PlugWiki
firebase-tools logo

Firebase MCP Server: Setup for Claude Code, Cursor and Other Apps

OfficialLocal
Getnpmfirebase-toolsfirebase/firebase-tools

Lets your coding assistant manage Firebase projects, query Firestore, look up Auth users and debug Crashlytics crashes.

This is the Firebase MCP server from Google, built into the Firebase command line tool. It runs on your computer and uses the same Firebase login as the CLI, so there is no separate key to create. It can read and also change real project data, such as Firestore documents, Auth users and Remote Config, so point it at a test project first.

Good for

  • App developers who want Claude or Cursor to set up Firebase services in their code
  • Mobile teams debugging Crashlytics crashes with an assistant
  • Anyone who checks Firestore data or security rules during development

Works in

12 should work

Tap an app to see how to set it up and any known problems.

Install firebase-tools MCP

Claude Code

  1. 1

    Copy this prompt.

    Add the firebase-tools MCP server to Claude Code. Run this command:
    
    claude mcp add firebase -- npx -y firebase-tools@latest mcp
    
    Then check that it loaded and tell me if I need to sign in or restart.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js.

Read-only mode: There is no read-only mode. Sign in with a Firebase account that has only the roles you want.

The command must end with mcp. Without it, npx firebase-tools runs the normal Firebase CLI instead of the server. Sign in with npx firebase-tools login first, or ask the assistant to sign you in. Claude Code users can also install the Firebase plugin, which the README recommends.

From the project README. Source.

Tools

  • Lists the Firebase projects your login can reach

    Shows every Firebase project the signed-in account can access.

    Try: “Which Firebase projects do I have access to?”

    Network · firebase_list_projects

  • Shows details for the active Firebase project

    Returns metadata and configuration for the project the server is currently using.

    Try: “Show me the details of my active Firebase project.”

    Network · firebase_get_project

  • Creates a Firebase project

    Creates a new Firebase project, or turns Firebase on for an existing Google Cloud project.

    Try: “Create a new Firebase project called my-test-app.”

    Write · firebase_create_project

  • Lists the apps registered in the project

    Shows the iOS, Android and web apps registered in the active project.

    Try: “List the apps registered in this Firebase project.”

    Network · firebase_list_apps

  • Registers a new iOS, Android or web app

    Creates a new app of the type you pick in the active Firebase project.

    Try: “Register a new web app in this Firebase project.”

    Write · firebase_create_app

  • Adds an Android signing hash to an app

    Adds a SHA-1 or SHA-256 certificate hash to an Android app in the active project.

    Try: “Add this SHA-256 hash to my Android app.”

    Write · firebase_create_android_sha

  • Gets the SDK config for an app

    Returns the SDK settings or config file contents for a registered Firebase app.

    Try: “Get the SDK config for my web app.”

    Network · firebase_get_sdk_config

  • Sets up Firebase services in your local project

    Initializes and configures Firebase services in your local project folder.

    Try: “Set up Firestore and Hosting in this project.”

    Write · firebase_init

  • Shows the active project and signed-in user

    Returns the current CLI and server settings, the active project and the signed-in user.

    Try: “Which Firebase project and account are you using right now?”

    Read · firebase_get_environment

  • Switches the active project, folder or account

    Changes the project directory, the active project or the active user account.

    Try: “Switch to my staging Firebase project.”

    Write · firebase_update_environment

  • Signs in to Firebase or checks sign-in status

    Signs you in to the Firebase CLI and server, or reports whether you are signed in.

    Try: “Am I signed in to Firebase?”

    Network · firebase_login

  • Signs out of Firebase

    Signs you out of the Firebase CLI and server.

    Try: “Sign me out of Firebase.”

    Write · firebase_logout

Read from the source code

Permissions

high risk · 4 things to watch · 1 advisory

High risk

It can change and delete live project data, including Firestore documents, Auth users and Remote Config, and send push notifications. Sign in with an account that only reaches a test project, and review each write before approving it.

What it can do

  • Read your data
  • Create and change things
  • Delete things
  • Read-only mode

Watch out for

  • It can delete Firestore documents and Crashlytics notes

    The delete tools act on whichever project is active. Check the active project before you ask for deletions.

  • It can send push notifications to real devices

    The messaging tool sends to any device token or topic you name. Use a test topic while you build.

  • It acts with your full Firebase CLI login

    There is no read-only setting. Sign in with an account that has only the roles you want the assistant to use.

  • Some tools ask Gemini and can be wrong

    The README warns that Gemini in Firebase can give plausible but incorrect output. Check generated schemas and code before you deploy.

Security advisories

Technical details
Talks toFirebase and Google Cloud APIs. Gemini in Firebase (for the tools that ask Gemini)
Scopes
  • Same permissions as the account you signed in with in the Firebase CLI

Questions

Is the Firebase MCP server official?

Yes. It is part of the Firebase CLI repository from Firebase.

Which apps does it work with?

The README names Firebase Studio, Gemini CLI, Claude Code, Cline, Cursor, VS Code Copilot and Windsurf. It works with any app that can start a local server over standard input and output.

Does it need an API key?

No. It uses the account you signed in with in the Firebase CLI, so it can do whatever that account can do.

Can I run it read-only?

No read-only setting is documented. Limit what it can do by signing in with an account that has only the roles you want.

Does it run on my computer or in the cloud?

It runs on your computer. Some tools send requests to Firebase and Google Cloud, and a few ask Gemini in Firebase.

Can it delete my data?

Yes. It can delete Firestore documents and Crashlytics notes, and it can overwrite Realtime Database data and Remote Config. Use a test project while you try it.

Information

updated Nov 2, 2026

Publisher
Official
Package
firebase-tools
Registry
npm
Transport
stdio
Version
0.3.0
License
MIT
Last commit
Oct 31, 2026
Open issues
494
Listed in
Official MCP registry

GitHubnpmOfficial MCP RegistryChangelogIssues

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 1
  1. Firebase MCP server README · github.com

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 2, 2026.