Flutterflow Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Flutterflow Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A custom Model Context Protocol (MCP) server that connects AI coding agents like Claude Code to your FlutterFlow projects.
Browse, inspect, and modify your FlutterFlow projects directly from your AI assistant — no copy-pasting YAML or switching between tabs.
git clone https://github.com/erniecode/flutterflow-mcp.git
cd flutterflow-mcp
npm install
npm run buildRun this command in your terminal:
claude mcp add flutterflow --scope user -- node /path/to/flutterflow-mcp/dist/index.jsThen add your API token to the MCP config in ~/.claude.json:
{
"mcpServers": {
"flutterflow": {
"type": "stdio",
"command": "node",
"args": ["/path/to/flutterflow-mcp/dist/index.js"],
"env": {
"FLUTTERFLOW_API_TOKEN": "your-token-here"
}
}
}
}The FlutterFlow tools will now be available. Try asking:
"List my FlutterFlow projects"
| Tool | Description |
|---|---|
list_projects | List all FlutterFlow projects accessible with your API token |
sync_project | Download and cache all YAML files for a project locally |
list_files | List all YAML file keys in a project |
search_files | Search cached file keys by prefix (e.g. page/, component/) |
| Tool | Description |
|---|---|
list_pages | List all pages in a project |
get_page | Get the full YAML content of a specific page |
get_page_summary | Get a high-level summary of a page's structure |
| Tool | Description |
|---|---|
get_theme | Get theme configuration (colors, typography, breakpoints) |
get_app_state | Get global app state variables |
get_settings | Get general project settings |
get_api_endpoints | List REST API endpoints defined in the project |
get_data_models | Get data models, structs, enums, and database collections |
get_custom_code | Get custom actions, functions, and widgets |
| Tool | Description |
|---|---|
get_yaml | Get raw YAML content of any file by key |
validate_yaml | Validate YAML changes before applying (always do this first!) |
update_yaml | Push YAML changes to FlutterFlow (irreversible!) |
clear_cache | Clear the local cache for a project |
flutterflow_cli)| Tool | Description |
|---|---|
check_cli | Check if the FlutterFlow CLI is installed |
export_code | Export/download Flutter source code from a project |
deploy_firebase | Deploy Firebase configuration for a project |
To use CLI tools, install the FlutterFlow CLI:
dart pub global activate flutterflow_cli1. list_projects → find your project ID
2. sync_project → cache all files locally
3. list_pages → see what pages exist
4. get_page_summary → understand a page's structure
5. get_yaml → read the full YAML
6. validate_yaml → check your changes are valid
7. update_yaml → push changes to FlutterFlowsrc/
index.ts → MCP server entry point (stdio transport)
api/
flutterflow.ts → FlutterFlow REST API client
tools/
projects.ts → Project management tools
pages.ts → Page/component exploration tools
config.ts → Theme, settings, data model tools
yaml-ops.ts → YAML read/validate/update tools
cli.ts → FlutterFlow CLI wrapper tools
utils/
cache.ts → Local file-based caching layerThis server uses the FlutterFlow Project API:
https://api.flutterflow.io/v2listProjects, listPartitionedFileNames, projectYamls, validateProjectYaml, updateProjectByYamlupdate_yaml modifies your live FlutterFlow project and cannot be undonevalidate_yaml before update_yamllist_*, get_*, sync_*) to get familiar~/.claude.json — never commit this fileflutterflow_cli for code export/Firebase deployMIT
Built with Claude Code by @erniecode
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.