MCP server CX Codex

Nhost — MCP server for Claude Code: data access

Q: How do I install Nhost in Claude Code?

Create a `run-mcp.toml` and set `MCP_GRAPHQL_ENDPOINT`, `MCP_AUTH_URL`, and the other required settings. Then run `nhost up --run-service run-mcp.toml`. Enable CIMD to use Nhost Auth.

Q: How can I limit the assistant's data access?

Set permissions for a GraphQL role and pass that role with `--enforce-role`. The server rejects tokens with a different default role.

This MCP server connects an AI assistant to an Nhost project's GraphQL API. Users authenticate with Nhost Auth, and their permissions govern data access.

Open on GitHub

What Nhost does

The server gives an assistant three tools: inspect the GraphQL schema, run read-only queries, and change data with mutations. At startup, it fetches a schema summary and passes it to the client as context. You need the GraphQL API endpoint.

Authentication uses OAuth2 through Nhost Auth. Requests carry the user's JWT, so GraphQL applies that user's row and column permissions. CIMD must be enabled. Check the access rules before connecting: mutations can create, update, and delete records. The --enforce-role flag limits accepted tokens to a chosen role.

For a local run, add a run-mcp.toml with the GraphQL and auth endpoints, then run nhost up --run-service run-mcp.toml. The configuration also sets the service address, port, and role. Supported clients include Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, and Zed.

What it helps with

connect an assistant to project data through GraphQL
inspect the GraphQL schema before writing queries
read data using the authenticated user's permissions
restrict assistant access to a chosen role
create or update records with GraphQL mutations

Example prompts for the agent

Show me my project's GraphQL schema and available operations.
Find records my user can access and explain their fields.
Create a record with a GraphQL mutation using this data: ...

How to install Nhost

Install

The MCP registry has no launch command for it: see the repository README

Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more

Similar

convex-design convex This skill designs Convex backends from product requests, covering schemas, functions, auth, files, and LLM workflows. Use it for new or existing Convex projects. CX Codex +1 36,000installs elasticsearch-onboarding elastic Walks a developer from "I want search" to working code: clarifies the use case, helps with data mapping and produces tested examples for Elasticsearch 9.x. CX Codex +1 4,300installs langchain4j-vector-stores-configuration giuseppe-trisciuoglio A skill that shows how to wire a LangChain4J vector store for RAG: connections, embedding dimensions, metadata filters. CX Codex +1 3,700installs qdrant giuseppe-trisciuoglio Provides integration patterns for the Qdrant vector database in Java and Spring Boot with LangChain4j. Helps build semantic search and vector stores for RAG. CX Codex +1 3,700installs postgres tigerdata A skill for PostgreSQL work: table design, indexing, pgvector, PostGIS, TimescaleDB and migrations. Useful when your agent writes SQL blind. CX Codex +1 1,400installs postgres-hybrid-text-search tigerdata Teaches AI agents how to combine BM25 keyword matching with pgvector semantic retrieval using Reciprocal Rank Fusion in PostgreSQL. CX Codex +1 372installs

Nearby in the catalog

All MCP servers for Backend and APIs →

Questions about Nhost

How do I install Nhost in Claude Code?

Create a run-mcp.toml and set MCP_GRAPHQL_ENDPOINT, MCP_AUTH_URL, and the other required settings. Then run nhost up --run-service run-mcp.toml. Enable CIMD to use Nhost Auth.

What does the Nhost MCP server do?

It gives MCP clients tools to inspect the GraphQL schema, run queries, and execute mutations. GraphQL applies permissions from the authenticated user's JWT.

How can I limit the assistant's data access?

Set permissions for a GraphQL role and pass that role with --enforce-role. The server rejects tokens with a different default role.