
How to add Neon MCP Server to Windsurf
Manage serverless Postgres on Neon with natural language: projects, branches, migrations, and SQL. Paste the config into ~/.codeium/windsurf/mcp_config.json and restart Windsurf.
Last updated June 15, 2026 · 2.1k★ · http · oauth · official
Windsurf config for Neon MCP Server
npx -y mcp-remote https://mcp.neon.tech/mcp{
"mcpServers": {
"neon-mcp-server": {
"serverUrl": "https://mcp.neon.tech/mcp"
}
}
}Remote server — no local install needed. Restart the client after saving the config.
Setup steps
- 1Open Windsurf → Cascade → the hammer/MCP icon → Configure (or edit ~/.codeium/windsurf/mcp_config.json).
- 2Paste the Neon MCP Server config below.
- 3Fill in placeholder secrets, then save.
- 4Click Refresh in the MCP panel.
- 5Neon MCP Server's tools become available to Cascade.
Before you start
- A Neon account (sign up at console.neon.tech)
- An MCP-capable client (Cursor, VS Code, Claude Code, Claude Desktop, etc.)
- For the remote server: just a browser for the OAuth flow — no API key needed
- For API-key auth or local use: a Neon API key from the Neon Console (passed as Authorization: Bearer <key>), and Node.js 18+ (the mcp-remote bridge / local server run via npx)
What Neon MCP Server can do in Windsurf
list_projects / describe_project / create_project / delete_projectManage Neon projects
create_branch / delete_branch / describe_branch / reset_from_parentCreate and manage database branches
run_sql / run_sql_transactionExecute a single SQL statement or a transaction
get_connection_stringRetrieve a connection string for a project/branch
get_database_tables / describe_table_schemaInspect tables and their schemas
compare_database_schemaDiff schemas between branches
prepare_database_migration / complete_database_migrationTwo-step safe migration: test on a temp branch, then promote
list_slow_queries / explain_sql_statementFind slow queries and inspect execution plans
Security
The server can create, modify, and delete Neon projects and run arbitrary SQL, so the OAuth grant is powerful; review the authorization scope. The standalone @neondatabase/mcp-server-neon npm package is deprecated, so prefer the remote OAuth endpoint.
Neon MCP Server + Windsurf FAQ
Where is the Windsurf config file?
Windsurf reads MCP servers from ~/.codeium/windsurf/mcp_config.json. Paste the Neon MCP Server config there under the "mcpServers" key and restart the client.
Is Neon MCP Server safe to use with Windsurf?
The server can create, modify, and delete Neon projects and run arbitrary SQL, so the OAuth grant is powerful; review the authorization scope. The standalone @neondatabase/mcp-server-neon npm package is deprecated, so prefer the remote OAuth endpoint.
OAuth or API key — which should I use?
OAuth is recommended for the hosted server and needs no key handling. Use an API key (from the Neon Console, sent as Authorization: Bearer <key>) for headless/CI setups or clients that can't do the browser flow.
What is mcp-remote for?
It is a bridge that lets stdio-only MCP clients connect to Neon's hosted HTTP endpoint at mcp.neon.tech. Clients that support remote HTTP servers can connect directly without it.
Why does migration use two steps?
prepare_database_migration applies your change on a temporary branch so it can be verified against real data; complete_database_migration then promotes it. This prevents an agent from breaking your main branch.