Documentation MCP Server

Firebase MCP

Name: Firebase MCP
Author: firebase

Gives AI development tools Firebase-specific capabilities and expertise.

Scan found nothing by firebase4,362MITTypeScriptBeginnerstdio

Install

Claude Code

claude mcp add firebase-tools -- npx -y firebase-mcp

Cursor

{
  "mcpServers": {
    "firebase-tools": {
      "command": "npx",
      "args": [
        "-y",
        "firebase-mcp"
      ]
    }
  }
}

VS Code

{
  "mcp": {
    "servers": {
      "firebase-tools": {
        "command": "npx",
        "args": [
          "-y",
          "firebase-mcp"
        ]
      }
    }
  }
}

Windsurf

{
  "mcpServers": {
    "firebase-tools": {
      "command": "npx",
      "args": [
        "-y",
        "firebase-mcp"
      ]
    }
  }
}

Claude Desktop

{
  "mcpServers": {
    "firebase-tools": {
      "command": "npx",
      "args": [
        "-y",
        "firebase-mcp"
      ]
    }
  }
}

Safety Report

100% Scan found nothing

Scanned 5 months ago

7 passed

Security

Authentication

details

Uses existing Firebase CLI credentials via Google Account OAuth. No separate API key management needed.

Pass

CORS Policy

details

Local stdio transport. CORS not applicable.

N/A

Rate Limiting

details

Inherits Firebase/Google Cloud API rate limits per project quota.

Info

Known CVEs

details

Official Firebase product. No MCP-specific CVEs identified.

Pass

Code Quality

Dependency Audit

details

Part of the official firebase-tools npm package maintained by Google/Firebase team. Regular security audits expected.

Pass

Dangerous Patterns

details

No dangerous code patterns detected

Pass

License

details

MIT License. Official Google/Firebase tooling.

Pass

Code Source

details

Open source under firebase/firebase-tools (GitHub). MIT licensed, maintained by Google Firebase team.

Pass

Community

Maintenance Status

details

Actively maintained by Firebase/Google. Frequent releases as part of firebase-tools package.

Pass

Compatibility

Claude CodeFirst-class support. Install via plugin or configure manually with `npx -y firebase-tools@latest experimental:mcp`.

Not Tested

CursorSupported via .cursor/mcp.json configuration with npx command.

Not Tested

VS CodeSupported via .vscode/mcp.json. Works with VS Code MCP extensions.

Not Tested

WindsurfDocumented support via JSON configuration.

Not Tested

Claude DesktopSupported via claude_desktop_config.json with npx firebase-tools command.

Not Tested

Tools Provided (39)

firebase_get_environment

Retrieve the current Firebase environment and project configuration.

firebase_update_environment

Update Firebase environment configuration settings.

firebase_get_project

Get details about the current Firebase project.

firebase_list_projects

List all Firebase projects accessible to the authenticated user.

firebase_create_project

Create a new Firebase project.

firebase_list_apps

List apps registered under a Firebase project.

firebase_create_app

firebase_get_sdk_config

Retrieve the Firebase SDK configuration for a registered app.

firebase_init

Initialize Firebase services in the current project.

firebase_validate_security_rules

Validate Firestore or Realtime Database security rules for syntax and logic errors.

firebase_get_security_rules

Retrieve the current security rules for a Firebase service.

firebase_read_resources

Read Firebase project resources and configuration files.

auth_get_users

Retrieve Firebase Authentication users by UID or email address.

auth_update_user

Update a Firebase Auth user — enable/disable account or set custom claims.

auth_set_sms_region_policy

Restrict SMS-based authentication to specific country codes.

firestore_get_documents

Retrieve one or more Firestore documents by path.

firestore_list_collections

List collections in Firestore at a given path.

firestore_query_collection

Query a Firestore collection with filters, ordering, and limits.

firestore_delete_document

Delete a Firestore document by path.

functions_list_functions

List all deployed Cloud Functions in the project.

functions_get_logs

Retrieve execution logs from Cloud Functions.

crashlytics_get_issue

Get details about a specific Crashlytics crash issue.

crashlytics_list_events

List crash events for a Crashlytics issue.

crashlytics_get_report

Generate a crash report summary from Crashlytics data.

crashlytics_update_issue

Update the status or metadata of a Crashlytics issue.

crashlytics_create_note

Add a note to a Crashlytics issue.

crashlytics_delete_note

Delete a note from a Crashlytics issue.

crashlytics_list_notes

List notes attached to a Crashlytics issue.

realtimedatabase_get_data

Read data from Firebase Realtime Database at a specified path.

realtimedatabase_set_data

Write or update data in Firebase Realtime Database.

dataconnect_build

Build a Firebase Data Connect schema and connector.

dataconnect_list_services

List Data Connect services in the project.

dataconnect_execute

Execute a Data Connect query or mutation.

apphosting_list_backends

List App Hosting backends in the project.

apphosting_fetch_logs

Fetch deployment and runtime logs from App Hosting.

messaging_send_message

Send a push notification via Firebase Cloud Messaging.

remoteconfig_get_template

Retrieve the current Firebase Remote Config template.

remoteconfig_update_template

Update the Firebase Remote Config template with new parameters.

storage_get_object_download_url

Get a download URL for an object in Firebase Cloud Storage.

Frequently Asked Questions

What is Firebase MCP?

Gives AI development tools Firebase-specific capabilities and expertise.

What tools does Firebase MCP provide?

Firebase MCP provides 39 tools including firebase_get_environment, firebase_update_environment, firebase_get_project, firebase_list_projects. Each tool can be called by AI agents to perform specific operations.

Is Firebase MCP safe to use?

We cannot tell you that, and nobody scanning at this scale can. What we did in March 2026 was shallow-clone Firebase MCP and run five keyword searches over its source: auth identifiers, CORS configuration, rate-limit identifiers, the dependency manifest against a hardcoded list of 18 known-vulnerable packages, and unguarded eval/exec calls. None of them matched. A text search cannot follow a variable, judge intent, or tell you what a server does once it is running, so "nothing matched" is not "safe". What the scan does and does not cover is written out at /mcp/security.

What are alternatives to Firebase MCP?

Similar MCP servers include Figma Context MCP, Git MCP, Mobile MCP. Each serves a similar purpose but may differ in features, language, and compatibility.

Stay Updated on MCP Servers

New servers, safety alerts, and install guides — weekly.

Firebase MCP

Install

Safety Report

Compatibility

Tools Provided (39)

Frequently Asked Questions

Similar MCP Servers

Figma Context MCP

Git MCP

Mobile MCP

Free AI writing tools

Stay Updated on MCP Servers