nx-mcp — Watchlist | MCP100 Index

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Recheck a specific changing behavior of npm/nx-mcp: Are workspace commands and CI output retrieval scoped and constrained after the nx-mcp-v0.25.0 line?

Reviewed Oct 9, 2026 · Documentation review; complete setup workflow not independently tested

Best fit

Nx monorepo architecture and tooling

What we know

Official Nx MCP exposes project graph, generators, tasks and workspace metadata.

Maintenance / activity evidence

Official Nx Console Nx MCP publication workflow records nx-mcp-v0.25.0 and active publishing runs in its 2026 release series; exact publication day was not recovered.

Tracking evidence observed Oct 9, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: high.

Verification gaps / watch-outs

Installation and comprehensive security have not been independently audited.
Reads repository/workspace metadata; tooling may execute development operations, not universally read-only. Reported action classes: Modify Nx workspace configuration or project files when generator/mutation tools are enabled; Run development targets/commands where supported. Complete write authority is not verified.
Authentication not yet verified.
Nx project tasks/generators and Nx Cloud self-healing actions may modify workspace or CI state.

Nx project tasks/generators and Nx Cloud self-healing actions may modify workspace or CI state.
Advisory/security review not completed; no safety badge.
Write action classes summarize access risk; tool-level completeness and exact operation names are not independently verified. Do not mark them as confirmed documented write inventory.
Unknown vulnerabilities and provider data handling are not certified by this public tracking review.

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

1,412 shared-repository stars · 276.8k package downloads / 30 days

Stars observed Oct 9, 2026. Downloads observed Oct 9, 2026.

Repository total for nrwl/nx-console; not package-specific.

Exact npm package nx-mcp; provider interval 2026-09-08–2026-10-07 (inclusive); observed 2026-10-09.

All limitations / Review context

Are workspace commands and CI output retrieval scoped and constrained after the nx-mcp-v0.25.0 line?

No identified material blocker to an accurately qualified public tracking entry in the limited cited evidence. This is not an installation safety certification; product-specific cautions must remain visible.

Nx project tasks/generators and Nx Cloud self-healing actions may modify workspace or CI state.
Advisory/security review not completed; no safety badge.
Write action classes summarize access risk; tool-level completeness and exact operation names are not independently verified. Do not mark them as confirmed documented write inventory.
Reads repository/workspace metadata; tooling may execute development operations, not universally read-only.
Reviewed write actions: Modify Nx workspace configuration or project files when generator/mutation tools are enabled; Run development targets/commands where supported
Complete write authority is not verified.
Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
Development workspace access and CI integration can expose project metadata, logs and command execution privileges.
Unknown vulnerabilities and provider data handling are not certified by this public tracking review.
Release evidence proves attributable activity, not entire installation or tool-level safety.
Current Discovery source binding and atomic apply must be generated using MCP100 existing pipeline.
exact authentication contract
first-party data processing and retention
data retention and permission scope
Write actions/tool inventory not confirmed against exact tool documentation; listed action classes remain illustrative or context-dependent. Empty inventory does not establish read-only.
May expose project-specific data and code modification abilities; confirm version specifics.
Radar public tracking editorial review completed in limited scope; not a security or installation certification. Verify setup according to deployment mode and do not invent unresolved facts.

Original activity observations

Official Nx Console Nx MCP publication workflow records nx-mcp-v0.25.0 and active publishing runs in its 2026 release series; exact publication day was not recovered.

Technical identity

npm/nx-mcp

Exact implementation source: https://www.npmjs.com/package/nx-mcp ↗
Reviewed resource type: MCP Server
Repository identity: nrwl/nx-console
Package identity: npm:nx-mcp

Evidence & Sources

Evidence basis: Recorded source evidence
Setup runtime verification: Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed Oct 9, 2026 · Latest source observation Oct 9, 2026

GitHub repository ↗
nrwl/nx-console
Recorded repository material and project history.
Includes references whose attribution is not established.
Package registry ↗
nx-mcp
Recorded package identity, distribution or download evidence.
Includes references whose attribution is not established.

