--- title: "Airtable MCP Server: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/mcp-servers/airtable/ description: "Hosted Airtable server exposing bases, records, tables, interfaces and automations as tools over Streamable HTTP. Every connection is scoped to authorised bases and the server enforces existing Airtable permissions, so a read-only base stays read-only through MCP." --- # Airtable MCP Server: review, setup & limitations · Undominated.ai > Hosted Airtable server exposing bases, records, tables, interfaces and automations as tools over Streamable HTTP. Every connection is scoped to authorised bases and the server enforces existing Airtable permissions, so a read-only base stays read-only through MCP. [← Explore all mcp servers](/mcp-servers/) LOW-CODE DATABASE / Airtable # Airtable MCP Server Hosted Airtable server exposing bases, records, tables, interfaces and automations as tools over Streamable HTTP. Every connection is scoped to authorised bases and the server enforces existing Airtable permissions, so a read-only base stays read-only through MCP. [See setup guidance ↓](#setup)[Original source ↗](https://www.airtable.com/articles/mcp-server-interfaces-automations) SOURCE REVIEW Reviewed 2026-10-13 Evidence 6 linked sources Publisher Airtable Licence Not established [Read what was—and wasn’t—checked ↓](#review) “It respects your existing Airtable permissions, so a model can only see or change what you already have access to.” [Airtable · upstream description ↗](https://www.airtable.com/articles/mcp-server-interfaces-automations) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - The official hosted server covers bases, records, table creation, interfaces and automations, which no community Airtable server in discovery matched. - Connection scoping plus permission enforcement is documented at the publisher, so the read-only versus write boundary follows the account rather than a server-side flag. ### A good fit for - Letting an agent list bases, read and filter records, and create tables or automations in a base it was explicitly authorised for. - Teams that want Airtable access without running a local Node or Python process. ### Weigh up before choosing - Write capability is bounded by the connected user's Airtable permissions; an admin can block third-party integrations or allowlist specific client IDs enterprise-wide. - Automations created through MCP stay drafts until turned on in the Airtable UI. Automations with Script actions cannot be created or edited through MCP. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - Airtable publisher article: MCP capabilities (list bases, read and filter records, create tables, interfaces and automations) and the permission-enforcement statement. - Airtable MCP CLI repository at pinned revision 6847f24e318e366a2afac4967f72b1b976ea9654: README documents AIRTABLE_MCP_ENDPOINT default https://mcp.airtable.com/mcp and restricts endpoints to HTTPS on *.airtable.com to prevent token exfiltration; package.json names @airtable/mcp-cli; LICENSE is MIT for the CLI. - Airtable help-centre setup article (search-indexed): setup paths are pre-built connectors, plugins, manual OAuth configuration and personal access tokens. - Airtable developer docs pages other, controls and tools at https://airtable.com/developers/agents/mcp/, read directly on 2026-10-13. ### Our findings - The server is hosted by Airtable; the official CLI is a companion that discovers commands from it at runtime rather than a bundled server implementation. - The developer-docs controls page, read directly on 2026-10-13, describes per-connection base scoping, an Enterprise Scale admin switch that blocks MCP access, and an admin allowlist of connector OAuth client IDs. - Correction, 2026-10-13: the 2026-10-07 review recorded the developer docs as not fetchable by plain HTTP and credited the configExample to the CLI README, which prints no client block. The developer docs answered plain HTTP on 2026-10-13, and the configExample is verbatim on their page for other clients. - The tools reference lists delete_records_for_table, delete_table, delete_interface, delete_page and delete_automation, plus submit_form and create_base. A connection with write scopes can remove records and whole tables. ### Not established by this review - No OAuth flow, connector creation or record operation was executed against the endpoint. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Connect a server deliberately. [Upstream setup instructions ↗](https://www.airtable.com/articles/mcp-server-interfaces-automations) - Add https://mcp.airtable.com/mcp as a remote MCP server in the client. - Authorise via the client's OAuth flow or a personal access token scoped to the bases the agent may touch. - Confirm the connected account's permissions before enabling write-capable work. ### Before you start - An Airtable account with access to the target bases. - An MCP client that supports remote Streamable HTTP servers. ### Documented configuration example Use the client and authentication context described in the setup guidance. Configuration formats vary between hosts. { "mcpServers": { "airtable": { "type": "http", "url": "https://mcp.airtable.com/mcp" } } } Copy configuration ↗ ### Compatibility MCP clients supporting Streamable HTTP with OAuth, including Claude, Claude Code, ChatGPT and Cursor. · Personal-access-token clients connect with an Authorization Bearer header instead of OAuth. ### Transports Streamable HTTP ### Airtable OAuth or personal access token - Reads and writes only the bases explicitly authorised for the connection; the server enforces the same permission boundaries as the Airtable UI and REST API. - Enterprise admins can block third-party integrations or allowlist specific MCP client IDs. - Access becomes read-only when data.records:write and schema.bases:write are left out of the PAT or OAuth consent. ### Cost model Airtable plan limits apply; the MCP server itself carries no separate charge. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [Airtable article on the MCP server ↗](https://www.airtable.com/articles/mcp-server-interfaces-automations) Checked 2026-10-13 https://www.airtable.com/articles/mcp-server-interfaces-automations Supports: summary, upstreamDescription, bestFor, access, whySelected - [Airtable MCP CLI readme at pinned revision ↗](https://github.com/Airtable/airtable-mcp-cli/blob/6847f24e318e366a2afac4967f72b1b976ea9654/README.md) Checked 2026-10-13 https://github.com/Airtable/airtable-mcp-cli/blob/6847f24e318e366a2afac4967f72b1b976ea9654/README.md Supports: transports, access, limitations - [Airtable help-centre MCP setup guide ↗](https://support.airtable.com/articles/9897799762-using-the-airtable-mcp-server) Checked 2026-10-13 https://support.airtable.com/articles/9897799762-using-the-airtable-mcp-server Supports: install, compatibility, limitations - [Airtable MCP developer docs: other clients ↗](https://airtable.com/developers/agents/mcp/other) Checked 2026-10-13 https://airtable.com/developers/agents/mcp/other Supports: configExample, install, access - [Airtable MCP developer docs: controls ↗](https://airtable.com/developers/agents/mcp/controls) Checked 2026-10-13 https://airtable.com/developers/agents/mcp/controls Supports: access, limitations, review - [Airtable MCP developer docs: tools reference ↗](https://airtable.com/developers/agents/mcp/tools) Checked 2026-10-13 https://airtable.com/developers/agents/mcp/tools Supports: review, limitations KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Algolia MCP Server ↗ Algolia's managed MCP offerings: Public MCP exposes application-scoped search and recommendations on selected indices for customer-facing agents; Productivity MCP gives user-scoped, read-only exploration and analytics; DevEx MCP serves version-matched API client snippets to coding agents without touching data.](/mcp-servers/algolia/)[### Amplitude MCP Server ↗ Amplitude's hosted MCP server for analysing product data, experiments and user behaviour: search dashboards, charts, notebooks and experiments, query charts and metrics, analyse experiment significance, and search session replays — with separate US and EU endpoints for data residency.](/mcp-servers/amplitude/)[### Attio MCP ↗ Attio's hosted MCP server giving AI tools secure access to the workspace: search, read, create and update people, companies, deals, tasks and notes, with meeting intelligence over call recordings and transcripts. OAuth as the Attio user; reads auto-approved, writes request confirmation.](/mcp-servers/attio/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Inspect resource evidence](/tools/) - [Choose a host](/agents/) - [Inspect reusable workflows](/skills/) - [Use Undominated data](/api/)