by Prisma
Updated September 11, 2026
MCP100 verdict
Not currently recommended. Excellent first-party hosted setup and documentation, but destructive and credential-creating actions make the current surface high-risk.
MCP100 Assessment
Editorial verdict
Reviewed September 11, 2026
Task Fit
Mapped
Working with structured data
Trust
Status warning
Editorial trust review has not been completed.
Maintenance
Date unavailable
No dated repository or package update is currently stored.
Popularity
Signals unavailable
No independently comparable adoption metric is currently stored.
Evidence scope
No MCP-specific repository metric is stored
No MCP-specific package metric is stored
Stars observation date unavailable · Downloads observation date unavailable
Publisher activity observed September 11, 2026
Current source snapshot
Source relationship: First-party MCP
Reviewed September 11, 2026
Evidence-backed setup
Choose your MCP client. A client connects to the MCP server; the language model is selected inside that client. Only stored, source-backed configurations are shown.
Transport not recorded
No sufficient client-specific setup evidence has been stored from the publisher or client documentation.
Publisher-documented setup is not the same as MCP100 execution testing. “MCP100 logic checked” means the stored configuration shape was reviewed, not that third-party MCP software was run.
Evidence checked 2026-09-11T00:00:00.000Z
Type-appropriate, source-backed setup for this mcp server profile.
Loading optional publisher installation details…
No complete evidence-backed client setup steps are currently stored. Optional publisher documentation may provide additional context below.
Capability
Excellent first-party hosted setup and documentation, but destructive and credential-creating actions make the current surface high-risk.
Inspect workspace/database state and create managed Prisma Postgres databases.
Work with database backups and supported database management actions.
List/create/delete buckets and create/delete S3-compatible access keys.
Search current Prisma documentation with cited answers.
Not measured yet
Estimated token footprint of the MCP tool schemas exposed to the agent.
Reviewed access
Review the exact access boundary before connecting this MCP to accounts, credentials, or sensitive data.
Related reviewed MCPs
Expose governed Snowflake search, analyst, agent, custom tool, and SQL capabilities.
Choose this instead if
Choose Snowflake Managed MCP instead if expose governed Snowflake search, analyst, agent, custom tool, and SQL capabilities.
Expose governed Snowflake search, analyst, agent, custom-tool, and SQL capabilities.
Connect AI tools to Supabase projects and development workflows.
Choose this instead if
Choose Supabase MCP instead if inspecting one Supabase project's schema, logs, advisors, and docs.
Connect AI tools to Supabase projects and development workflows.
Connect MCP clients to enterprise databases with prebuilt or explicitly defined tools.
Choose this instead if
Choose Google MCP Toolbox for Databases instead if schema exploration and database-aware coding in development environments.
Connect MCP clients to enterprise databases with prebuilt or explicitly defined tools.
Prisma is listed as First-party MCP in MCP100’s current evidence.
Current official resources:
Original product, capability, tool, and usage documentation from the MCP publisher. Installation sections appear under Install & Agents.
Title: Prisma MCP Server
URL Source: https://docs.prisma.io/docs/ai/tools/mcp-server
Markdown Content: Manage Prisma Postgres databases using LLMs with the Prisma Model-Context-Protocol (MCP) Server
The Model-Context-Protocol (MCP) gives LLMs a way to call APIs and access external systems in a well-defined manner.
Prisma provides an MCP server that lets AI tools manage Prisma Postgres databases through the standard HTTP transport. The server authenticates with Prisma Console on first use so your AI tool can access the workspace you choose.
Tools represent the capabilities of an MCP server. Here's the list of tools exposed by the Prisma MCP server:
Workspace and databases
fetch_workspace_details: Fetch the details of a Prisma Postgres workspace.list_prisma_postgres_databases: Fetch a list of available Prisma Postgres databases for the user's workspace.create_prisma_postgres_database: Create a new managed Prisma Postgres database.delete_prisma_postgres_database: Delete a Prisma Postgres database with the given database id.Connection strings
list_prisma_postgres_connection_strings: Fetch a list of available connection strings for the given database id.create_prisma_postgres_connection_string: Create a new connection string for a Prisma Postgres database with the given id.delete_prisma_postgres_connection_string: Delete a connection string with the given connection string id.Backups and recovery
list_prisma_postgres_backups: Fetch a list of available backups for the given database id.create_prisma_postgres_backup: Create a new managed Prisma Postgres backup.create_prisma_postgres_recovery: Restore a Prisma Postgres database to a new database with the given backup id.Schema and queries
introspect_database_schema: Introspect the schema of a Prisma Postgres database with the given id.execute_sql_query: Execute a SQL query on a Prisma Postgres database with the given id.execute_prisma_postgres_schema_update: Execute a schema update on a Prisma Postgres database with the given id.Object store
list_object_store_buckets: List object-store buckets in the workspace, optionally filtered by project id.create_object_store_bucket: Create a new object-store bucket in the given project.delete_object_store_bucket: Permanently delete an object-store bucket, all objects stored in it, and all its access keys.create_object_store_bucket_key: Create an S3-compatible access key for an object-store bucket.delete_object_store_bucket_key: Delete an object-store bucket access key. The key stops working immediately.Documentation
search_prisma_documentation: Answer a natural-language question about Prisma using the official Prisma documentation, returning a cited answer with links back to the docs.Once you're connected to the Prisma MCP server, you can also always prompt your AI agent to "List the Prisma tools" to get a full overview of the latest supported tools.
