RabbitMQ MCP
Interacts with RabbitMQ brokers for admin operations and message enqueue or dequeue, with OAuth and HTTP transport.
Delv Safety Grade: A
Score 84/100 · assessed 2026-04-28
Amazon MQ's official RabbitMQ MCP server is backed by a major cloud vendor with strong infrastructure credentials. The maintainer score is excellent given AWS's resources and commitment to enterprise tooling. Permissions are moderately scoped: it can read and write messages, manage queue topology, and perform admin operations on your broker, which is appropriate for its debugging and operations use case but does grant substantial control over your messaging infrastructure. Supply chain is solid via PyPI package distribution, though the repository is relatively new. Transparency is good with open source code and clear documentation of capabilities. No known security incidents. The main risk is the breadth of RabbitMQ admin permissions combined with credential access, so treat the RABBITMQ_URL environment variable as highly sensitive.
Lethal Trifecta (prompt-injection exposure)
TWO OF THREEQueue contents may include private payloads; publishing is outbound. No web-style input ingestion.
Green flags
- Official Amazon MQ vendor implementation with enterprise backing
- Uses RabbitMQ Management API over HTTP rather than raw AMQP protocol
- OAuth-aware authentication support for modern security patterns
- Distributed via standard PyPI package registry with versioning
- Clear documentation of admin vs read-only capabilities
Red flags
- Requires full broker credentials via RABBITMQ_URL environment variable
- Can delete queues and exchanges, potentially disrupting production systems
- Mutative tools flag indicates write operations enabled by default
- Network access to potentially internal message broker infrastructure
Permissions requested
Install
uvx amq-mcp-server-rabbitmq@latest --allow-mutative-tools
RABBITMQ_URLReview
Install this if you work with RabbitMQ regularly and want to debug or administer queues without context-switching to a browser. Skip it if you only touch RabbitMQ occasionally or if you're happy with the management UI. It's a focused tool that does one thing well.
Good at
- Lets you inspect queues, peek at messages, and replay dead-lettered messages without leaving your editor.
- OAuth support makes it work cleanly with managed RabbitMQ services like Amazon MQ.
- Mutative tools flag is explicit, so you know when Claude can modify state.
- Uses the management API over HTTP, which means no AMQP protocol complexity.
- Official vendor support from Amazon MQ, so it's maintained and documented properly.
Watch out
- Requires a working Python environment and uvx, which adds setup friction on some machines.
- No autodiscovery of brokers, so you need to know your management API URL upfront.
- Mutative operations can be dangerous if you phrase requests ambiguously.
- Only useful if you're already working with RabbitMQ daily.
Use cases
- broker inspection
- queue administration
- message replay
- debugging distributed systems
Getting started
Works with
Similar MCPs
- ESXi MCPManages VMware ESXi and vCenter for VM lifecycle and real-time performance monitoring via REST and SSE.
- TerraformHashiCorp's official Terraform MCP. Connects agents to the Terraform Registry for module discovery and infrastructure-as-code automation.
- HerokuHeroku's official MCP. Manage apps, databases, dynos, and pipelines through the platform CLI from inside an agent.
- AWS LabsAWS Labs ships a growing family of MCPs for S3, Lambda, EKS, CDK, etc. Modular install — pick the services you actually use.