Atlas / MCP servers / redis / Redis Cloud API

Redis Cloud APISAFE

mcp/redis/redis-cloud-api
Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
18 13r · 4w · 1d
Transport
stdio
License
MIT
Stars
43
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Model Context Protocol (MCP) is a standardized protocol for managing context between large language models (LLMs) and external systems. This repository provides an MCP Server for Redis Cloud's API, allowing you to manage your Redis Cloud resources using natural language.

This lets you use Claude Desktop, or any MCP Client, to use natural language to accomplish things on your Redis Cloud account, e.g.:

  • "Create a new Redis database in AWS"
  • "What are my current subscriptions?"
  • "Help me choose the right Redis database for my e-commerce application"

Features

Account Management

  • get_current_account: Get details about your current Redis Cloud account
  • get_current_payment_methods: List all payment methods configured for your account

Subscription Management

Pro Subscriptions

  • get_pro_subscriptions: List all Pro subscriptions in your account
  • create_pro_subscription: Create a new Pro subscription with advanced configuration options
  • Supports multi-cloud deployment
  • Configure memory, persistence, and modules
  • Set up Active-Active deployments
  • Custom networking configuration

Essential Subscriptions

  • get_essential_subscriptions: List all Essential subscriptions (paginated)
  • get_essential_subscription_by_id: Get detailed information about a specific Essential subscription
  • create_essential_subscription: Create a new Essential subscription
  • delete_essential_subscription: Delete an Essential subscription

Database Capabilities

  • get_database_modules: List all available database modules (capabilities) supported in your account
  • Redis modules
  • Database features
  • Performance options

Cloud Provider Management

  • get_pro_plans_regions: Get available regions across cloud providers
  • AWS regions
  • GCP regions
  • Networking options
  • Availability zones

Plans and Pricing

  • get_essentials_plans: List available Essential subscription plans (paginated)
  • Supp
Read from source at commit adb9549c202aOBSERVED · 2026-10-08
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add mcp-redis-cloud --env API_KEY=${API_KEY} --env SECRET_KEY=${SECRET_KEY} -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "mcp-redis-cloud": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "API_KEY": "${API_KEY}",
        "SECRET_KEY": "${SECRET_KEY}"
      }
    }
  }
}
03

Exposed tools (18)

13 read · 4 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

ToolRiskDescription
create-essential-databasewriteCreate a new essential database inside the specified subscription ID. Returns a TASK ID that can be used to track the status of the database creation.
create-essential-subscriptionwriteCreate a new essential subscription. Returns a TASK ID that can be used to track the status of the subscription creation
create-pro-databasewriteCreate a new database inside the specified subscription ID. Returns a TASK ID that can be used to track the status of the database creation
create-pro-subscriptionwriteCreate a new pro subscription. Returns a TASK ID that can be used to track the status of the subscription creation.
delete-essential-subscriptiondestructiveDelete an essential subscription by ID
get-current-accountreadGet the current Cloud Redis account
get-current-payment-methodsreadGet the current payment methods for the current Cloud Redis account
get-database-modulesreadLookup list of database modules supported in current account (support may differ based on subscription and database settings). These modules are also called capabilities.
get-essential-databasesreadGet the essential databases for the provided subscription Id
get-essential-subscription-by-idreadGet an essential subscription by ID for the current Cloud Redis account
get-essential-subscriptionsreadGet the essential subscriptions for the current Cloud Redis account.
get-essentials-plansreadGet the available plans for essential subscriptions. Always ask for which provider the plans are want to be retrieved.
get-pro-databasesreadGet the pro databases for the provided subscription Id
get-pro-plans-regionsreadLookup list of regions for cloud provider. These regions include the providers too.
get-pro-subscriptionreadGet pro subscription by ID. The payload must match the input schema.
get-pro-subscriptionsreadGet the pro subscriptions for the current Cloud Redis account
get-task-by-idreadGet a task by ID for the current Cloud Redis account
get-tasksreadGet the current tasks for the current Cloud Redis account
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (6 observation(s))
Network
declared (1 observation(s))
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (8)

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59
delete-essential-subscription
Why it matters. 1 tool(s) can delete or overwrite
Fix. prefer a read-only mode or scoped tokens; the page states the blast radius
LOWInventory / provenance · inv.hidden_file · CWE-1104
.prettierrc.json
.prettierrc.json
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/clients/generated/core/OpenAPI.ts:2
import { log } from "../../../utils/helpers.js";
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/clients/generated/core/OpenAPI.ts:3
import { getArgValue } from "../../../utils/args.js";
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/tools/account/index.ts:2
import { ToolHandlers } from "../../utils/types.js";
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/tools/account/index.ts:3
import { AccountService } from "../../clients/generated/index.js";
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/tools/account/index.ts:4
import { emptySchema } from "../../utils/common/schemas.js";
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@hey-api/client-fetch, @modelcontextprotocol/sdk, zod, @eslint/js, @hey-api/openapi-ts, @types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser
Why it matters. 19 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha adb9549c202afull audit observations/trust-audit/mcp-server/redis__redis-cloud-api.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-08adb9549c202aSAFEB89first audit
06

Questions

What tools does Redis Cloud API expose?

18 in total: 13 read-only, 4 that write, and 1 that can delete or overwrite (delete-essential-subscription). Every one is listed on this page with its risk.

Is Redis Cloud API safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does Redis Cloud API need?

It reads API_KEY and SECRET_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does Redis Cloud API run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as mcp-redis-cloud at 1.0.0.

How current is this page?

The grade is for one exact copy of the source (adb9549c202a), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement