XiaoFlow MCP Server (xiaoflow-mcp-server)

Official Model Context Protocol (MCP) server for XiaoFlow AI SEO and keyword intelligence tools.

Connect Large Language Models (LLMs) such as Claude Desktop, Cursor, Windsurf, and VS Code directly to XiaoFlow's search engine optimization, keyword discovery, and domain analytics.

Remote endpoint: https://mcp.xiaoflow.com/mcp

Transport: MCP Streamable HTTP with OAuth 2.1 / PKCE, plus stdio through the npm package

Safety: Read-only research tools, except asynchronous expansion task creation; no destructive tools

Official listings

• npm — xiaoflow-mcp-server

• Smithery — xiaoflow/xiaoflow-mcp

• Glama — xiaoq-in/xiaoflow-mcp

• GitHub — xiaoq-in/xiaoflow-mcp

• Full setup guide and prompt templates

Related MCP server: DataForSEO MCP Server

✨ Features & Capabilities

• 🔍 Keyword Discovery: Generate high-intent search keywords and SEO ideas from keyword, URL, or domain seeds.

• 📊 Domain Analytics: Analyze domain-level search performance, organic traffic metrics, and keyword distributions.

• 📈 Search Trend Analysis: Compare keyword demand, competition, CPC, and historical trends.

• 🔒 Flexible Authentication: Supports API Key authentication via query parameters (?key=), Bearer tokens, environment variables, or Web OAuth login.

⚡ Quick Start

1. Run via npx (stdio)

Run the server directly using npx:

npx -y xiaoflow-mcp-server

Pass your XiaoFlow API key via environment variable:

XIAOFLOW_API_KEY="YOUR_API_KEY" npx -y xiaoflow-mcp-server

2. Connect via Streamable HTTP with web login (recommended)

Use the canonical remote endpoint in clients that support remote MCP. The client discovers XiaoFlow OAuth automatically and opens the browser for login and consent:

https://mcp.xiaoflow.com/mcp

Legacy clients can still use https://mcp.xiaoflow.com/sse?key=YOUR_API_KEY.

💻 Client Integration Guides

Cursor Setup

Add XiaoFlow MCP to Cursor:

• Name: xiaoflow

• Type: http

• URL: https://mcp.xiaoflow.com/mcp

Or click Add to Cursor directly on the XiaoFlow MCP Portal.

Claude Desktop Setup

Add the following entry to your claude_desktop_config.json:

{
  "mcpServers": {
    "xiaoflow": {
      "command": "npx",
      "args": ["-y", "xiaoflow-mcp-server"],
      "env": {
        "XIAOFLOW_API_KEY": "YOUR_API_KEY"
      }
    }
  }
}

Windsurf, VS Code, and other remote clients

Use native HTTP configuration where available:

{
  "mcpServers": {
    "xiaoflow": {
      "type": "http",
      "url": "https://mcp.xiaoflow.com/mcp"
    }
  }
}

For stdio-only clients, bridge to the OAuth-enabled remote endpoint:

{
  "mcpServers": {
    "xiaoflow": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://mcp.xiaoflow.com/mcp"]
    }
  }
}

🛠️ Available MCP Tools

Legacy aliases remain available for backward compatibility.

Every tool publishes:

• descriptions for every input parameter;

• a named JSON output schema, including success and error fields;

• MCP safety annotations (readOnlyHint, destructiveHint, idempotentHint, and openWorldHint);

• a human-readable tool title for MCP clients and directories.

Example prompts

Get US English metrics and 24 months of history for "AI SEO tools".

Find every related keyword for "standing desk", 200 per page, and continue
until has_more is false. Return search volume, CPC, competition, intent, and history.

Compare these 1,000 keywords over 48 months and rank them by search volume growth.

Expand "home office" for four rounds, keep terms with at least 100 monthly
searches, and poll the task until it is complete.

🔑 Authentication

Obtain your API key from the XiaoFlow MCP Dashboard.

Supported authentication methods:

1. Web Login OAuth (recommended): connect to https://mcp.xiaoflow.com/mcp; compatible clients discover OAuth, PKCE, and dynamic client registration automatically.

2. Environment Variable: set XIAOFLOW_API_KEY when running via npx.

3. Authorization Header: send Authorization: Bearer YOUR_API_KEY.

4. Legacy Query Parameter: append ?key=YOUR_API_KEY to the legacy SSE URL.

🐳 Docker / Glama

The repository includes a production multi-stage Dockerfile for directory build verification and stdio deployment:

docker build -t xiaoflow-mcp .
docker run --rm -i \
  -e XIAOFLOW_API_KEY="YOUR_API_KEY" \
  xiaoflow-mcp

The image runs as the unprivileged Node user, excludes local secrets and build state, and writes MCP protocol messages only to stdout.

🔐 Security and data handling

• OAuth login occurs only on www.xiaoflow.com; MCP clients never receive your password.

• API keys and OAuth tokens are sent only to the configured XiaoFlow API endpoint.

• The server does not scan or upload project files.

• Tool calls query external XiaoFlow/Google Ads-backed data and may consume account credits.

• No tool deletes or modifies keyword or domain data.

Report vulnerabilities privately through the repository owner or the XiaoFlow contact page. Do not include tokens or customer data in public issues.

✅ Quality and compatibility

• MCP protocol: Streamable HTTP and stdio

• Authentication: OAuth 2.1 with PKCE, Bearer API key

• Tool schemas: parameter descriptions, structured output schemas, annotations

• Optional discovery methods: resources and prompts return valid empty lists

• Runtime: Node.js 18+ (node:20-alpine in Docker)

• Continuous endpoint: https://mcp.xiaoflow.com/mcp

📄 License

MIT © XiaoFlow