firebase-mcp

A Model Context Protocol (MCP) server that exposes Firebase Firestore and Authentication to AI agents. Built with the Firebase Admin SDK, it runs over stdio and is designed to be wired directly into any MCP-compatible host (Cursor, Claude Desktop, etc.).

Features

• 13 Firestore read operations — list/browse collections and documents, query (including collection groups), aggregates, counts, schema sampling, composite indexes, distinct value counts, and list_paths for configured path templates

• 2 Firebase Auth operations — look up users by UID or email, list users with pagination

• Multi-project support — configure multiple Firebase projects in one config file; each tool call targets a specific project via projectId

• Glob-based access control — allow/deny rules evaluated per Firestore path before any read is performed

• Pagination on query_collection, read_collection, and list_users via cursor-based tokens

• Batch fetching with configurable maxBatchFetchSize

• Schema inference via get_collection_schema — samples documents and infers field types without reading the full collection

• Distinct value counts via distinct_values — count occurrences of unique field values across a collection or collection group

• Normalized output — Firestore Timestamps, GeoPoints, and DocumentReferences are converted to JSON-serializable values on all tools

• Zero runtime state — each tool call hits Firebase directly through the Admin SDK

Related MCP server: MCP Firebase Server

Tools

Config

Firestore (firestore_read)

All operations are dispatched through the single firestore_read tool via the operation field. Every call requires a projectId matching a key in firebase-mcp.json.

Auth (auth_read)

All operations are dispatched through the single auth_read tool via the operation field. Every call requires a projectId.

Requirements

• Node.js 18+

• A Firebase project with Firestore enabled

• A service account JSON key with Firestore and Auth read permissions

Setup

1. Create your per-user firebase-mcp.json

Create the file at:

• Linux/macOS: ~/.config/firebase-mcp/firebase-mcp.json

• Windows: %USERPROFILE%\AppData\Roaming\firebase-mcp\firebase-mcp.json

The config supports multiple projects under a projects key. Each key becomes the projectId value you pass to tool calls.

{
  "projects": {
    "my-app": {
      "firebase": {
        "projectId": "your-firebase-project-id",
        "serviceAccountPath": "secrets/serviceAccount.json"
      },
      "firestore": {
        "rules": {
          "allow": ["**"],
          "deny": []
        },
        "maxCollectionReadSize": 100,
        "maxBatchFetchSize": 200,
        "paths": {
          "example_orders": {
            "template": "customers/{customerId}/orders",
            "description": "Optional hint for agents; omit or replace with your own entries"
          }
        }
      },
      "timeouts": {
        "callMs": 15000
      }
    }
  }
}

To configure multiple projects, add additional keys under projects:

{
  "projects": {
    "prod": { "firebase": { ... }, "firestore": { ... } },
    "staging": { "firebase": { ... }, "firestore": { ... } }
  }
}

2. Add your service account key

Place your Firebase service account JSON at any path you prefer — you'll reference it in firebase-mcp.json above. Paths are resolved relative to the working directory when the server starts, or you can use an absolute path.

3. Wire it into your MCP host

See the Connecting to Cursor section below — no installation step required when using npx.

Configuration

The server reads config from a deterministic per-user path:

• Linux/macOS: ~/.config/firebase-mcp/firebase-mcp.json

• Windows: %USERPROFILE%\AppData\Roaming\firebase-mcp\firebase-mcp.json

Access Control

Firestore path access is governed by glob patterns evaluated with micromatch. Deny rules take precedence over allow rules. Every tool call checks the target path before hitting Firestore.

{
  "rules": {
    "allow": ["users/**", "products/**"],
    "deny": ["users/*/private/**"]
  }
}

Connecting to Cursor

Add to your MCP config (e.g. .cursor/mcp.json):

{
  "mcpServers": {
    "firebase": {
      "command": "npx",
      "args": ["-y", "firebase-mcp"]
    }
  }
}

npx -y will download and cache the package automatically on first run. No manual installation needed.

firestore_read and auth_read are safe to add to Cursor's tool allowlist for unattended use. get_config, reload_config, and create_config are also read-only and safe to allowlist.

License

MIT