Qdrant
Qdrant's official MCP. Use the vector DB as a semantic memory layer for your agent: store, search, retrieve.
Delv Safety Grade: A
Score 84/100 · assessed 2026-04-28
Qdrant's official MCP server is a first-party integration from a well-established vector database vendor. The maintainer score is high because Qdrant is a legitimate commercial entity with active development and professional backing. Permissions are moderately scoped: the server performs read and write operations against a remote vector database, requiring network access and API credentials via environment variables. The supply chain is solid with distribution via uvx/PyPI, though not as hardened as the largest vendors. Transparency is strong with open-source code, clear documentation, and active repository maintenance. No known security incidents. The main risk surface is the requirement for API credentials in environment variables and network access to external infrastructure, but this is inherent to the service model and appropriately scoped to database operations only.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREEVector DB; private.
Green flags
- Official vendor implementation (Qdrant team maintains)
- Narrow API surface (vector DB operations only, no shell/filesystem)
- Open source with active repository and clear documentation
- Standard PyPI distribution via uvx (verifiable supply chain)
- No known security incidents or CVEs
Red flags
- Requires API key in environment variables (credential exposure risk)
- Network access to external Qdrant instance (outbound dependency)
- Write permissions to vector database (data integrity risk)
Permissions requested
Install
uvx mcp-server-qdrant
QDRANT_URLQDRANT_API_KEYCOLLECTION_NAMEReview
Install this if you're already running Qdrant or you're serious about giving your agent long-term semantic memory. Skip it if you're not ready to manage a vector database instance—there are simpler memory tools for casual use.
Good at
- First-party integration from Qdrant means the implementation is stable and well-maintained.
- Gives your agent genuine cross-session memory without writing vector search code yourself.
- Narrow API surface makes it easy to understand what the agent can and can't do.
- Metadata filtering lets you organise stored content by topic, date, or custom tags.
- Works with any Qdrant instance, self-hosted or cloud, so you control where data lives.
Watch out
- Requires a running Qdrant instance, which adds infrastructure overhead if you're not already using it.
- No local or in-memory fallback for quick experiments or lightweight use cases.
- Collection must be pre-created in Qdrant or the agent will fail silently on writes.
- Hosts beyond Claude Desktop need manual config tweaks, no auto-discovery yet.
Use cases
- Building a personal RAG store the agent can read and write
- Semantic search over scraped articles
- Long-term memory tied to a vector index
- Cross-session retrieval of past notes
Getting started
Works with
Similar MCPs
- MemoryPersistent memory graph for Claude. Survives across conversations - useful for personal assistants that need to remember facts about you and your projects.
- Knowledge Graph (Anthropic)Anthropic-built knowledge-graph MCP. Stores entities + relationships, persists across sessions, queryable via natural language.
- MilvusZilliz/Milvus official MCP. Lets agents store and query vectors against the Milvus engine for production-scale RAG.
- Mem0Mem0's hosted MCP for long-term memory with semantic recall. Local repo archived; current path is the cloud-hosted server at mcp.mem0.ai/mcp.