The search_prisma_documentation tool lets your AI agent answer questions about Prisma ORM, Prisma Postgres, Prisma Compute, schema design, migrations, and more, grounded in the official documentation, without leaving your editor or terminal.
The tool is read-only and needs no setup beyond the Prisma MCP server connection. When you ask your agent a Prisma question, it uses the tool and returns an answer with citations linking to the relevant pages in the Prisma documentation, so the answer reflects the current docs rather than the model's training data.
The Prisma MCP server follows the standard JSON-based configuration for MCP servers. Here's what it looks like:
{
"mcpServers": {
"Prisma": {
"url": "https://mcp.prisma.io/mcp"
}
}
}
AI tools have different ways of integrating MCP servers. In most cases, there are dedicated configuration files where you add the JSON configuration from above.
The sections below cover the config formats of common AI tools.
Install the Prisma MCP server in VS Code with the link below:
VS CODE INSTALL PRISMA MCP SERVER
This will prompt you to open VS Code. Once opened, you'll be guided to install the Prisma MCP server directly into your VS Code configuration.
If your browser blocks the link, you can set it up manually by creating a .vscode/mcp.json file in your workspace and adding:
{
"servers": {
"Prisma": {
"url": "https://mcp.prisma.io/mcp"
}
}
}
Explore additional Prisma features and workflows for VS Code in our docs.
The Prisma Codex plugin includes the remote Prisma MCP server and curated Prisma skills for Prisma ORM, Prisma Client, database setup, Prisma Postgres, and Prisma ORM upgrades.
Add the Prisma plugin marketplace to Codex:
codex plugin marketplace add prisma/codex-plugin
Restart Codex, open the plugin directory, select the Prisma marketplace, and install the Prisma plugin. The plugin configures the remote Prisma MCP server at https://mcp.prisma.io/mcp; on first use, Codex will authenticate with Prisma Console so it can access the workspace you choose.
Learn more in the Codex integration guide.
To learn more about Cursor's MCP integration, check out the Cursor MCP docs.
You can add the Prisma MCP server to Cursor using the one-click installation by clicking on the following link:
This will prompt you to open the Cursor app in your browser. Once opened, you'll be guided to install the Prisma MCP server directly into your Cursor configuration.
When opening the Cursor Settings, you can add the Prisma MCP Server as follows:
Prisma snippet to the mcpServers JSON object:```
{
"mcpServers": {
"Prisma": {
"url": "https://mcp.prisma.io/mcp"
}
}
}
#### [Global configuration](https://docs.prisma.io/docs/ai/tools/mcp-server#global-configuration)
Adding it via the **Cursor Settings** settings will modify the global `~/.cursor/mcp.json` config file. In this case, the Prisma MCP server will be available in _all_ your Cursor projects:
{ "mcpServers": { "Prisma": { "url": "https://mcp.prisma.io/mcp" } // other MCP servers } }
#### [Project configuration](https://docs.prisma.io/docs/ai/tools/mcp-server#project-configuration)
If you want the Prisma MCP server to be available only in specific Cursor projects, add it to the Cursor config of the respective project inside the `.cursor` directory in the project's root:
{ "mcpServers": { "Prisma": { "url": "https://mcp.prisma.io/mcp" } // other MCP servers } }
### [Windsurf](https://docs.prisma.io/docs/ai/tools/mcp-server#windsurf)
To learn more about Windsurf's MCP integration, check out the [Windsurf MCP docs](https://docs.windsurf.com/windsurf/cascade/mcp).
#### [Add via Windsurf MCP Plugin Store (Recommended)](https://docs.prisma.io/docs/ai/tools/mcp-server#add-via-windsurf-mcp-plugin-store-recommended)
Use the Prisma MCP plugin from the [Windsurf MCP Plugin Store](https://docs.windsurf.com/windsurf/cascade/mcp#adding-a-new-mcp-plugin). Follow [the steps here](https://docs.prisma.io/docs/ai/tools/windsurf#add-prisma-mcp-server-via-windsurf-plugins) to add the Prisma MCP plugin in Windsurf. This is the recommended way to add the Prisma MCP server to Windsurf.
