Skip to main content
The Streamkap MCP Server lets AI agents interact with your Streamkap Change Data Capture (CDC) infrastructure using natural language. It wraps the Streamkap REST API as Model Context Protocol (MCP) tools that agents can call to monitor pipeline health, inspect sources, destinations, topics, and transforms, manage the full lifecycle of your resources, and troubleshoot issues through logs and metrics.

Prerequisites

  • A Streamkap account. The hosted server supports browser-based OAuth sign-in — no API keys to create.
  • For header-credential or local setups: an API token (Client ID and Client Secret — see API Tokens) or a Project Key.
  • Local mode only: Node.js 20+
Check your Node.js version:
node -v   # should be v20.x or higher
If you need to install or update Node.js, visit nodejs.org or use nvm.
macOS users with nvm + Claude Desktop: Claude Desktop is a GUI app that does not source your shell profile (~/.zshrc, ~/.bashrc), so it cannot find your nvm-managed Node.js. You must provide the absolute path to npx and set the PATH environment variable explicitly in your config — see the Claude Desktop tab below for the verified configuration.

Setup Modes

You can connect in three ways:
  • Remote — OAuth sign-in (recommended): Connect to the hosted server at https://mcp.streamkap.com/mcp and authorize with your Streamkap account in the browser. No local install, no API keys to create or store. See Sign in with OAuth.
  • Remote — header credentials: Connect to the same hosted URL and pass an API token as HTTP headers (X-Streamkap-Client-ID / X-Streamkap-Client-Secret). Best for headless and CI clients that can set headers but can’t complete a browser sign-in.
  • Local (via npx): Run the server locally as a child process with npx -y @streamkap/tools. Credentials are passed as environment variables. Requires Node.js 20+.
Real-time topic streaming is available on the hosted server.

Sign in with OAuth (remote)

The hosted server is an OAuth 2.1 provider, so most MCP clients can connect with a browser sign-in instead of API keys. Point your client at https://mcp.streamkap.com/mcp with no credentials; on first connect it opens a browser where you sign in to Streamkap and authorize access. Your client stores and refreshes the tokens automatically.
claude mcp add --scope user --transport http streamkap https://mcp.streamkap.com/mcp
Then run /mcp inside Claude Code and choose Authenticate for the streamkap server to complete sign-in in your browser. The --scope user flag registers the server for every project, not just the current directory.
OAuth sign-in grants a curated set of tools: agents can read, create, update, and operate your resources, but destructive actions are blocked — they can’t delete resources or reset connectors. For unrestricted access or custom tool scoping, use header credentials or a Project Key.

Setup

The tabs below cover the header-credential (remote) and local (npx) setups. To connect with a browser sign-in instead, see Sign in with OAuth.
Remote (header credentials):
claude mcp add --scope user \
  --header "X-Streamkap-Client-ID: your-client-id" \
  --header "X-Streamkap-Client-Secret: your-client-secret" \
  --transport http \
  streamkap https://mcp.streamkap.com/mcp
Local (via npx):
claude mcp add --scope user streamkap \
  -e STREAMKAP_CLIENT_ID=your-client-id \
  -e STREAMKAP_CLIENT_SECRET=your-client-secret \
  -- npx -y @streamkap/tools
Verify the server is registered:
claude mcp list
Using a different MCP-compatible client? Connect with the URL https://mcp.streamkap.com/mcp plus X-Streamkap-Client-ID / X-Streamkap-Client-Secret headers (remote), or run npx -y @streamkap/tools with the same values as environment variables (local).
Running locally? You can pass additional configuration via Optional Environment Variables — for example, LOG_LEVEL=debug for troubleshooting, or Kafka credentials to enable the direct Kafka tools.

