration.example

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.prettierignore

.prettierignore

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/config/yaml-fixtures.test.ts:10

new URL("../../test-fixtures/yaml_configs", import.meta.url),

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/config/yaml-fixtures.test.ts:428

new URL("../../config.example.yaml", import.meta.url),

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/config/yaml-fixtures.test.ts:454

new URL("../../sample_configs", import.meta.url),

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/confluent/middleware.ts:3

import pkg from "../../package.json" with { type: "json" };

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/confluent/oauth/callback-pages.ts:12

"../../../assets/oauth-templates/",

LOWNetwork egress · net.beacon_words · CWE-200, CWE-319

src/confluent/oauth/pkce-login.test.ts:272

describe("install hint beacon + stream", () => {

LOWNetwork egress · net.beacon_words · CWE-200, CWE-319

src/confluent/oauth/pkce-login.test.ts:326

it("should track AGENT_SKILLS_HINT_COPIED on POST to the beacon path", async () => {

LOWNetwork egress · net.beacon_words · CWE-200, CWE-319

src/confluent/oauth/pkce-login.test.ts:340

it("should reject non-POST methods on the beacon path with 405", async () => {