Setup · Watchlist

Install & Agents

Publisher instructions.

Source evidence observed Oct 14, 2026.

Additional setup details required — see the specific gaps below.

Install / connect
Publisher instructions
Publisher-documented package/connection route; replace placeholders and verify host-specific syntax.
Publisher setup example · Claude Code only · Publisher instructions
claude mcp add nx-mcp npx nx-mcp@latest
Configure / authenticate
MCP100 setup guide
Run inside Nx workspace or use Nx Console extension in Cursor; flags such as --no-minimal control available tools.
Use correct transport and published host config. Never paste secrets in chat; server registration is separate from software installation.
Previously reviewed configuration / prerequisites: Local workspace inspection; cloud-specific tools need Nx Cloud context and permissions.
Check connection
Suggested check
Confirm Nx tools and list workspace metadata (read-only).
Remove / uninstall / revoke
MCP100 setup guide
If registered as `nx-mcp` in Claude Code, remove its exact client entry with `claude mcp remove nx-mcp`; for Cursor/Claude Desktop/Codex, remove the matching MCP entry in that host settings. This client removal is MCP100-composed, not a vendor uninstall instruction. Npx does not imply a global install; do not delete user data or revoke credentials implicitly.
Conditional host / package cleanup · Claude Code only · MCP100 composed guide
claude mcp remove nx-mcp

Official Documentation & Sources

What it does

Official Nx MCP exposes project graph, generators, tasks and workspace metadata.

Capability: Developer Tools
Resource type: MCP Server
Best fit: Nx monorepo architecture and tooling

Representative uses

Nx project graph
generators
tasks
docs

Limitations

May expose project-specific data and code modification abilities; confirm version specifics.
Radar public tracking editorial review completed in limited scope; not a security or installation certification. Verify setup according to deployment mode and do not invent unresolved facts.

Reviewed access

Access & risk

Review the exact access boundary before connecting this MCP to accounts, credentials, or sensitive data.

Authentication: Not documented in the reviewed sources
Permissions: Reads repository/workspace metadata; tooling may execute development operations, not universally read-only.
Data handling: Not documented in the reviewed sources
Cost: unknown
Risk and cautions: Nx project tasks/generators and Nx Cloud self-healing actions may modify workspace or CI state.

Access scope and cautions

Write actions: Not verified Modify Nx workspace configuration or project files when generator/mutation tools are enabled Run development targets/commands where supported
Risk level: moderate
Security notes: Advisory/security review not completed; no safety badge. Write action classes summarize access risk; tool-level completeness and exact operation names are not independently verified. Do not mark them as confirmed documented write inventory.

The reviewed evidence does not establish the complete write authority of this MCP. Consult the unresolved evidence before granting write access.

FAQ

Based on reviewed evidence as of 2026-10-09. Watchlist tracking is not a recommendation or a security certification.

Which tasks are documented for this implementation?

The reviewed tasks include: Nx project graph; generators; tasks; docs.

What setup and authentication are documented?

A complete connection procedure is not verified. Recorded transport: stdio, sse. Client notes: Connect from Nx project and list offered tools. These facts do not supply missing installation commands, credentials or a verified authentication procedure. Authentication: Local workspace inspection; cloud-specific tools need Nx Cloud context and permissions.

Can it modify data or perform write operations?

Not verified. The available evidence does not establish the complete write authority. The partial inventory lists: Modify Nx workspace configuration or project files when generator/mutation tools are enabled; Run development targets/commands where supported. Recorded permission context: Reads repository/workspace metadata; tooling may execute development operations, not universally read-only.

What limitations and risks should I check before use?

Nx project tasks/generators and Nx Cloud self-healing actions may modify workspace or CI state. May expose project-specific data and code modification abilities; confirm version specifics. Radar public tracking editorial review completed in limited scope; not a security or installation certification. Verify setup according to deployment mode. Advisory/security review not completed; no safety badge. Write action classes summarize access risk; tool-level completeness and exact operation names are not independently verified. Development workspace access and CI integration can expose project metadata, logs and command execution privileges. Unknown vulnerabilities and provider data handling are not certified by this public tracking review.