Back to Home
growthbook icon

growthbook-mcp

Verified Safe

by growthbook

Overview

The GrowthBook MCP server allows LLM clients to interact with the GrowthBook platform for managing feature flags, A/B tests (experiments), metrics, and SDK connections, including code integration.

Installation

Run Command
node server/index.js

Environment Variables

  • GB_API_KEY
  • GB_EMAIL
  • GB_API_URL
  • GB_APP_ORIGIN

Security Notes

The server uses environment variables for sensitive API keys, which is good practice. It includes `child_process.exec` in the `generate_flag_types` tool to run `npx growthbook` commands. While the commands are hardcoded to specific `growthbook` CLI operations and pinned to `@latest`, executing arbitrary `npx` commands, especially if the `currentWorkingDirectory` parameter is controlled by untrusted input, presents a potential command injection risk if the `growthbook` CLI itself were compromised or misused. However, in the context of an MCP server used by an expert developer, this risk is mitigated by the expectation of responsible client-side handling of `currentWorkingDirectory` and the fixed nature of the commands.

Similar Servers

Stats

Interest Score40
Security Score7
Cost ClassHigh
Avg Tokens7500
Stars19
Forks14
Last Update2026-01-14

Tags

feature flagsA/B testingexperimentationgrowthbookdevelopment