DATABASE DEVELOPMENT / AWS Labs
Timestream for InfluxDB MCP
Pins the Timestream for InfluxDB MCP server, which refuses mutating tools unless ALLOW_WRITE is set at startup.
“Manages Timestream for InfluxDB and queries InfluxDB, with writes off unless the operator sets ALLOW_WRITE and, for Flux writes, INFLUXDB_WRITE_MODE.”
01 / THE REASONING
Why this made the selection.
- The catalogue does not have a Timestream for InfluxDB MCP server.
- The README says write flags are operator environment variables evaluated at startup, not arguments a tool caller can set.
02 / THE REVIEW RECORD
What we actually inspected.
Source review has boundaries.
A clear record is more useful than a “safe” badge.
Material inspected
- src/timestream-for-influxdb-mcp-server/README.md
- src/timestream-for-influxdb-mcp-server/LICENSE
Our findings
- A caller-supplied InfluxDB URL must match INFLUXDB_URL or INFLUXDB_ALLOWED_URLS, and a partial connection does not fall back to the server environment.
- ALLOW_WRITE defaults to false and is read at startup. Mutating tools, including cluster create and delete and data-plane writes, are refused when it is off.
- InfluxDBQuery rejects Flux to(), experimental.to(), and wideTo() unless INFLUXDB_WRITE_MODE=true. The Windows example sets type to stdio.
Not established by this review
- The resource was not executed and its tools were not called.
- No InfluxDB query was sent.
- ALLOW_WRITE was not enabled.
- No cluster was created.
The review applies to the material and revision named here. A newer upstream release can change its behavior.
03 / PUT IT TO WORK
Connect a server deliberately.
- The client examples use uvx and awslabs.timestream-for-influxdb-mcp-server@latest with AWS_PROFILE and AWS_REGION.
- Set INFLUXDB_URL, INFLUXDB_TOKEN, and INFLUXDB_ORG for the data plane, and INFLUXDB_ALLOWED_URLS before any other endpoint is targeted.
- Leave ALLOW_WRITE and INFLUXDB_WRITE_MODE unset for the default read-only behavior. No single shell line is recorded.
Before you start
- uv
- AWS credentials for the control plane
- An InfluxDB token the operator is willing to expose to the local server
04 / FOLLOW THE EVIDENCE
The source trail.
Our notes are separate from the original resource.
Check upstream before adopting a new version.
https://github.com/awslabs/mcp/blob/8840003820a78dd018561d55c7ab12fcdd708464/src/timestream-for-influxdb-mcp-server/README.md
Supports: URL allow-list and startup write flags
- Directory LICENSE ↗Checked
https://github.com/awslabs/mcp/blob/8840003820a78dd018561d55c7ab12fcdd708464/src/timestream-for-influxdb-mcp-server/LICENSE
Supports: Apache License Version 2.0