Neo4j MCP
Neo4j servers for running Cypher queries, persistent knowledge graph memory, and managing Neo4j Aura instances.
Delv Safety Grade: A
Score 83/100 · assessed 2026-04-28
Neo4j MCP is an official vendor integration from Neo4j Labs, providing three distinct servers for Cypher queries, persistent knowledge graphs, and Aura instance management. The maintainer credentials are strong given Neo4j's established position in graph databases, though Neo4j Labs is a community-focused arm rather than core product. The permission model is moderately scoped: it requires database credentials and can execute arbitrary Cypher queries, meaning full read-write access to your graph data. The Aura provisioning server adds cloud resource creation capabilities. Supply chain is reasonable via uvx but lacks traditional package registry distribution. Transparency is excellent with open source code and clear documentation. No known security incidents. The main risk is the broad database access granted through credential environment variables, which is inherent to database integration but requires careful credential management.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREEGraph DB; usually private.
Green flags
- Official Neo4j Labs project with established vendor backing
- Open source with active GitHub repository and clear documentation
- Scoped to Neo4j operations only, no filesystem or shell access
- Three separate servers allow granular deployment choices
- No known security incidents or vulnerabilities
Red flags
- Full database read-write via Cypher execution with provided credentials
- Aura provisioning server can create cloud resources with associated costs
- No package registry distribution, relies on uvx direct execution
- Neo4j Labs is community arm, not core product team
Permissions requested
Install
uvx mcp-neo4j-cypher
NEO4J_URLNEO4J_USERNAMENEO4J_PASSWORDReview
Install this if you already work with Neo4j and want Claude to query or remember graph-structured data. Skip it if you're not committed to graph databases, the setup overhead isn't worth it for casual use. The knowledge graph memory feature alone justifies the install for anyone building stateful agents.
Good at
- Official Neo4j integration means it tracks database API changes and won't break on version updates.
- Knowledge graph memory server genuinely persists context across sessions, which is rare and useful for long-running projects.
- Supports three distinct workflows (query, memory, provisioning) without forcing you to install all three.
- Cypher query assistance lets you debug graph traversals or schema issues without leaving Claude.
- Works cleanly across Claude Desktop, Claude Code, and Cursor with the same config.
Watch out
- Requires Neo4j credentials and a running instance, so you can't try it without setup overhead.
- The Cypher server has write access by default, which is risky if you point it at production data.
- Knowledge graph memory server creates its own schema, so you need a dedicated database or careful namespace management.
- No built-in safeguards against expensive queries, Claude can accidentally run traversals that lock up your database.
- Documentation assumes familiarity with Cypher, newcomers to graph databases will struggle to get value quickly.
Use cases
- graph analytics
- Cypher query assistance
- knowledge graph memory
- Aura provisioning
Getting started
Works with
Similar MCPs
- NeonNeon's official MCP for serverless Postgres. Manage projects, branches, and run SQL against any of your databases.
- SupabaseSupabase's official MCP — query Postgres, manage auth, inspect storage buckets, all from your agent.
- PostgresQuery Postgres databases with natural language. Read-only access by default - the agent sees your schema and runs SELECT queries safely.
- ClickHouseClickHouse MCP for fast analytical queries. Built by ClickHouse Inc, supports cluster topology discovery.