RabbitMQCAUTION
MCP server for interacting with RabbitMQ
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
This project is now re-homed to this repo
f855ee438742OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp-server-rabbitmq -- uvx mcp-server-rabbitmq
{
"mcpServers": {
"mcp-server-rabbitmq": {
"command": "uvx",
"args": [
"mcp-server-rabbitmq"
]
}
}
}Exposed tools (16)
11 read · 2 write · 3 destructive. Blast radius: 3 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
delete_exchange | destructive | Delete a specific exchange. |
delete_queue | destructive | Delete a specific queue. |
enqueue | read | Enqueue a message to a queue hosted on RabbitMQ. |
fanout | write | Publish a message to an exchange with fanout type. |
get_exchange_info | read | Get detailed information about a specific exchange. |
get_queue_info | read | Get detailed information about a specific queue. |
get_shovel_info | read | Get detailed information about specific shovel by name that is in a selected virtual host (vhost) in the RabbitMQ broker. |
initialize_connection_to_new_rabbitmq_broker | read | It allows user to connect to a new rabbitmq broker that is different than the one the user configures initially during the start of this server |
list_exchanges | read | List all the exchanges in the broker. |
list_exchanges_by_vhost | read | List all the exchanges for a specific virtual host in the broker. |
list_queues | read | List all the queues in the broker. |
list_queues_by_vhost | read | List all the queues for a specific virtual host (vhost) in the broker. |
list_shovels | read | Get detailed information about shovels in the RabbitMQ broker. |
list_vhosts | read | List all the virtual hosts (vhosts) in the broker. |
publish | write | raise NotImplementedError() |
purge_queue | destructive | Remove all messages from a specific queue. |
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- UNDECLARED (1 observation(s))
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (3)
delete_exchange, delete_queue, purge_queue
streamable-http
.pre-commit-config.yaml
Gates applied: no_behavioural_pass.
f855ee438742full audit observations/trust-audit/mcp-server/kenliao94__rabbitmq.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | f855ee438742 | CAUTION | B | 89 | first audit |
Questions
What is the RabbitMQ MCP server?
MCP server for interacting with RabbitMQ
What tools does RabbitMQ expose?
16 in total: 11 read-only, 2 that write, and 3 that can delete or overwrite (delete_exchange, delete_queue, purge_queue). Every one is listed on this page with its risk.
Is RabbitMQ safe to connect to an agent?
With care. The audit graded it B (89/100) and found 3 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 3 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does RabbitMQ need?
No credential environment variables were found in its source, so it appears to need none.
How does RabbitMQ run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on PyPI as mcp-server-rabbitmq.
How current is this page?
The grade is for one exact copy of the source (f855ee438742), read on 2026-10-08. The repository is watched and re-audited when it changes.