PlugWiki
FireCMS Cloud logo

FireCMS Cloud MCP Server: Manage Firestore Data and Schemas from Your Assistant

OfficialRemoteLocal
Gethttps://api.firecms.co/mcpfirecmsco/firecms

Lets Claude, Cursor and other assistants browse and edit your Firestore data, CMS collections and users in FireCMS Cloud.

This is FireCMS's own server for FireCMS Cloud, the admin panel that sits on top of your Firebase project. It can list and edit documents, create and change collection schemas, invite users and connect a new Firebase project. Most people use the hosted address and sign in with their FireCMS account in the browser. A local version signs in with your Google account and can also switch on Google Cloud settings for a project.

It can delete documents and remove users, and it has no read-only mode. Changes to schemas, users and settings need the admin role on the project. Document tools are not marked admin-only in the README, so check what your role allows.

Good for

  • Teams running FireCMS Cloud who want to edit content and data by chat
  • Developers who want the assistant to set up collections from existing Firestore data
  • Project admins who manage users, roles and CMS settings

Works in

14 should work

Tap an app to see how to set it up and any known problems.

Install FireCMS Cloud MCP

Claude Code

  1. 1

    Copy this prompt.

    Add the FireCMS Cloud MCP server to Claude Code. Run this command:
    
    claude mcp add --transport http firecms-cloud https://api.firecms.co/mcp
    
    Then check that it loaded and tell me if I need to sign in or restart.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires Sign-in with the vendor account (OAuth).

Built from the package data we hold. Not yet tested by us.

Tools

  • Lists your FireCMS Cloud projects

    Shows every FireCMS Cloud project your account can reach. The service account for each project is stripped from the output. Other tools take a project ID from this list.

    Try: “Which FireCMS projects do I have?”

    Network · list_projects

  • Reads documents from a collection

    Fetches documents from a Firestore collection, with optional filters, ordering and a limit.

    Try: “Show the 20 newest orders from the orders collection.”

    Network · list_documents

  • Opens one document

    Returns every field of a single Firestore document, given its collection path and ID.

    Try: “Open the document products/abc123.”

    Network · get_document

  • Counts documents in a collection

    Returns how many documents a Firestore collection holds, without loading them.

    Try: “How many users are in the users collection?”

    Network · count_documents

  • Lists top-level Firestore collections

    Reads the live list of root collections in the project, including ones created moments ago. These are the paths that can become CMS collections.

    Try: “Which collections exist in my Firestore?”

    Network · get_root_collections

  • Lists collections nested under a document

    Returns the subcollections of one document with their full paths, so nested data can be found and turned into CMS collections.

    Try: “What subcollections does the document users/u1 have?”

    Network · list_subcollections

  • Lists Firestore databases

    Lists the Firestore databases in a project. You only need it when the project uses more than the default database.

    Try: “Does this project have more than one Firestore database?”

    Network · list_databases

  • Drafts a schema from real data

    Samples documents from a Firestore path and works out field types, enum candidates and validation from them. Nothing is saved, so you can edit the draft first.

    Try: “Preview a schema for the products collection without saving it.”

    Network · preview_inferred_schema

  • Lists saved collection schemas

    Returns every collection configuration saved for the project, with names, paths and properties.

    Try: “List all collection schemas in my FireCMS project.”

    Network · list_collection_schemas

  • Shows one collection schema

    Returns the full definition of one collection: properties, validation rules, display settings and subcollections.

    Try: “Show the schema for the blog collection.”

    Network · get_collection_schema

  • Exports a collection as JSON

    Returns documents from a collection as JSON, useful for backups, analysis or migration. Use the limit for large collections.

    Try: “Export the first 100 documents of the customers collection.”

    Network · export_collection

  • Lists project users and roles

    Shows everyone with access to a project and whether each is an admin, editor or viewer.

    Try: “Who has admin access to this project?”

