
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
@datastax/astra-db-mcp
Advanced tools
A Model Context Protocol (MCP) server for interacting with Astra DB. MCP extends the capabilities of Large Language Models (LLMs) by allowing them to interact with external systems as agents.
A Model Context Protocol (MCP) server for interacting with Astra DB. MCP extends the capabilities of Large Language Models (LLMs) by allowing them to interact with external systems as agents.
You need to have a running Astra DB database. If you don't have one, you can create a free database here. From there, you can get two things you need:
To learn how to get these, please read the getting started docs.
Here's how you can add this server to your MCP client.
To add this to Claude Desktop, go to Preferences -> Developer -> Edit Config and add this JSON blob to claude_desktop_config.json
:
{
"mcpServers": {
"astra-db-mcp": {
"command": "npx",
"args": ["-y", "@datastax/astra-db-mcp"],
"env": {
"ASTRA_DB_APPLICATION_TOKEN": "your_astra_db_token",
"ASTRA_DB_API_ENDPOINT": "your_astra_db_endpoint"
}
}
}
}
Windows PowerShell Users:
npx
is a batch command so modify the JSON as follows:
"command": "cmd",
"args": ["/k", "npx", "-y", "@datastax/astra-db-mcp"],
To add this to Cursor, go to Settings -> Cursor Settings -> MCP
From there, you can add the server by clicking the "+ Add New MCP Server" button, where you should be brought to an mcp.json
file.
Tip: there is a
~/.cursor/mcp.json
that represents your Global MCP settings, and a project-specific.cursor/mcp.json
file that is specific to the project. You probably want to install this MCP server into the project-specific file.
Add the same JSON as indiciated in the Claude Desktop instructions.
Alternatively you may be presented with a wizard, where you can enter the following values (for Unix-based systems):
env ASTRA_DB_APPLICATION_TOKEN=your_astra_db_token ASTRA_DB_API_ENDPOINT=your_astra_db_endpoint npx -y @datastax/astra-db-mcp
Once added, your editor will be fully connected to your Astra DB database.
The server provides the following tools for interacting with Astra DB:
GetCollections
: Get all collections in the databaseCreateCollection
: Create a new collection in the databaseUpdateCollection
: Update an existing collection in the databaseDeleteCollection
: Delete a collection from the databaseListRecords
: List records from a collection in the databaseGetRecord
: Get a specific record from a collection by IDCreateRecord
: Create a new record in a collectionUpdateRecord
: Update an existing record in a collectionDeleteRecord
: Delete a record from a collectionFindRecord
: Find records in a collection by field valueBulkCreateRecords
: Create multiple records in a collection at onceBulkUpdateRecords
: Update multiple records in a collection at onceBulkDeleteRecords
: Delete multiple records from a collection at onceOpenBrowser
: Open a web browser for authentication and setupHelpAddToClient
: Get assistance with adding Astra DB client to your MCP clientEstimateDocumentCount
: Get estimate of the number of documents in a collectionAll notable changes to this project will be documented in this file. The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
FAQs
A Model Context Protocol (MCP) server for interacting with Astra DB. MCP extends the capabilities of Large Language Models (LLMs) by allowing them to interact with external systems as agents.
The npm package @datastax/astra-db-mcp receives a total of 47 weekly downloads. As such, @datastax/astra-db-mcp popularity was classified as not popular.
We found that @datastax/astra-db-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.