--- title: "Timestream for InfluxDB MCP: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/mcp-servers/awslabs-timestream-influxdb/ description: "Pins the Timestream for InfluxDB MCP server, which refuses mutating tools unless ALLOW_WRITE is set at startup." --- # Timestream for InfluxDB MCP: review, setup & limitations · Undominated.ai > Pins the Timestream for InfluxDB MCP server, which refuses mutating tools unless ALLOW_WRITE is set at startup. [← Explore all mcp servers](/mcp-servers/) DATABASE DEVELOPMENT / AWS Labs # Timestream for InfluxDB MCP Pins the Timestream for InfluxDB MCP server, which refuses mutating tools unless ALLOW_WRITE is set at startup. [See setup guidance ↓](#setup)[Original source ↗](https://github.com/awslabs/mcp/tree/8840003820a78dd018561d55c7ab12fcdd708464/src/timestream-for-influxdb-mcp-server) SOURCE REVIEW Reviewed 2026-10-14 Evidence 2 linked sources Publisher AWS Labs Licence [Apache-2.0 ↗](https://github.com/awslabs/mcp/blob/8840003820a78dd018561d55c7ab12fcdd708464/src/timestream-for-influxdb-mcp-server/LICENSE) Revision 8840003820a7 [Read what was—and wasn’t—checked ↓](#review) “Manages Timestream for InfluxDB and queries InfluxDB, with writes off unless the operator sets ALLOW_WRITE and, for Flux writes, INFLUXDB_WRITE_MODE.” [AWS Labs · upstream description ↗](https://github.com/awslabs/mcp/blob/8840003820a78dd018561d55c7ab12fcdd708464/src/timestream-for-influxdb-mcp-server/README.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - The catalogue does not have a Timestream for InfluxDB MCP server. - The README says write flags are operator environment variables evaluated at startup, not arguments a tool caller can set. ### A good fit for - Reading an InfluxDB endpoint the operator has already allow-listed, with ALLOW_WRITE left false ### Weigh up before choosing - This review did not execute the resource. - install.command is null. The uvx package name is inside a badge and a JSON args array. - CreateDbCluster and DeleteDbCluster are listed as tools and are also in the set refused unless ALLOW_WRITE is true. This review did not call them. - The README does not mention a licence. The directory LICENSE is Apache-2.0. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - src/timestream-for-influxdb-mcp-server/README.md - src/timestream-for-influxdb-mcp-server/LICENSE ### Our findings - A caller-supplied InfluxDB URL must match INFLUXDB_URL or INFLUXDB_ALLOWED_URLS, and a partial connection does not fall back to the server environment. - ALLOW_WRITE defaults to false and is read at startup. Mutating tools, including cluster create and delete and data-plane writes, are refused when it is off. - InfluxDBQuery rejects Flux to(), experimental.to(), and wideTo() unless INFLUXDB_WRITE_MODE=true. The Windows example sets type to stdio. ### Not established by this review - The resource was not executed and its tools were not called. - No InfluxDB query was sent. - ALLOW_WRITE was not enabled. - No cluster was created. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Connect a server deliberately. [Upstream setup instructions ↗](https://github.com/awslabs/mcp/blob/8840003820a78dd018561d55c7ab12fcdd708464/src/timestream-for-influxdb-mcp-server/README.md) - The client examples use uvx and awslabs.timestream-for-influxdb-mcp-server@latest with AWS_PROFILE and AWS_REGION. - Set INFLUXDB_URL, INFLUXDB_TOKEN, and INFLUXDB_ORG for the data plane, and INFLUXDB_ALLOWED_URLS before any other endpoint is targeted. - Leave ALLOW_WRITE and INFLUXDB_WRITE_MODE unset for the default read-only behavior. No single shell line is recorded. ### Before you start - uv - AWS credentials for the control plane - An InfluxDB token the operator is willing to expose to the local server ### Compatibility Kiro · Cursor · VS Code ### Implementation python ### Transports stdio ### Read-only unless startup environment flags enable writes - Query InfluxDB and read Timestream resources in the default mode - Create or delete clusters and write points only when ALLOW_WRITE is true at startup - Reject a URL that is not the configured URL or the allow-list ### Cost model Apache-2.0; no AWS or InfluxDB call was made 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [Timestream for InfluxDB README ↗](https://github.com/awslabs/mcp/blob/8840003820a78dd018561d55c7ab12fcdd708464/src/timestream-for-influxdb-mcp-server/README.md) Checked 2026-10-14 https://github.com/awslabs/mcp/blob/8840003820a78dd018561d55c7ab12fcdd708464/src/timestream-for-influxdb-mcp-server/README.md Supports: URL allow-list and startup write flags - [Directory LICENSE ↗](https://github.com/awslabs/mcp/blob/8840003820a78dd018561d55c7ab12fcdd708464/src/timestream-for-influxdb-mcp-server/LICENSE) Checked 2026-10-14 https://github.com/awslabs/mcp/blob/8840003820a78dd018561d55c7ab12fcdd708464/src/timestream-for-influxdb-mcp-server/LICENSE Supports: Apache License Version 2.0 KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### AWS Labs Postgres MCP ↗ Pins the AWS Labs Postgres server whose read-only guard parses SQL with pglast and still tells operators to use a least-privilege role.](/mcp-servers/awslabs-postgres/)[### AWS Labs SQL Server MCP ↗ Pins the AWS Labs SQL Server server, whose default mode blocks mutating keywords and still says that filter is not the security boundary.](/mcp-servers/awslabs-mssql/)[### Aurora DSQL MCP ↗ AWS Labs MCP server that turns questions into Postgres-compatible SQL for Aurora DSQL, read-only unless --allow-writes is passed, and only on the same host as the client.](/mcp-servers/awslabs-aurora-dsql/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Inspect resource evidence](/tools/) - [Choose a host](/agents/) - [Inspect reusable workflows](/skills/) - [Use Undominated data](/api/)