PlugWiki
Neo4j MCP Server logo

Neo4j MCP Server: Setup for Claude, Cursor and Other Apps

OfficialLocal
GetPyPIneo4j-mcp-serverneo4j/mcp
Tools
4
3 read · 1 change
Stars
304
on GitHub
Works in
12
apps
Risk
High
can write
Auth
token in env

Lets your AI assistant explore a Neo4j graph database and answer questions by running Cypher queries.

Neo4j's official MCP server lets Claude, Cursor and VS Code read your graph database's schema and run Cypher queries in plain language. It runs on your computer and signs in to your database with a username and password. Read-only mode turns off the one tool that changes data, but it is off by default, so set it first if the assistant should only look.

Good for

  • Developers who want to ask their graph database questions in plain language
  • Analysts who want graph algorithms suggested from inside the chat
  • Teams who want Neo4j's own server rather than a community one

Works in

12 should work

Tap an app to see how to set it up and any known problems.

Install Neo4j MCP

Claude Code

  1. 1

    Copy this prompt.

    Add the Neo4j MCP server to Claude Code. Run this command:

claude mcp add neo4j-mcp --env NEO4J_MCP_URI=<NEO4J_MCP_URI> --env NEO4J_MCP_USERNAME=<NEO4J_MCP_USERNAME> --env NEO4J_MCP_PASSWORD=<NEO4J_MCP_PASSWORD> --env NEO4J_MCP_DATABASE=<NEO4J_MCP_DATABASE> -- uvx neo4j-mcp-server

Ask me for NEO4J_MCP_URI, NEO4J_MCP_USERNAME, NEO4J_MCP_PASSWORD, NEO4J_MCP_DATABASE and only put the values in that config, nowhere else.

Then check that it loaded and tell me if I need to sign in or restart.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires uv (Python).

Read-only mode: Add NEO4J_MCP_READ_ONLY=true to the env block to remove the write-cypher tool.

Install with uvx neo4j-mcp-server (needs uv) or brew install neo4j-mcp, per the Neo4j installation page.

Built from the package data we hold. Not yet tested by us.

Tools

  • Shows what kinds of things your graph holds and how they connect

    Samples your database and reports its node labels, relationship types and property names, so the assistant knows what exists before it writes a query. It returns nothing if the database is empty. The sample size defaults to 100 nodes.

    Try: “What kinds of nodes and relationships does my movie database have?”

    Read · get-schema

  • Answers questions by running read-only Cypher queries

    Runs a Cypher query that only reads data. The server checks the query with an extra round-trip to Neo4j and refuses writes, schema or admin commands and PROFILE queries. A custom procedure that Neo4j wrongly marks as read-only could slip past that check.

    Try: “List the ten actors who appear in the most movies.”

    Read · read-cypher

  • Creates, changes and deletes data by running any Cypher query

    Runs any Cypher query with write access, including CREATE, MERGE, SET and DELETE, plus schema and admin commands. It is not available when read-only mode is on. Nothing in the tool stops a query that deletes data.

    Try: “Add a new Person node named Ada Lovelace and link her to the Analytical Engine project.”

    Delete · write-cypher

  • Lists the graph analytics functions your database offers

    Lists the Graph Data Science procedures installed in your database, such as centrality, community detection, similarity and path finding. The assistant uses it to plan analysis before writing queries. If GDS is not installed, Neo4j hides this tool, so you see 3 tools instead of 4.

    Try: “Which graph algorithms can I run on this database?”

    Read · list-gds-procedures

Read from the source code

Permissions

high risk · 4 things to watch

High risk

With default settings, the assistant can read your whole database and run any Cypher write query, including ones that delete data. Turn on read-only mode and use a database user that only has the access you want it to have.

What it can do

Watch out for

  • write-cypher can change or delete any data

    It runs any Cypher query with write access and has no confirmation step. Turn on read-only mode, or connect with a database user that cannot write. github.com

  • Read-only check can miss mislabelled procedures

    read-cypher relies on Neo4j classifying queries, and the README says a custom procedure wrongly marked read-only may bypass it. Use a read-only database user for strong protection. github.com

  • Sends anonymous usage data by default

    Telemetry covers which tools you use, your operating system and CPU type, per the startup message. Set NEO4J_MCP_TELEMETRY=false to stop it. github.com

  • HTTP mode is local-only by default and needs an allow-list

    Optional HTTP mode binds 127.0.0.1 unless NEO4J_MCP_HTTP_HOST is changed. Each request must carry Neo4j credentials (a missing Authorization header returns 401), and the server refuses to start without NEO4J_MCP_HTTP_ALLOWED_URIS, the list of Neo4j hosts it may connect to. It also refuses NEO4J_MCP_URI, username, password and database settings in this mode. github.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details
Turning on read-onlySet NEO4J_MCP_READ_ONLY=true (or pass --read-only true). The write-cypher tool is then not registered; every remaining tool is annotated read-only. NEO4J_MCP_TOOLS or --tools narrows the list further.
Talks toYour Neo4j database at the URI you set. Anonymous usage statistics to Mixpanel, unless you turn telemetry off
Sign-in and keysYour Neo4j username and password go in the server config as environment variables on your machine.

Questions

Is the Neo4j MCP server official?

Yes. Neo4j publishes it in its own neo4j/mcp repository and documents it at neo4j.com/docs/mcp. The Neo4j Labs servers are separate projects.

What is the difference between this and the Neo4j Labs servers?

This server focuses on schema, Cypher queries and graph algorithm discovery. The Neo4j Labs servers cover other jobs: Neo4j Cypher for queries, Neo4j Data Modeling for designing graph models and Neo4j Memory for storing an assistant's memory in a graph.

Can I make it read-only?

Yes. Set NEO4J_MCP_READ_ONLY to true and the write tool is not offered. The other three tools stay, and they only read.

What do I need to connect it?

A Neo4j address, a username, a password and a database name. All four are required for the default local mode. Your Neo4j database can be local or hosted, such as Aura.

Does it send my data anywhere?

Query results go to your AI assistant, like any MCP server. It also sends anonymous usage statistics to Mixpanel by default. Set NEO4J_MCP_TELEMETRY to false to turn that off.

Can the assistant delete my data?

Yes, by default. The write tool runs any Cypher, including DELETE. Use read-only mode or a database user without write rights.

Do I need Python to install it?

Not necessarily. The install box shows the uv route from the PyPI package, and the documentation also lists Homebrew and a downloadable program for Mac, Linux and Windows.

How do I add it to Claude or Cursor?

Pick your app in the install box above and fill in the four database settings.

Information

updated Nov 2, 2026

Publisher
Official
Package
neo4j-mcp-server
Registry
PyPI
Transport
stdio, Streamable HTTP
Auth
token in env
Version
2.0.0
License
GPL-3.0-only
Last commit
Oct 29, 2026
Open issues
8
Listed in
Official MCP registry, Docker MCP Catalog

WebsiteGitHubPyPIOfficial MCP RegistryChangelogIssues

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 10
  1. neo4j.com · neo4j.com
  2. Neo4j MCP: Client configuration · neo4j.com
  3. github.com · github.com
  4. github.com · github.com
  5. Neo4j MCP: Tools · neo4j.com
  6. github.com · github.com
  7. github.com · github.com
  8. neo4j.com · neo4j.com
  9. Neo4j MCP: HTTP mode · neo4j.com
  10. neo4j/mcp config.go v2.0.0 · github.com

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 2, 2026.