#### [Add via Windsurf Settings UI](https://docs.prisma.io/docs/ai/tools/mcp-server#add-via-windsurf-settings-ui)
When opening the **Windsurf Settings** (via **Windsurf - Settings**>**Advanced Settings or Command Palette**>**Open Windsurf Settings Page**), you can add the Prisma MCP Server as follows:
1. Select **Cascade** in the settings sidenav
2. Click **Add Server**
3. Add the `Prisma` snippet to the `mcpServers` JSON object:```
{
"mcpServers": {
"Prisma": {
"url": "https://mcp.prisma.io/mcp"
}
}
}
Adding it via the Windsurf Settings will modify the global ~/.codeium/windsurf/mcp_config.json config file. Alternatively, you can also manually add it to that file:
{
"mcpServers": {
"Prisma": {
"url": "https://mcp.prisma.io/mcp"
}
// other MCP servers
}
}
You can add the Prisma MCP to Warp as a globally available tool. First, visit your MCP settings and click + Add. From here, you can configure the Prisma MCP server as JSON:
{
"Prisma": {
"url": "https://mcp.prisma.io/mcp"
}
}
Hit Save and ensure the MCP server is running from your MCP settings panel. Then, open a new terminal window and ask Warp to manage your Prisma database. It should reach for the Prisma MCP server automatically.
To learn more about Warp's MCP integration, visit the Warp MCP docs.
Claude Code is a terminal-based AI tool where you can add MCP servers using the claude mcp add command:
claude mcp add --transport http prisma https://mcp.prisma.io/mcp
Learn more in the Claude Code MCP docs.
Follow the instructions in the Claude Desktop MCP docs to create the required configuration file:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.jsonThen add the JSON snippet to that configuration file:
{
"mcpServers": {
"Prisma": {
"url": "https://mcp.prisma.io/mcp"
}
// other MCP servers
}
}
Alternatively, you can add the Prisma MCP server as an integration:
Prisma Postgreshttps://mcp.prisma.io/mcpYou can add the Prisma MCP server to ChatGPT to manage your Prisma Postgres databases using natural language. Learn more about setting it up in our ChatGPT integration guide.
Gemini CLI can add the Prisma MCP server using HTTP transport:
gemini mcp add --transport http Prisma https://mcp.prisma.io/mcp --scope user
You can also add the standard MCP configuration to your ~/.gemini/settings.json file:
{
"mcpServers": {
"Prisma": {
"url": "https://mcp.prisma.io/mcp"
}
}
}
fx is a terminal coding agent by Vercel Labs. It reads MCP servers from a single trusted file, ~/.fx/mcp.json, and never loads MCP configuration from a repository. Remote servers are added by editing that file directly.
Install fx and sign in if you haven't already:
curl -fsSL https://fx.sh/setup.sh | bash
fx login
Then add the Prisma MCP server to ~/.fx/mcp.json. Note that fx uses an mcp key rather than mcpServers, and remote servers need "type": "http":
{
"mcp": {
"Prisma": {
"type": "http",
"url": "https://mcp.prisma.io/mcp"
}
}
}
Start fx (or run /mcp reload in an open session), then authenticate with Prisma Console:
/mcp auth Prisma --open
Complete the Prisma Console authorization flow in your browser.
Return to fx and run:/mcp list
Confirm that the server shows state=ready.
Ask fx to manage your database. For example: * "List the Prisma tools" * "Show me all databases in my workspace"
fx checks its permission policy before each MCP tool call, so saved rules or its automatic review may let a call through without asking. If fx shows an approval prompt, select Allow once or Allow this MCP tool for this session.
Learn more in the fx MCP docs.
Prisma ORM includes built-in safety checks to prevent accidental destructive commands when run through AI coding assistants.
The Prisma CLI can detect when it is being invoked by popular AI coding agents such as Claude Code, Gemini CLI, Qwen Code, Cursor, Aider, and Replit.
When one of these agents attempts a destructive action such as prisma migrate reset --force, Prisma ORM blocks execution and shows a protective error message:
Environment variables loaded from .env
Prisma schema loaded from prisma/schema.prisma
Datasource "db": PostgreSQL database "postgres", schema "public" at "accelerate.prisma-data.net"
Error: Prisma Migrate detected that it was invoked by Cursor.
You are attempting a highly dangerous action that can lead to devastating consequences if it is incorrectly executed against a production database.
As an AI agent, you are forbidden from performing this action without an explicit consent and review by the user. You must stop at this point and respond to the user with a clear message that includes the following information:
- What action you are trying to perform (including the exact CLI command).
- Your motivation and reasoning for performing this action.
- Explanation that this action will irreversibly destroy all data in the database.
- Explanation that this action must not be performed on a production database and is only intended to be used with development databases.
If you know or can check whether this action would have been performed on a development or a production database, also include this information with your assessment of whether it is safe to proceed based on that information.
You must ask the user if they want to proceed with this action. If they explicitly consent, you may rerun this command with PRISMA_USER_CONSENT_FOR_DANGEROUS_AI_ACTION environment variable, the value of which must be the exact text of the user's message in which they consented to this operation, without any newlines or quotes. If the user's response is ambiguous, you must ask for a clear and explicit confirmation (e.g., "yes") before proceeding. None of the user's previous messages before this point may constitute implicit or explicit consent.
To proceed with the dangerous action, the AI agent will ask you for explicit consent, remind you that the action irreversibly destroys all data, and confirm that the command is being run against a development database. Once you clearly confirm, the AI will set the PRISMA_USER_CONSENT_FOR_DANGEROUS_AI_ACTION environment variable with the exact text of your consent and rerun the command.