    Network · list_users

Read from the source code

Permissions

high risk · 6 things to watch

High risk

The assistant can read, change and delete your Firestore documents, users and CMS settings with your FireCMS permissions, and nothing limits it to read-only. Use a non-admin account where you can, check each delete, and export a backup before bulk changes.

What it can do

  • Read your data
  • Create and change things
  • Delete things
  • Read-only mode

Watch out for

  • It can delete documents permanently

    The delete document tool removes a Firestore document and its description calls the action permanent. Back up with the export tool first and approve each delete. github.com

  • Bulk import overwrites existing documents

    Import writes up to 500 documents per call and replaces any document with the same ID unless merge is on. Ask the assistant to show the IDs before it runs. github.com

  • It can remove users and change roles

    The add, update-role and remove user tools change who can reach the project. Only admins can use them, so keep the admin role to people you trust. github.com

  • Schema tools can overwrite or remove collections

    Saving a schema replaces one with the same ID, and the delete tools remove collection or field settings from the CMS. The Firestore data itself is not deleted by these tools. github.com

  • Local connect edits Google Cloud and security rules

    On the local server, connecting a project creates a service account and adds an access rule to Firestore and Storage rules. The local server uses a Google token with cloud-platform scope, so use an account that only reaches the projects you intend. github.com

  • Schema inference sends sample data to an LLM

    The bulk collection setup samples your documents and the FireCMS backend uses an LLM to pick names, icons and widgets. Skip it for collections with sensitive content. github.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details
Turning on read-onlyNo read-only switch is documented. Tools that only read declare readOnlyHint, but every write tool is still registered.
Talks toFireCMS Cloud API (api.firecms.co), which reads and writes your Firestore through its service account. Google sign-in and Google Cloud APIs (local server only)
Sign-in and keysHosted: OAuth sign-in in the browser, the person approves each client in the web app. Local: Google sign-in, tokens kept in ~/.firecms/tokens.json (shared with the FireCMS CLI).
Scopes
  • admin role on the FireCMS project for schema, user and settings changes

  • Google cloud-platform access token (local server only)

Questions

Is the FireCMS MCP server official?

Yes. It is built by the FireCMS team and ships from the firecms monorepo, where it is the packages/mcp_server package.

What is the FireCMS MCP server URL?

The hosted address is https://api.firecms.co/mcp. Add it as a custom connector in Claude, or follow the install box for other apps. You sign in with your FireCMS account in the browser.

Hosted or local: which should I use?

Use hosted unless you need to prepare a new Google Cloud project. The hosted server has fewer tools because it holds no Google credentials. Its connect tool returns a link to the web app. The local server adds login and the Google Cloud setup tools.

Does it need an API key?

No. Hosted uses an OAuth sign-in in the browser. Local asks you to sign in with your Google account through its login tool.

Can it run read-only?

No. The server has no read-only mode. Schema, user and settings changes need the admin role, so a non-admin account limits those, but the README does not mark document tools as admin-only.

Can it delete my data?

Yes. It can delete Firestore documents permanently, and it can remove users and collection settings. Deleting a collection schema or field does not delete the Firestore data.

Is the tool list complete?

Yes for the local server, which registers 45 tools in version 3.5.1. The hosted server registers 38, because it leaves out login, logout and the five Google Cloud setup tools, and its connect tool only returns a link.

Is it free?

The server package is free and MIT licensed. You need a FireCMS Cloud project, and new projects start on the free plan. Check FireCMS pricing for paid plans.

Information

updated Nov 2, 2026

Publisher
Official
Package
@firecms/mcp-server
Registry
npm
Endpoint
https://api.firecms.co/mcp
Transport
stdio, Streamable HTTP
Auth
OAuth
Version
3.5.1
License
MIT
Last commit
Oct 29, 2026
Open issues
26
Listed in
Official MCP registry

WebsiteGitHubnpmOfficial MCP RegistryChangelogIssues

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 5
  1. github.com · github.com
  2. github.com · github.com
  3. github.com · github.com
  4. github.com · github.com
  5. github.com · github.com

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 2, 2026.