# chromadb-remote-mcp

> Remote MCP server for ChromaDB

- **URL**: https://www.freshcrate.ai/projects/chromadb-remote-mcp
- **Author**: meloncafe
- **Category**: MCP Servers
- **Latest version**: `v3.0.0` (2026-06-02)
- **License**: MIT
- **Source**: https://github.com/meloncafe/chromadb-remote-mcp
- **Language**: TypeScript
- **GitHub**: 12 stars, 4 forks
- **Registry**: github
- **Tags**: `chromadb`, `claude`, `claude-code`, `claude-desktop`, `claude-mobile`, `docker`, `mcp`, `model-context-protocol`, `typescript`

## Description

Remote MCP server for ChromaDB

## Recent releases

| Version | Date | Urgency | Changes |
| --- | --- | --- | --- |
| `v3.0.0` | 2026-06-02 | High | ## chromadb-remote-mcp v3.0.0   ### Security  - **CVE-2026-45829 (ChromaToast) 대응 하드닝** — ChromaDB Python FastAPI 서버의 pre-auth RCE(사용자 제어 embedding-function config + `trust_remote_code` + 악성 HuggingFace 모델, CVSS 10.0). 본 MCP 게이트웨이는 취약 서버가 아니며 도구 경로 RCE는 chromadb JS SDK 3.4.3 이 중립화하지만(`serializeEmbeddingFunction` 이 MCP 가 넘기는 plain JSON 을 `{type:"legacy"}` 로 떨궈 싱크 미도달), fail-open 인증 + 무필터 catch-all REST 프록시 + unpinned 서버 이미지가 결합한 "조건부 증폭기" 표면을 제거.  ### BREAKING  - **fail-closed 부팅 인증** — OIDC 발급자( |
| `v2.2.3` | 2026-05-15 | High | ## chromadb-remote-mcp v2.2.3   ### Fixed  - **Google `invalid_scope: offline_access` 회귀 해소** — v2.2.1 이 OIDC 표준 `offline_access` scope 를 자동 추가했으나 **Google OAuth 는 이 scope 를 미지원** (`Some requested scopes were invalid. invalid=[offline_access]`). v2.2.3 은 자동 추가를 제거 — Google 에서 refresh_token 을 받기 위해서는 `access_type=offline` + `prompt=consent` (둘 다 v2.2.1 부터 적용 중) 만으로 충분하다. `OAUTH_PROXY_GOOGLE_SCOPES` env 도 사용자 지정 그대로 사용. - **`/.well-known/oauth-authorization-server` `scopes_supported`** — `offline_ |
| `v2.0.0` | 2026-05-13 | High | ## chromadb-remote-mcp v2.0.0   ### Breaking changes  - **Collection metadata schema v2** — All new collections persist `embedding_provider`, `embedding_model`, `embedding_dimensions` in metadata. Existing v1 collections fail with `Embedding provider mismatch` on read/write. Set `LEGACY_COLLECTION_COMPAT=true` to allow read-only access to v1 collections, or re-index per `MIGRATION.md`. - **Default embedding behaviour** — Previous releases silently used ChromaDB's built-in `all-MiniLM-L6-v2` (Eng |
| `v1.0.2` | 2025-10-31 | Low | ## What's Changed * ci: update .deepsource.toml by @deepsource-autofix[bot] in https://github.com/meloncafe/chromadb-remote-mcp/pull/9 * Potential fix for code scanning alert no. 12: Log injection by @meloncafe in https://github.com/meloncafe/chromadb-remote-mcp/pull/8 * Potential fix for code scanning alert no. 6: Log injection by @meloncafe in https://github.com/meloncafe/chromadb-remote-mcp/pull/10 * chore(style): update MseeP.ai badge to shields.io format by @meloncafe in https://github. |
| `v1.0.1` | 2025-10-26 | Low | ## What's Changed * fix(docs): update installation scripts by @meloncafe in https://github.com/meloncafe/chromadb-remote-mcp/pull/3 * fix(docker): update volume path in docker-compose files to use /data by @meloncafe in https://github.com/meloncafe/chromadb-remote-mcp/pull/4 * feat(docker): add MCP Register Label to Dockerfile by @meloncafe in https://github.com/meloncafe/chromadb-remote-mcp/pull/5 * chore(release): bump version to 1.0.1 and update changelog by @meloncafe in https://github.c |
| `v1.0.0` | 2025-10-25 | Low | # 🎉 ChromaDB Remote MCP Server v1.0.0  First production release! Access ChromaDB from all Claude clients (Desktop, Mobile, Code) through a secure, self-hosted MCP server.  ## ✨ Key Features  - **Remote MCP Server**: Access ChromaDB from anywhere via Streamable HTTP transport (2025-03-26 spec) - **Unified Authentication**: Single token protects both MCP and ChromaDB REST API endpoints - **Cross-Platform Support**: Works with Claude Desktop, Mobile, and Code - **One-Command Install**: Au |

## Dependency audit

- **Score**: 97/100
- **Total deps**: 21
- **Resolved**: 20
- **Unresolved**: 1
- **License conflicts**: 0
- **Warnings**: 1
- **Scanned**: 2026-06-01

## Citation

- HTML: https://www.freshcrate.ai/projects/chromadb-remote-mcp
- Markdown: https://www.freshcrate.ai/projects/chromadb-remote-mcp.md
- Dependencies JSON: https://www.freshcrate.ai/api/projects/chromadb-remote-mcp/deps

_Generated by freshcrate.ai. Indexes github releases for AI-agent ecosystem packages._