nextcloud-mcp-server — Watchlist

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Monitor exact implementation activity, MCP interface, permission and setup changes.

Reviewed Oct 10, 2026 · Documentation review; complete setup workflow not independently tested

Best fit

Nextcloud files and collaboration

What we know

Nextcloud MCP Server Public Radar listing describes capability; verify precise runtime setup and privilege boundaries upstream.

Maintenance / activity evidence

GitHub exact repo pushed_at 2026-10-09T19:03:42Z

Tracking evidence observed Oct 10, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: medium.

Verification gaps / watch-outs

Installation and comprehensive security have not been independently audited.
Nextcloud account may include private files, shares and write/delete operations; restrict credentials. Reported action classes: create/update/delete files or shares if enabled. Complete write authority is not verified.
Refer to first-party setup documentation; do not infer authorization from package existence.
Sensitive access: Nextcloud documents and account credentials

Nextcloud account may include private files, shares and write/delete operations; restrict credentials.
Public tracking suitability is not an installation safety audit.

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

378 repository stars

Stars observed Oct 10, 2026.

Repository total for cbcoutinho/nextcloud-mcp-server.

All limitations / Review context

Has nextcloud-mcp-server changed its documented MCP interface, authentication or privilege boundaries, and does it merit promotion?

Limited editorial listing; known permission implications disclosed, no independently established publication blocker.

Nextcloud account may include private files, shares and write/delete operations; restrict credentials.
Public tracking suitability is not an installation safety audit.
Refer to first-party setup documentation; do not infer authorization from package existence.
Nextcloud documents and account credentials
Reviewed write actions: create/update/delete files or shares if enabled
Sensitive access: Nextcloud documents and account credentials
Complete write authority is not verified.
Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
Upstream credential and permission scopes must be validated before runtime use.
Precise setup/auth/permissions not verified
Write actions/tool inventory not confirmed against exact tool documentation; listed action classes remain illustrative or context-dependent. Empty inventory does not establish read-only.
Some integration/runtime instructions are not confirmed from a first-party install guide and therefore intentionally omitted.
Exact GitHub pushed_at 2026-10-09T19:03:42Z

Original activity observations

GitHub exact repo pushed_at 2026-10-09T19:03:42Z

Technical identity

github.com/cbcoutinho/nextcloud-mcp-server

Exact implementation source: https://github.com/cbcoutinho/nextcloud-mcp-server ↗
Reviewed resource type: MCP Server
Repository identity: cbcoutinho/nextcloud-mcp-server

Evidence & Sources

Evidence basis: Recorded source evidence
Setup runtime verification: Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed Oct 10, 2026 · Latest source observation Oct 10, 2026

GitHub repository ↗
cbcoutinho/nextcloud-mcp-server
Recorded repository material and project history.

Setup · Watchlist

Install & Agents

Publisher instructions.

Source evidence observed Oct 12, 2026.

Additional setup details required — see the specific gaps below.

Warning

App password is sensitive; user should be able to revoke it from Nextcloud security settings.
This command may start a stdio MCP server rather than registering it; show the publisher client config alongside it, not as a standalone complete integration step.
Use this JSON only with Claude Desktop. Replace credential and path placeholders with your own settings.
Exact vendor-specific credential revoke procedure not established from checked official Setup documentation; may be external or not applicable. Do not invent.
publisher README config shape Replace the supplied credential/path placeholders privately; use only the named configuration schema.
MCP100 client-scope note: this Claude Code CLI example applies only to that client and the exact registered name in the command. Desktop, Cursor and other clients use their own configuration; do not run it for a differently named entry.

Install / connect
Publisher instructions
Publisher-specific setup path. Follow prerequisites, then register or connect to your MCP host.
publisher documented install or connect · Publisher instructions
uvx nextcloud-mcp-server run --transport stdio

Configure / authenticate

Publisher instructions

Set NEXTCLOUD_HOST, NEXTCLOUD_USERNAME and NEXTCLOUD_PASSWORD (Nextcloud app password from Settings > Security > Devices & sessions) in the MCP host environment.

