mcp-debezium

A Model Context Protocol server for Debezium (via the Kafka Connect REST API). It lets an MCP-capable client (Claude Desktop, Claude Code, etc.) monitor and manage change-data-capture connectors — status, config, restarts, lifecycle — with behaviour controlled entirely by flags.

Safe by default: it starts read-only, can be scoped to an allowlist of connectors, protects critical connectors from mutation, redacts credentials in connector configs, and gates deletion behind an explicit opt-in.

Features

• Monitoring — worker/cluster info, connector list, plugins, per-connector config, status (with failed-task traces), and topics.

• Management — create/update, pause/resume, restart connector or a single task.

• Lifecycle — delete connectors (admin).

• Access modes — read-only → read-write → admin, layered so a mode never exposes tools above its level.

• Credential redaction — database.password and other secret-shaped config values are replaced with ***REDACTED*** before results are returned.

• Security flags — connector allowlist, protected connectors, delete gating, dry-run, and JSON audit logging (see below).

Related MCP server: Kafka MCP Server

Security model

Tools

Read (read-only+): cluster_info, list_connectors, list_connector_plugins, get_connector, get_connector_config, get_connector_status, get_connector_topics

Write (read-write+): create_connector, update_connector_config, pause_connector, resume_connector, restart_connector, restart_task

Admin (admin): delete_connector (needs DEBEZIUM_ALLOW_DELETE)

Use with your MCP client

Works with Claude Code, Claude Desktop, Cursor, OpenAI Codex CLI, Windsurf, VS Code (Copilot), and any other MCP client — see docs/CLIENTS.md for per-client setup.

Install

npm install
npm run build

Run with Claude Desktop / Claude Code

{
  "mcpServers": {
    "debezium": {
      "command": "node",
      "args": ["/absolute/path/to/mcp-debezium/dist/index.js"],
      "env": {
        "CONNECT_URL": "http://connect:8083",
        "DEBEZIUM_MODE": "read-only",
        "DEBEZIUM_PROTECTED_CONNECTORS": "pg-prod-orders"
      }
    }
  }
}

Example prompts

• "Which connectors are FAILED, and why?"

• "Restart the failed task on pg-orders." (needs read-write)

• "Show the config for mysql-inventory." (credentials come back redacted)

Develop

npm run dev
npm test          # security policy + config redaction
npm run typecheck

Publishing

This server ships a server.json for the official MCP registry and an mcpName for npm ownership validation. See PUBLISHING.md for publishing to npm and listing on the MCP registry, Smithery, Glama, Cursor, and PulseMCP.

License

MIT