Verify Your Setup (Optional)

If things aren’t working, the fastest way to check whether it’s your credentials or your client config is to test the same credentials from the terminal using the Streamkap CLI:
npm install -g @streamkap/tools
export STREAMKAP_CLIENT_ID="your-client-id"
export STREAMKAP_CLIENT_SECRET="your-client-secret"
streamkap doctor
If doctor passes the credentials and API authentication checks, the same values will work in your MCP client. This step is optional but the fastest way to catch a bad credential before debugging your client config.

Available Tools

Once connected, your agent has access to tools covering the full Streamkap API surface:
CategoryWhat your agent can do
PipelinesList, create, update, delete, start, stop, restart, view metrics and logs, bulk operations
SourcesManage CDC connectors — deploy, pause, resume, restart, stop, snapshot, check status
DestinationsManage sinks — deploy, pause, resume, restart, stop, monitor throughput and lag
TransformsCreate and manage stream processors, deploy to preview or production, run unit tests, inspect failed records
TopicsList and inspect Kafka topics, read sample messages
TagsOrganise and search resources by tag
Schema RegistryBrowse subjects and schemas
Consumer GroupsInspect lag, identify stuck consumers, reset offsets
Dashboard & LogsOrganisation-wide stats, data lineage between sources and destinations, search and filter logs
AlertsManage notification subscribers and preferences
UsageQuery and export usage metrics
Kafka AccessManage direct-Kafka users (list, create, update, delete)
Cluster ScalingInspect cluster status, scale up or down, track scaling operations
AdminList services and switch between them
For the full list of API operations, see the API Reference.

Optional: Direct Kafka Tools

Two additional tools — streamkap_consume_messages and streamkap_produce_message — let agents interact with Kafka directly. They require Kafka credentials (bootstrap servers, username, password — all three together) from the Kafka Access page. In local mode, set KAFKA_BOOTSTRAP_SERVERS, KAFKA_API_KEY, and KAFKA_API_SECRET as environment variables. Without Kafka credentials, agents can still read topic data via the REST-based streamkap_get_topic_messages tool.

Workflow Prompts

The MCP server registers seven workflow prompts that surface as slash commands or prompt picks in most clients. Each prompt walks an agent through a structured operational task:
PromptPurpose
troubleshoot-pipelineDiagnose a specific pipeline (or all pipelines): health, metrics, logs, dead letter queue (DLQ)
setup-pipelineEnd-to-end guide for creating a new source → destination pipeline
infrastructure-overviewHigh-level health check across sources, destinations, pipelines, transforms
diagnose-dlq-errorsInvestigate dead letter queue topics and classify errors
report-pipeline-healthGenerate a comprehensive pipeline health report with metrics and DLQ analysis
deploy-monitoring-agentSet up monitoring across pipelines, sources, and destinations
triage-agent-errorTriage issues with any Streamkap entity using logs, metrics, and DLQ inspection
These prompts appear in your client’s prompt picker UI (or as slash commands in clients that support them — the exact format varies between clients).

Real-Time Streaming (Remote Mode Only)

The hosted server exposes an SSE endpoint for real-time topic streaming at https://mcp.streamkap.com/subscribe/<topic>. Supports single topics, comma-separated lists, and regex patterns (?pattern=source_.*). Uses the same X-Streamkap-Client-ID / X-Streamkap-Client-Secret headers as MCP tool calls. Connect with any SSE client, curl, or from your application code. Not available in local mode. For terminal-based real-time consumption, use streamkap kafka subscribe.

Authentication

The MCP server accepts three credentials:
  • OAuth sign-in (hosted server) — authorize with your Streamkap account in the browser; no keys to manage. See Sign in with OAuth.
  • API token — a Client ID and Client Secret, passed as headers in remote mode or environment variables in local mode. See API Tokens.
  • Project Key — a single bundled credential that also carries tool scoping. See Project Keys.
For API tokens and Project Keys, Streamkap handles token exchange and refresh automatically.
Keep your Client Secret safe. If compromised, delete the token from the API Tokens page and create a new one.

