@selibiks/bubble-mcp
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@@selibiks/bubble-mcpsearch for users who signed up last month"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
@selibiks/bubble-mcp
MCP server for Bubble.io with 28 tools across 3 layers — query data, audit schemas, seed test records, and more.
Quick Start
# Install dependencies
npm install
# Build
npm run build
# Start (requires configuration — see below)
npm startRelated MCP server: MCP Database Server
Configuration
Environment Variables
BUBBLE_APP_URL=https://your-app.bubbleapps.io
BUBBLE_API_TOKEN=your-api-token-here
BUBBLE_MODE=read-only
BUBBLE_ENVIRONMENT=development
BUBBLE_RATE_LIMIT=60Variable | Required | Default | Description |
| Yes | — | Your Bubble.io app URL |
| Yes | — | API token from Bubble.io Settings > API |
| No |
|
|
| No |
|
|
| No |
| Max requests per minute |
Config File Alternative
Create bubble.config.json in the project root:
{
"app_url": "https://your-app.bubbleapps.io",
"api_token": "your-api-token-here",
"mode": "read-only",
"environment": "development",
"rate_limit": 60
}Environment variables take priority over the config file.
Claude Desktop / Claude Code Integration
Add to your Claude configuration:
{
"mcpServers": {
"bubble": {
"command": "node",
"args": ["/path/to/bubble-mcp/dist/index.js"],
"env": {
"BUBBLE_APP_URL": "https://your-app.bubbleapps.io",
"BUBBLE_API_TOKEN": "your-api-token-here",
"BUBBLE_MODE": "read-only",
"BUBBLE_ENVIRONMENT": "development"
}
}
}
}Or via the CLI:
claude mcp add bubble -- node /path/to/bubble-mcp/dist/index.jsSecurity Model
Three-layer defence in depth:
Layer | What it does |
Server Mode Gate | Filters tools by mode at startup ( |
MCP Permissions | Claude prompts user approval before each tool invocation |
Bubble Privacy Rules | Bubble.io enforces API-level access via the token's permissions |
Input validation: All user-supplied identifiers (dataType, id, sort_field, workflow_name) are validated against safe character patterns before reaching API URLs. File paths (TDD tools) are sandboxed to the project directory.
Token safety: The API token is never exposed in responses or error messages. The bubble_get_environment tool explicitly excludes it.
Mode Reference
Capability | read-only | read-write | admin |
Query data (search, get) | Yes | Yes | Yes |
Inspect schema / Swagger docs | Yes | Yes | Yes |
Create / update records | No | Yes | Yes |
Trigger workflows | No | Yes | Yes |
Delete records | No | No | Yes |
Bulk operations | No | No | Yes |
Seed / cleanup test data | No | No | Yes |
Tool Reference (28 tools)
Core Tools (11)
Tool | Mode | Description |
| read-only | Fetch the full app schema (all types and fields) from |
| read-only | Search records with constraints, sorting, and pagination |
| read-only | Fetch a single record by type and ID |
| read-write | Create a new record |
| read-write | Partially update a record (PATCH) |
| read-write | Replace a record entirely (PUT) |
| admin | Permanently delete a record |
| admin | Create up to 1000 records in one call |
| read-write | Trigger a backend API workflow by name |
| read-only | Return current server config (mode, environment, rate limit) |
| read-only | Fetch the Swagger/OpenAPI spec for the connected app |
Compound Tools (7)
Tool | Mode | Description |
| read-only | Type counts, relationships, and totals (lightweight vs full schema) |
| read-only | Scan schema for sensitive fields, PII, and API write exposure |
| read-only | Find records with broken foreign key references |
| read-only | Sample records and check for empty/null fields |
| read-only | Auto-paginate through all records of a type (up to 10k) |
| read-only | Analyse field population rates and identify dead fields |
| read-only | Diff schemas between development and live environments |
Developer Tools (10)
Tool | Mode | Description |
| read-only | Privacy audit + dead field detection with a 0-100 score |
| read-only | Export schema as TDD-format markdown |
| read-only | List all API workflows and their parameters |
| read-only | Validate a TDD markdown file against the live schema |
| read-only | Generate ordered migration steps from a TDD file |
| read-only | Estimate Workload Units for a Bubble operation |
| read-only | Suggest fields that would benefit from indexes |
| read-only | Find text fields that should be option sets |
| admin | Seed test data in dependency order (tracked for cleanup) |
| admin | Delete all previously seeded test data |
Swagger / OpenAPI
The bubble_swagger_docs tool fetches the auto-generated Swagger spec from your Bubble app:
https://your-app.bubbleapps.io/api/1.1/meta/swagger.jsonIf you get an error, enable Swagger docs in Bubble: Settings > API > Enable Swagger documentation.
Development
npm install # Install dependencies
npm run dev # Development mode (tsx, no build needed)
npm run build # Compile TypeScript to dist/
npm test # Run all tests (179 tests)
npm run test:watch # Tests in watch mode
npm run lint # ESLint
npm run format # Prettier
npm run typecheck # tsc --noEmitDefaults
Setting | Default | Why |
Mode |
| Safe — no mutations possible |
Environment |
| Safe — won't touch production |
Rate limit | 60 req/min | Prevents API abuse |
License
MIT
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- Alicense-qualityDmaintenanceMCP Database Server is a service that provides secure database access for AI assistants and LLM-based tools, supporting SQLite, PostgreSQL, MySQL and MariaDB, and featuring query verification, audit logs and security control functions.2Apache 2.0
- Flicense-qualityDmaintenanceA secure multi-database MCP server supporting MySQL, PostgreSQL, and SQLite with read-only enforcement, SQL injection prevention, and tools for schema analysis, performance optimization, and visualization.4
- Alicense-qualityDmaintenanceMCP server for Supabase, enabling database CRUD, storage management, auth administration, project management, edge functions, and secrets via 31 tools.12MIT
- AlicenseBqualityCmaintenanceMCP server providing backend access to PostgreSQL, Storage (Supabase/S3), Iceberg data lake, and SQL seeds. It offers 32 tools for database queries, storage operations, seed management, and more.313MIT
Related MCP Connectors
Butterbase MCP server — manage your backend: schemas, auth, functions, storage, RAG, deploys.
MCP server for interacting with the Supabase platform
Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/sELIBIKS/bubble-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server