appwrite-security-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| APPWRITE_API_KEY | Yes | Your Appwrite API key with scopes: databases.read, collections.read, projects.read | |
| APPWRITE_ENDPOINT | No | The Appwrite endpoint URL | https://cloud.appwrite.io/v1 |
| APPWRITE_PROJECT_ID | Yes | Your Appwrite project ID |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| audit_projectA | Scan an Appwrite project for over-permissive collection/document permissions. Returns findings JSON with active-probe confirmation. Caches result for use by other tools. |
| list_findingsC | List findings from the most recent audit, optionally filtered by severity. |
| preview_fixA | Describe the proposed permission change for a finding. Appwrite's permission update API replaces the full set, so the agent should output a complete replacement permission list rather than a delta. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 3 tools
Each tool has a clearly distinct purpose: auditing, listing findings, and previewing fixes. No overlap or ambiguity.
All tool names follow a consistent verb_noun pattern in snake_case: audit_project, list_findings, preview_fix.
3 tools is well-scoped for a focused security audit tool; each serves a necessary function without bloat.
Covers the audit, listing, and preview workflow, but lacks an apply_fix tool to execute changes, leaving a notable gap in the lifecycle.