--- title: "Neo4j MCP: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/mcp-servers/neo4j/ description: "Explore a Neo4j graph schema and run Cypher through a server with an explicit read-only configuration." --- # Neo4j MCP: review, setup & limitations · Undominated.ai > Explore a Neo4j graph schema and run Cypher through a server with an explicit read-only configuration. [← Explore all mcp servers](/mcp-servers/) DATABASE EXPLORATION / Neo4j # Neo4j MCP Explore a Neo4j graph schema and run Cypher through a server with an explicit read-only configuration. See setup guidance ↓Original source ↗ SOURCE REVIEW Reviewed 2026-09-21 Evidence 8 linked sources Publisher Neo4j Licence GPL-3.0; Neo4j Aura/commercial-product terms where applicable ↗ Revision 905121a3d529 Read what was—and wasn’t—checked ↓ “Neo4j MCP gives AI assistants and LLM-powered tools direct, structured access to your Neo4j graph database.” Neo4j · upstream description ↗ Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - Schema introspection helps an agent discover graph labels, relationships and properties before writing queries. - The read-only setting removes the write-Cypher tool, with separate database credentials still controlling access. ### A good fit for - Explore an existing Neo4j graph. - Develop reviewed Cypher queries against a non-production database. ### Weigh up before choosing - Write mode is available and is the configuration default; set NEO4J_MCP_READ_ONLY=true when appropriate. - Read-Cypher checking relies on Neo4j query classification; misclassified custom procedures/functions can bypass that intended boundary. - Telemetry defaults on in the inspected configuration; use the documented setting if you need it disabled. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - Pinned README, Go manifest, server/tool registration and configuration. - Read-Cypher handler, current installation/configuration docs, LICENSE.txt and NOTICE.txt. ### Our findings - The implementation is Go even though the README also offers a Python distribution wrapper. - Stdio uses environment credentials; HTTP mode receives per-request Basic credentials. These are different authentication setups. ### Not established by this review - Server launch, authenticated tool calls, and release-to-source parity were not tested. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Connect a server deliberately. Upstream setup instructions ↗ DOCUMENTED COMMAND pip install neo4j-mcp-server Copy command ↗ Copying does not execute this command. It may retrieve a newer version than the reviewed source. - Install using the official PyPI command below or choose the documented binary/container route. - Configure the database URI, database and credentials in your client; set NEO4J_MCP_READ_ONLY=true for exploration. - Follow the separate HTTP instructions if exposing a listener, including authentication and TLS configuration. ### Before you start - An accessible Neo4j database and credentials. - Python for the shown distribution route, or the platform-appropriate native executable. ### Compatibility VS Code · Claude · Cursor ### Implementation Go ### Transports stdio · Streamable HTTP ### Database credentials - Reads graph schema and query results. - Can run write Cypher unless disabled; database privileges remain important even in read-only mode. ### Cost model Neo4j hosting or Aura plan and connected AI-client charges are separate. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - Neo4j MCP setup and scope ↗ Checked 2026-09-21 https://raw.githubusercontent.com/neo4j/mcp/905121a3d5295323a9f3971701b7aefae989fcad/README.md Supports: summary, upstreamDescription, whySelected, bestFor, limitations, install, access, compatibility, transports, review - Neo4j MCP installation routes ↗ Checked 2026-09-21 https://neo4j.com/docs/mcp/current/installation/ Supports: install, compatibility - Neo4j MCP configuration ↗ Checked 2026-09-21 https://neo4j.com/docs/mcp/current/configuration/ Supports: limitations, install, access, transports - Neo4j transport, credentials and defaults ↗ Checked 2026-09-21 https://raw.githubusercontent.com/neo4j/mcp/905121a3d5295323a9f3971701b7aefae989fcad/internal/config/config.go Supports: language, review, limitations, transports - Neo4j read-only tool filtering ↗ Checked 2026-09-21 https://raw.githubusercontent.com/neo4j/mcp/905121a3d5295323a9f3971701b7aefae989fcad/internal/server/tools_register.go Supports: review, access - Neo4j read query handler ↗ Checked 2026-09-21 https://raw.githubusercontent.com/neo4j/mcp/905121a3d5295323a9f3971701b7aefae989fcad/internal/tools/cypher/read_cypher_handler.go Supports: review, limitations - Neo4j source licence ↗ Checked 2026-09-21 https://raw.githubusercontent.com/neo4j/mcp/905121a3d5295323a9f3971701b7aefae989fcad/LICENSE.txt Supports: license - Neo4j distribution and service-agreement notice ↗ Checked 2026-09-21 https://raw.githubusercontent.com/neo4j/mcp/905121a3d5295323a9f3971701b7aefae989fcad/NOTICE.txt Supports: license, limitations KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### MongoDB MCP Server ↗ Provides MongoDB database and Atlas operations through a local server with an explicit read-only startup option.](/mcp-servers/mongodb/)[### Prisma MCP ↗ Manage Prisma Postgres databases, connection strings, recovery and object-store resources from an authenticated client.](/mcp-servers/prisma/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)