OfficialVerified

Neo4j MCP Server

Graph database queries and schema introspection for AI-powered graph analysis workflows.

Data last scanned today · Reviewed today

71 1 dangerous tool4 tools★ 287GoNOASSERTION

Overview

Neo4j MCP provides a structured bridge for AI models to interact directly with Neo4j graph databases. It enables assistants to explore database schemas by identifying node labels, relationship types, and property keys, allowing for informed reasoning about complex data models. Beyond schema exploration, the server facilitates natural language interaction with your database. It supports executing both read and write Cypher queries, as well as listing available Graph Data Science (GDS) procedures to assist in data analysis and summarization tasks.

Our verdict

With a security score of 48/100, this server is categorized as high risk. Because the authentication methods and the implementation of read-only modes have not yet been editorially reviewed, users should exercise extreme caution when deploying this in environments with sensitive data. It is currently best suited for development or sandbox environments where data integrity is not a production-critical concern.

Zero direct dependencies reduce the supply-chain attack surface.
Active development with commits as recent as today.
Ten contributors reduce the risk of abandonment.
Explicit support for enforcing read-only query mode via configuration.

Lacks an audited or official vendor-maintained status.
License is currently set to NOASSERTION.
Custom database procedures may potentially bypass read-only security checks.

Tools

Tool	Description	Risk
get-schema	introspect labels, relationship types, property keys	low
read-cypher	execute read-only Cypher queries that do not modify database data	low
write-cypher	execute write Cypher queries (disabled if NEO4J_MCP_READ_ONLY=true)	high
list-gds-procedures	list available GDS procedures	low

Compatibility

Client	Local	Docker	Remote	Read-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

›Can I prevent the MCP server from modifying my database?

Yes, you can set the environment variable NEO4J_MCP_READ_ONLY to true in your configuration to disable the write-cypher tool.

›How are read-only Cypher queries enforced?

The server uses EXPLAIN and Neo4j's built-in query-type classification to identify read-only operations. Note that custom procedures or functions misclassified by Neo4j may bypass these security checks.

›What information can the AI discover about my graph?

The get-schema tool allows the AI to introspect node labels, relationship types, and property keys to understand your data model.

›Does the server support Graph Data Science (GDS) procedures?

Yes, you can use the list-gds-procedures tool to retrieve and view the available GDS procedures in your Neo4j instance.

›What are the configuration requirements for connecting to my database?

You must provide the NEO4J_MCP_URI, NEO4J_MCP_USERNAME, NEO4J_MCP_PASSWORD, and NEO4J_MCP_DATABASE as environment variables in your mcp.json file.