github.com/neo4j/mcp

v1.5.3 - 2026-06-10

Patch

• Fixed the inputSchema advertised by get-schema and list-gds-procedures in the tools/list response. Both tools previously emitted a schema that required a spurious properties argument (an artefact of the EmptyInput workaround introduced for OpenAI compatibility). mcp-go v0.46+ already guarantees that a bare NewTool call emits "properties": {}, so the workaround is no longer needed.

Patch

• Fixed the inputSchema advertised by get-schema and list-gds-procedures in the tools/list response. Both tools previously emitted a schema that required a spurious properties argument (an artefact of the EmptyInput workaround introduced for OpenAI compatibility). mcp-go v0.46+ already guarantees that a bare NewTool call emits "properties": {}, so the workaround is no longer needed.

v1.5.2 - 2026-04-23

Patch

• Fix read-cypher/write-cypher tools/list: invopop-style jsonschema tags failed silently under google/jsonschema-go, so inputSchema was empty (no query/params).

Patch

• Fix read-cypher/write-cypher tools/list: invopop-style jsonschema tags failed silently under google/jsonschema-go, so inputSchema was empty (no query/params).

v1.5.1 - 2026-04-15

Patch

• Update mcp-go sdk dependency

Patch

• Update mcp-go sdk dependency

v1.5.0 - 2026-03-24

Minor

• Introduce a /healtz endpoint to provide liveness and readiness checks for infrastructure monitoring and orchestration.

Minor

• Introduce a /healtz endpoint to provide liveness and readiness checks for infrastructure monitoring and orchestration.

v1.4.7 - 2026-03-24

Patch

• Update dependencies, including mark3labs/mcp-go for improved protocol support and bug fixes.

Patch

• Update dependencies, including mark3labs/mcp-go for improved protocol support and bug fixes.

v1.4.6 - 2026-03-11

Patch

• Preflight checks has been modified to support multi-db when user has no access to dbms default db. A dummy query against the target database is instead performed.

Patch

• Preflight checks has been modified to support multi-db when user has no access to dbms default db. A dummy query against the target database is instead performed.

v1.4.5 - 2026-03-05

Patch

• Fix compatibility issue to consumers that requires input schema properties to be defined, such as OpenAPI API.

Patch

• Fix compatibility issue to consumers that requires input schema properties to be defined, such as OpenAPI API.

v1.4.4 - 2026-03-02

Patch

• Reject GET requests with 405 Method Not Allowed for MCP spec compliance and better security.

Patch

• Reject GET requests with 405 Method Not Allowed for MCP spec compliance and better security.

v1.4.3 - 2026-02-27

Patch

• Allows listing tools without authentication if the environment variable NEO4J_HTTP_ALLOW_UNAUTHENTICATED_TOOLS_LIST or argument `--neo4j-http-allow-unauth

Patch

• Allows listing tools without authentication if the environment variable NEO4J_HTTP_ALLOW_UNAUTHENTICATED_TOOLS_LIST or argument `--neo4j-http-allow-unauth

v1.4.2 - 2026-02-25

Patch

• An incremental build, to release new build workflow.

Patch

• An incremental build, to release new build workflow.

Patch

• Allow unauthenticated "ping" requests. Enable with the NEO4J_HTTP_ALLOW_UNAUTHENTICATED_PING environment variable or the --neo4j-http-allow-unauthenticated-ping CLI flag.

• Fix missing version string in HTTP metrics.

• Fixed the type in argSlice preventing neo4j-http-auth-header-name from being parsed as expected.

Minor

• Add support for custom auth header configuration.

Patch

• Allow trailing slash for /mcp path

Minor

• The NEO4J_MCP_TRANSPORT environment variable is now deprecated in favour of NEO4J_TRANSPORT_MODE.

Minor

• Added bearer token support for MCP server.
• Telemetry events are now also emitted when the server is executed in HTTP mode. Previously only STDIO mode supported telemetry.

Patch

• Added support for GDS tools when HTTP mode is in use. GDS requirements are verified in lazy mode when credentials become available.

Patch

• Install CA certificates in Dockerfile to support HTTPS connections.

Minor

• In this release, we add the support for HTTP transport mode.

• HTTP Server Mode: Run neo4j-mcp as an HTTP server instead of STDIO. Use --neo4j-transport-mode http to enable it. Configure the server address with --neo4j-http-host 127.0.0.1 --neo4j-http-port 8080.
• Per-Request Authentication & CORS: Each HTTP request authenticates independently. Control which clients can connect using --neo4j-http-allowed-origins https://client.example.com,https://app.example.com for granular access control.
• Secure HTTPS Connections: Enable TLS/HTTPS for production. Use --neo4j-http-tls-enabled true --neo4j-http-tls-cert-file /path/to/cert --neo4j-http-tls-key-file /path/to/key to encrypt server communications.

Patch

• Removed "params" argument from the list of required arguments for tools such as read-cypher/write-cypher.

Major

• Official 1.0.0 GA release of the Neo4j MCP server.

Minor

• The get-schema tool now returns a more concise, token-efficient JSON output. The sample-size parameter is now configured via the NEO4J_SCHEMA_SAMPLE_SIZE environment variable. Alternatively the argument --neo4j-schema-sample-size can be used.

Patch

• Extend analytics insights with dbms.components information such as "Edition", "Neo4j version", "MCP Version", "Cypher Version"

Minor

• The server now performs comprehensive pre-flight checks to verify your environment, including Neo4j connection, query capabilities, APOC installation, and will gracefully start without GDS-specific tools if the GDS library is not found.
• Added unified structured logging with slog. Configurable via NEO4J_LOG_LEVEL and NEO4J_LOG_FORMAT environment variables
• Added CLI flags for configuration (--neo4j-uri, --neo4j-username, --neo4j-password, --neo4j-database, --neo4j-read-only, --neo4j-telemetry) that override environment variables. NEO4J_URI, NEO4J_USERNAME, and NEO4J_PASSWORD are now required environment variables (no defaults provided).

Patch

• Fixed the incorrect metrics used to identify when users are coming from Aura databases

Minor

• Added opt-out telemetry to collect anonymous usage data for product improvement.

Patch

• Reduced the get-schema output footprint by removing the empty and unused labels JSON entry.
• Adds a help command available using -h or --help.

Patch

• Add NEO4J_READ_ONLY env var to enable read-only mode. When enabled, only tools annotated as read-only are registered.

Minor

• Introduces a new tool, list-gds-procedures, to list available Graph Data Science (GDS) procedures in a Neo4j database. This enhances the user experience within Neo4j MCP for GDS tasks by enabling LLMs to discover and utilize GDS graph algorithms.

Minor

• Renamed "run-cypher" to "write-cypher" and added "read-cypher". The new read-cypher enforces read-only Cypher queries and only accepts queries that do not modify data. It explicitly disallows admin/schema commands, write queries, and profiling queries using the PROFILE keyword.

Patch

• Enhanced MCP tool annotations by adding title, destructive, idempotent, and open-world hints for get-schema and run-cypher tools to improve client understanding and behavior

Patch

• Improve server discoverability and tool descriptions:

• Add server instructions to better describe the Neo4j MCP server capabilities
• Enhanced get-schema tool description to clarify behavior with empty databases
• Improved run-cypher tool description for better clarity
• Add specific message when get-schema is called on empty Neo4j database

Patch

• MCP server version is now returned when "-v" flag is passed. "neo4j-mcp -v"

Minor

• First pre-release of the Neo4j MCP server with two initial tools, "get-schema" for retrieving database schema information, "run-cypher" for executing Cypher.