Qdrant RBAC MCP Server

by fidonisde.fidonis/qdrant-mcp-rbacv0.4.0

Role-based access to your Qdrant vector store, via MCP. OIDC in, scoped JWTs out.

0Dockerremoteofficial registry

context tax

pending

security

100/100

cold start

pending

freshness

Active7d ago

Our reading of Qdrant RBAC, from the data

Qdrant RBAC is a memory MCP server from fidonis, listed in the official MCP Registry.

We haven't measured its tool list yet, so its token cost is unknown.

Maintenance is active: the last public signal was 7 days ago (2026-10-11). For comparison, 68% of memory servers are active or maintained.

With 0 GitHub stars it ranks #872 of 1,597 memory servers we index.

It runs as a hosted endpoint, so there is nothing to install and needs one secret (QDRANT_JWT_SECRET); use a scoped, least-privilege key.

Install Qdrant RBAC MCP server

No published package or hosted endpoint yet — see the repository README for build-from-source instructions.

Configuration

Variable	Required	Secret	Description
OIDC_ISSUER_URL	yes	—	OIDC issuer / realm URL, e.g. https://kc.example.com/realms/myrealm
OIDC_AUDIENCE	yes	—	Expected aud claim of incoming access tokens, e.g. mcp-server
QDRANT_URL	yes	—	Qdrant HTTP endpoint, e.g. http://qdrant:6333
QDRANT_JWT_SECRET	yes	yes	HS256 signing secret, at least 32 bytes; must equal Qdrant's service.api_key

Security signals

100/100 — no known issues found as of 2026-10-19, from the checks below. This is not a guarantee of safety; review what a server can do before connecting it.

Deductions

No findings from the checks that ran.

Checks

✓Repository hygiene (archived, activity, license, security policy)
○Package metadata (install scripts, provenance) — pending
○Tool descriptions (prompt-injection and hidden-text heuristics) — pending
○Source scan (secrets, CVEs, risky code) by vectra-guard — pending

Scan it yourself before installing with vectra-guard, the open-source agent security CLI. Scoring rules

Freshness

Active — last maintenance signal 7d ago. The newest of the signals below sets the band.

Last commit (default branch)
2026-10-11 · 7d ago · GitHub
Latest release
2026-10-11 · 7d ago · GitHub · v0.4.0
Package published
no data · npm/PyPI
Registry entry updated
2026-10-11 · 7d ago · official registry · v0.4.0

How it compares in Memory

Against the most-starred memory servers we index. Token cost is per model turn, measured from each server's live tool list.

Server	Stars	Tools	Tokens / turn	Freshness	Runs
Qdrant RBAC (this)	0	—	not measured	Active	hosted
Memory	91,356	—	not measured	Active	local
Hindsight	51,304	—	not measured	Active	—
Codebase Memory	46,873	—	not measured	Active	local
Cognee	32,506	—	not measured	Active	—
Honcho	7,681	—	not measured	Active	hosted

All memory MCP servers

FAQ

›Does Qdrant RBAC require an API key?

Yes. It expects OIDC_ISSUER_URL, OIDC_AUDIENCE, QDRANT_URL, QDRANT_JWT_SECRET, of which 1 is a secret.

›Can I use Qdrant RBAC as a remote (hosted) MCP server?

Yes. It is a hosted MCP server; connect to its URL with any client that supports remote MCP.

›Is Qdrant RBAC in the official MCP registry?

Yes, as de.fidonis/qdrant-mcp-rbac.

Sources and method

Official MCP Registry entry: updated 2026-10-11
GitHub repository: fetched 2026-10-19
Package registry (npm / PyPI): listed
Security signals, computed by us: 2026-10-19
Last checked against all sources: 2026-10-19

The description, packages and links come from the maintainer's own published metadata. Token cost, security signals, freshness and the reading above are MCPSkillHub's own measurements; see the methodology. Spot an error? Request a correction or claim the listing.