Baserow Streamable MCP

A remote MCP server for Baserow using Streamable HTTP and the Baserow REST API.

This repository currently contains the Phase 1 technical spike. It intentionally exposes only discovery and one write operation so the full connection path can be validated before the broader CRUD implementation is built.

Phase 1 tools

• list_databases() derives accessible database IDs and table counts from the token-visible tables. Database names are null because Baserow's Database Token discovery endpoint does not return them.

• list_tables() lists every table accessible to the Database Token across its workspace.

• create_rows(table_id, rows) creates up to 200 rows using user-facing field names.

Database Tokens are workspace-scoped and Baserow exposes a token-specific all-tables endpoint. Its response contains each table's database_id, allowing database IDs to be discovered and grouped without a JWT. It does not include database names, so the server returns name: null rather than inventing a value or requiring short-lived user authentication.

The Phase 1 Baserow calls follow these API contracts:

• GET /api/database/tables/all-tables/ for token-visible table discovery.

• POST /api/database/rows/table/{table_id}/batch/?user_field_names=true with { "items": [...] } for batch row creation.

Related MCP server: AppFlowy Cloud MCP Server

Requirements

• Node.js 22 or later

• A Baserow Database Token with the required table permissions

Run locally

cp .env.example .env
# Edit .env, then export it into the shell.
set -a && . ./.env && set +a
npm install
npm run build
npm start

The MCP endpoint is http://127.0.0.1:3000/mcp by default.

Run with Docker Compose

cp .env.example .env
# Edit .env, then start the service.
docker compose up --build -d

The Compose example publishes the port only on the host loopback interface. A reverse proxy or tunnel running on the same host can forward HTTPS traffic to it. To reach a self-hosted Baserow service by Docker service name, attach this service to the same external Docker network and set BASEROW_URL accordingly.

For remote access, place the server behind an HTTPS reverse proxy or tunnel. Streamable HTTP is the MCP transport; HTTPS is the external security layer. Phase 1 does not yet add MCP endpoint authentication, so do not expose it publicly without access control at the proxy or tunnel.

Configuration

Development

npm run typecheck
npm test
npm run build

Security

• Never commit .env or tokens.

• The Baserow token is sent only in the Authorization: Token ... header.

• The server binds to localhost by default.

• Configure HTTPS and endpoint authentication before remote production use.

License

MIT