Mcp For Api — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp For Api (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 2 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.The text {match} is the classic direct prompt-injection phrasing. Placed in a skill body that the agent reads as trusted instructions, it tries to make the agent abandon its prior rules and follow whatever comes next — a full system-prompt override.
ignore/disregard/forget … previous instructions sentence.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<!-- mcp-name: io.github.appwrite/mcp -->
A Model Context Protocol server for Appwrite. It exposes Appwrite's API — databases, users, functions, teams, storage, and more — as tools your MCP client can call.
Connect to the hosted server at `https://mcp.appwrite.io/` and authenticate through your browser. The first time you connect, your client opens an Appwrite consent screen; approve the scopes and you're connected. There are no keys to copy. The conventional https://mcp.appwrite.io/mcp URL is also supported and connects to the same server.
How the Appwrite MCP server handles OAuth and scopes
Pick your client below. Each adds the hosted Appwrite Cloud server.
<details open> <summary><b>Claude Code</b></summary>
claude mcp add --transport http appwrite https://mcp.appwrite.io/Then, inside a Claude Code session, run /mcp, select appwrite, and follow the browser prompt to authenticate.
</details>
<details> <summary><b>Claude Desktop</b></summary>
Go to Settings → Connectors → Add custom connector and paste https://mcp.appwrite.io/. Available on Pro and Max plans; on Team and Enterprise plans only an organization Owner can add custom connectors.
If you don't see that option (free plan, or a Team/Enterprise member), bridge the remote server through stdio instead (requires Node.js). Go to Settings → Developer → Local MCP servers, click Edit Config, and add:
{
"mcpServers": {
"appwrite": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://mcp.appwrite.io/"]
}
}
}Restart Claude Desktop; the server appears under Local MCP servers and a browser window opens to authenticate.
Appwrite server running under Local MCP servers in Claude Desktop
</details>
<details> <summary><b>Cursor</b></summary>
Edit ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).
{
"mcpServers": {
"appwrite": {
"url": "https://mcp.appwrite.io/"
}
}
}Cursor prompts you to log in through the browser; the server then shows up under Settings → MCP with its tools enabled.
Appwrite server connected in Cursor's MCP settings
</details>
<details> <summary><b>VS Code</b> (GitHub Copilot)</summary>
Edit .vscode/mcp.json (workspace) or your user configuration via the Command Palette → MCP: Open User Configuration.
{
"servers": {
"appwrite": {
"type": "http",
"url": "https://mcp.appwrite.io/"
}
}
}</details>
<details> <summary><b>Codex</b></summary>
Edit ~/.codex/config.toml.
[mcp_servers.appwrite]
url = "https://mcp.appwrite.io/"Then authenticate from the terminal:
codex mcp login appwriteIn the Codex GUI, you can instead add the server from the MCP settings — set the URL to https://mcp.appwrite.io/ and leave the token and header fields empty (authentication happens through the browser):
Appwrite MCP server settings in the Codex GUI
</details>
<details> <summary><b>OpenCode</b></summary>
Edit opencode.json (project) or ~/.config/opencode/opencode.json (global).
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"appwrite": {
"type": "remote",
"url": "https://mcp.appwrite.io/",
"enabled": true
}
}
}</details>
<details> <summary><b>Windsurf</b></summary>
Edit ~/.codeium/windsurf/mcp_config.json.
{
"mcpServers": {
"appwrite": {
"serverUrl": "https://mcp.appwrite.io/"
}
}
}</details>
<details> <summary><b>Gemini CLI</b></summary>
gemini mcp add --transport http appwrite https://mcp.appwrite.io/Or edit ~/.gemini/settings.json (note the key is httpUrl, not url):
{
"mcpServers": {
"appwrite": {
"httpUrl": "https://mcp.appwrite.io/"
}
}
}Gemini CLI opens the browser OAuth flow automatically on first connect. To re-authenticate, run /mcp auth appwrite inside a session.
</details>
<details> <summary><b>Antigravity (CLI & 2.0)</b></summary>
Edit ~/.gemini/config/mcp_config.json (global) or .agents/mcp_config.json (project workspace).
{
"mcpServers": {
"appwrite": {
"serverUrl": "https://mcp.appwrite.io/"
}
}
}⚠️ Note: Antigravity strictly requires theserverUrlkey for remote transport. Using legacy fields likeurlorhttpUrlwill cause tool registration to fail silently.
Antigravity opens the browser OAuth flow automatically on first connect. If you manually edit the JSON file, navigate to Settings → Customizations → Installed MCP Servers and click Refresh to reload the tool definitions.
</details>
<details> <summary><b>GitHub Copilot CLI</b></summary>
copilot mcp add --transport http appwrite https://mcp.appwrite.io/Or run /mcp add inside a session, or edit ~/.copilot/mcp-config.json:
{
"mcpServers": {
"appwrite": {
"type": "http",
"url": "https://mcp.appwrite.io/"
}
}
}A browser window opens to authenticate on first connect. Check status with /mcp.
</details>
<details> <summary><b>Zed</b></summary>
Go to Settings → AI → MCP Servers → Add Server → Add Remote Server, or add to your settings.json (zed: open settings):
{
"context_servers": {
"appwrite": {
"url": "https://mcp.appwrite.io/"
}
}
}Zed prompts you to authenticate through the browser on first connect.
</details>
<details> <summary><b>Warp</b></summary>
Go to Settings → Agents → MCP servers → + Add, choose the URL-based server type, and enter https://mcp.appwrite.io/.
Warp opens a browser window to authenticate on first connect.
</details>
<details> <summary><b>JetBrains AI Assistant / Junie</b></summary>
JetBrains IDEs don't yet support OAuth for remote MCP servers, so bridge through stdio (requires Node.js). Go to Settings → Tools → AI Assistant → Model Context Protocol (MCP) → Add, switch to the JSON view, and paste:
{
"mcpServers": {
"appwrite": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://mcp.appwrite.io/"]
}
}
}A browser window opens to authenticate on first connect.
</details>
<details> <summary><b>Cline</b></summary>
Cline doesn't yet support OAuth for remote MCP servers, so bridge through stdio (requires Node.js). In the Cline panel, open the MCP Servers icon → Configure tab → Configure MCP Servers, and add:
{
"mcpServers": {
"appwrite": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://mcp.appwrite.io/"]
}
}
}A browser window opens to authenticate on first connect.
</details>
Running your own Appwrite instance? Run the MCP server locally over stdio and authenticate with a project API key. See docs/self-hosted.md for per-client setup.
internal Appwrite catalog.
appwrite_search_docs tool and how to rebuild its index.
your Appwrite project (in development, not available yet).
project API key.
server locally.
This MCP server is licensed under the MIT License. See the LICENSE file for details.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.