Moai Loops Airtable Safe Write
Free · Open source · MCP server

Claude writes to your Airtable. Nothing lands without a preview.

An MCP server for Claude Desktop, Claude Code, Cursor, and Cline where every write is a dry-run first: you see exactly what would change, then you confirm. Built for people who run their business on Airtable and can't afford a chatbot typo in it.

View on PyPI See how it works
No account · MIT licensed · Your Airtable token stays on your machine

The safety loop

Three steps, in that order, every time

Reading and writing Airtable from an AI client is table stakes. The safety layer is the point: writes default to dry-run — there is no code path that writes on the first call.

01 · PREVIEW

Dry-run by default

Fields are validated against the live table schema: unknown names get a did-you-mean, read-only fields are skipped and reported, select options are checked.

02 · CONFIRM

Single-use token

The plan comes back with an expiring confirm token. If anything drifts between preview and confirm, the write aborts.

03 · WRITTEN

Receipt with a link

You get the record ID and a deep link into Airtable — rate-limited and retried under the hood so batches don't melt the base.

Shipped, honestly

What's real today, what's planned

This page only claims what the shipped server does. "Planned" means not shipped yet — no dates promised.

Dry-run previews on every write Create and update — plan plus confirm token, zero writes on the first call. SHIPPED
Schema validation before the API is touched Did-you-mean fields · read-only protection · select-option checks. SHIPPED
Rate-limit and retry resilience Batches are throttled and retried so they don't melt the base. SHIPPED
Bulk upsert with dedup Match on a key field, per-record failure report. PLANNED
Undo Operation journal, rollback of a bad batch. PLANNED

If something isn't on the shipped list, this page doesn't claim it.

On your machine

Free, open source, your own token.

MIT licensed. The server runs locally with your own Airtable personal access token — read at tool-call time, never bundled, never logged. No account, no hosted middleman.

Full setup on PyPI →

# add to your MCP client config (Claude Desktop, Claude Code, Cursor, Cline)
{
  "mcpServers": {
    "airtable-write-mcp": {
      "command": "uvx",
      "args": ["airtable-write-mcp"],
      "env": { "AIRTABLE_PAT": "<your PAT>" }
    }
  }
}

Token scopes and per-client config paths are in the package README on PyPI.

Questions

Common questions

What is Airtable Safe Write?

An MCP server that lets Claude and other MCP clients write to an Airtable base, with a dry-run preview and a confirm step before anything lands.

Which clients does it work with?

Claude Desktop, Claude Code, Cursor, and Cline — any MCP client that can run a local server.

Is it free?

Yes. Open source under the MIT license, installed from PyPI.

Can a write happen without confirmation?

No. Every write starts as a dry-run preview; it executes only after you confirm with a single-use token.

Every write previewed. Every change confirmed.

Install Airtable Safe Write and let Claude work in your base without the fear.

View on PyPI
Free · Open source · MIT