Advanced configuration · claude desktop json · Publisher instructions

claude desktop json · Publisher instructions

{
  "mcpServers": {
    "nextcloud": {
      "args": [
        "nextcloud-mcp-server",
        "run",
        "--transport",
        "stdio"
      ],
      "command": "uvx",
      "env": {
        "NEXTCLOUD_HOST": "https://your.nextcloud.instance.com",
        "NEXTCLOUD_PASSWORD": "your_app_password",
        "NEXTCLOUD_USERNAME": "your_username"
      }
    }
  }
}

Check connection
Suggested check
Restart/reconnect client; request a read-only Nextcloud file listing.
Remove / uninstall / revoke
MCP100 setup guide
Remove the `nextcloud` entry from the client MCP config; if using Docker, stop the container separately.
MCP100 client-scope guidance: each CLI removal example targets only its named client and exact registered entry. Package names, Desktop/Cursor configuration keys and Codex/Claude registration names may differ; use the entry you actually registered. Client removal does not revoke provider credentials.
claude mcp remove nextcloud

Official Documentation & Sources

What it does

Nextcloud MCP Server Public Radar listing describes capability; verify precise runtime setup and privilege boundaries upstream.

Capability: Productivity & Collaboration
Resource type: MCP Server
Best fit: Nextcloud files and collaboration

Representative uses

Nextcloud files and collaboration

Limitations

Nextcloud account may include private files, shares and write/delete operations; restrict credentials.
Some integration/runtime instructions are not confirmed from a first-party install guide and therefore intentionally omitted.
Exact GitHub pushed_at 2026-10-09T19:03:42Z

Reviewed access

Access & risk

Review the exact access boundary before connecting this MCP to accounts, credentials, or sensitive data.

Authentication: Refer to first-party setup documentation; do not infer authorization from package existence.
Permissions: Nextcloud account may include private files, shares and write/delete operations; restrict credentials.
Data handling: Nextcloud documents and account credentials
Cost: Provider or usage fees possible; verify current pricing
Risk and cautions: Nextcloud account may include private files, shares and write/delete operations; restrict credentials.

Access scope and cautions

Write actions: Not verified create/update/delete files or shares if enabled
Sensitive access: Nextcloud documents and account credentials
Risk level: high
Security notes: Nextcloud account may include private files, shares and write/delete operations; restrict credentials. Public tracking suitability is not an installation safety audit.

The reviewed evidence does not establish the complete write authority of this MCP. Consult the unresolved evidence before granting write access.

FAQ

Based on reviewed evidence as of 2026-10-10T03:38:00Z. Watchlist tracking is not a recommendation or a security certification.

Which tasks are documented for this implementation?

The reviewed tasks include: Nextcloud files and collaboration.

What setup and authentication are documented?

A complete connection procedure is not verified. Client notes: Installation command omitted unless verified or clearly package-specific; do not infer npx/uvx entrypoints. These facts do not supply missing installation commands, credentials or a verified authentication procedure. Authentication: Refer to first-party setup documentation; do not infer authorization from package existence.

Can it modify data or perform write operations?

Not verified. The available evidence does not establish the complete write authority. The partial inventory lists: create/update/delete files or shares if enabled. Recorded permission context: Nextcloud account may include private files, shares and write/delete operations; restrict credentials.

What data-handling boundary should I consider?

Nextcloud documents and account credentials Recorded sensitive-access context: Nextcloud documents and account credentials.

What limitations and risks should I check before use?

Nextcloud account may include private files, shares and write/delete operations; restrict credentials. Some integration/runtime instructions are not confirmed from a first-party install guide and therefore intentionally omitted. Exact GitHub pushed_at 2026-10-09T19:03:42Z. Public tracking suitability is not an installation safety audit. Upstream credential and permission scopes must be validated before runtime use.