Restricting which tools an agent can use

By default an agent can call every tool its credential is allowed. To narrow that surface:
  • Project Key (recommended): set a tool profile and allow/block lists when you create the key — scoping is enforced server-side and can’t be tampered with client-side. See MCP scoping.
  • Headers (remote) or environment variables (local): set X-Streamkap-Tool-Profile / MCP_TOOL_PROFILE, X-Streamkap-Allow-Tools / MCP_ALLOW_TOOLS, or X-Streamkap-Block-Tools / MCP_BLOCK_TOOLS. Allow lists win over block lists, which win over the profile.
  • OAuth sign-in: uses a fixed curated profile that blocks destructive actions — see Sign in with OAuth.

Optional Environment Variables (Local Mode)

VariableDescription
STREAMKAP_PROJECT_KEYBase64-encoded Project Key — bundles API credentials, Kafka access, and tool scoping in a single value
STREAMKAP_API_URLOverride the API base URL (defaults to https://api.streamkap.com)
MCP_TOOL_PROFILERestrict the agent to a tool profile: read-only, agent-operator, infra-admin, or full
MCP_ALLOW_TOOLS / MCP_BLOCK_TOOLSComma-separated tool allow/block lists. Allow wins over block, which wins over the profile
LOG_LEVELServer log verbosity: trace, debug, info (default), warn, error, fatal
For Kafka and Schema Registry credentials, see Direct Kafka Tools and Kafka Access.

Troubleshooting

Log file locations

Claude Desktop (log file name matches the key in your mcpServers config):
  • macOS: ~/Library/Logs/Claude/mcp-server-streamkap.log
  • Windows: %APPDATA%\Claude\logs\mcp-server-streamkap.log

macOS: nvm users — npx not found or wrong version

Claude Desktop does not source your shell profile, so it cannot find nvm-managed Node.js. Find your absolute npx path:
echo "$HOME/.nvm/versions/node/$(node -v)/bin/npx"
Then use it as the command in your config. See the Claude Desktop tab above for the full JSON example. Homebrew users (no nvm): use /opt/homebrew/bin/npx (Apple Silicon) or /usr/local/bin/npx (Intel).

Common errors

SymptomLikely causeFix
ERROR: You must supply a commandOld npx resolving via default PATH instead of Node 20+Use the absolute path to npx from Node 20+ (see nvm section above)
Authentication failed / 401 errors on every tool callMissing or invalid Client ID / SecretVerify your credentials in the API Tokens dashboard, then run streamkap doctor to confirm
Server appears in client but tools fail silentlyCredentials reached the server but are wrong for your tenantRun streamkap doctor with the same credentials to surface the underlying error
Server connects then immediately disconnectsWrong Node version or package install failureCheck the MCP log file for npx stderr output
Claude Desktop ignores the streamkap entryEntry placed at root of claude_desktop_config.json instead of inside mcpServersMove it inside the mcpServers object
Claude Desktop fails to connect with "type": "http" or "type": "sse" configHeader-credential remote MCP via claude_desktop_config.json is not reliable in Claude DesktopFor the hosted server, connect via OAuth sign-in (Add custom connector); otherwise switch to local stdio mode using the Claude Desktop tab above
Need more detail in local modeDefault log level is infoAdd "LOG_LEVEL": "debug" to the env block and re-check the log file

Documentation MCP

The Streamkap docs site runs its own MCP server at https://docs.streamkap.com/mcp. It is separate from the API server above and carries no credentials — it lets an agent search and read the Streamkap documentation (connector configs, how-tos, API reference) while it works. Add it alongside the streamkap server so your agent can look something up and act on it in the same session.
claude mcp add --scope user --transport http streamkap-docs https://docs.streamkap.com/mcp
The docs MCP serves public documentation only — no sign-in, and it cannot read or change your infrastructure. To manage resources, use the Streamkap MCP Server above.
  • Agents — overview of all agent integration paths
  • CLI — command-line tool with agent-friendly JSON output and scripting support
  • API Reference — full REST API documentation