← Back to directory
F

Form.io Agentic Coding Toolset

Official
MCP server, Claude Code plugin, and AI skills library for building Form.io applications.
Category
Dev Tools #95 of 438
Stars
★ 8 Popular
Transport
stdio (local process)
Runtime
Node.js
Credentials
Optional API key
License
MIT
Last commit
Tools
20
62FMRS · C

The Form.io Agentic Coding Toolset is an official project providing a mature MCP integration for the Form.io platform. It includes a rich set of tools and skills supporting both application and form development, and offers an easy install via Claude Code plugin. The tools are stable and well-documented, but require Form.io project permissions.

Strongest · Documentation 15/20 Weakest · Reliability 10/20

Reliability
10/20
Security and permissions
13/20
Maintenance
11/20
Documentation
15/20
Setup experience
13/20
Why each score
Reliability 10/20
The README references CI workflows and a skill test suite, but no actual test files or CI workflow contents are supplied, so no verifiable execution evidence exists under static calibration. The tool inventory (form_*, role_*, action_*, project_*, hello) is internally consistent and error/fallback behavior is documented (login-form probe timeouts, project source precedence), but nothing committed proves tool behavior matches claims, capping the score near 10.
Security and permissions 13/20
FORMIO_API_KEY is correctly flagged isSecret, the browser JWT flow avoids long-lived credential storage, and FORMIO_INSECURE_TLS is documented as dev-only. However, FORMIO_INSECURE_TLS sets NODE_TLS_REJECT_UNAUTHORIZED=0 globally, a risky footgun; project_import silently overwrites same-name items with no confirmation step; action_delete and role_update (full replacement) lack documented confirmation; the browser-based login and login-form auto-probing introduce network endpoints only partially disclosed. No red-line issues (malware, exfiltration, dangerous irreversible defaults), so above 10 but not higher due to incomplete confirmation/scoping.
Maintenance 11/20
MIT license, SECURITY.md, CONTRIBUTING.md, versioned npm packages (0.12.3), and aligned manifest/package versions indicate governance. However, only 6 stars and 1 open issue are visible; release cadence, commit activity, and dependency updates cannot be verified from supplied static material. Reasonable versioning but limited evidence of sustained maintenance.
Documentation 15/20
Layered, thorough documentation: per-client install tables, auth modes, env var table with examples, login-form resolution order, tool tables, example prompts with disclosed limitations (Angular-only greenfield, guardrails lost without skills, project-URL precedence). Troubleshooting evidence is not verifiable statically and plugin-vs-standalone behavioral differences add hidden assumptions, preventing full marks.
Setup experience 13/20
Multiple entry paths: one-command Claude Code plugin, one-click install badges for Cursor/VS Code, a manual mcp. example covering five clients, and published npm packages. Placeholder config is provided via env links. Deductions: FORMIO_BASE_URL/PROJECT_URL are declared required standalone yet optional in the manifest, and the browser-login prerequisite adds fragility in headless environments (mitigated but adds complexity); platform/runtime compatibility is unverified in supplied files.

Static review · not runListed 2026-09-08

Read the FMRS scoring method →

Fit and risk

What it can accessUses the networkChanges third-party account data

Best for

  • Developers using Form.io to build form applications within AI coding environments
  • Enterprises needing standardized data, RBAC, and audit capabilities
  • Teams using Claude Code or other MCP-aware clients

Not for

  • Developers not using the Form.io platform
  • Users seeking no-code development without AI coding tools
  • Scenarios requiring direct REST API access without MCP tool abstraction

Required permissions

  • Requires Form.io project API key or browser login authentication
  • Access to Form.io project URL and base URL
  • Ability to create, update, delete forms, roles, actions, and project resources

Risks and side effects

  • API key leakage could lead to unauthorized access
  • Importing project templates may overwrite existing items with the same machine name
  • Browser login flow may fail in CI or environments without a display
  • Using insecure TLS settings (FORMIO_INSECURE_TLS) may pose a security risk

Setup

Before you start

Runtime:Node.js

FORMIO_API_KEY optionalsecret Optional Form.io project API key; when set, the browser login flow is skipped. Get it from your project's API key settings.
Other optional settings (6)
FORMIO_BASE_URL optional Base URL of your Form.io deployment, e.g. https://api.form.io for SaaS or https://forms.example.com self-hosted; usually derived from the project URL, optional.
FORMIO_PROJECT_URL optional Full URL of your Form.io project, e.g. https://myproject.form.io (SaaS) or https://forms.example.com/myproject (self-hosted); can also come from a committed formio. or the project_set per-directory mapping.
FORMIO_LOGIN_FORM optional Optional URL of a custom portal login form; when unset the server auto-probes candidate login forms.
FORMIO_FORCE_BROWSER optional Set to 1 to force the browser login attempt in CI, containers, or other environments where the server detects no display.
FORMIO_INSECURE_TLS optional Set to 1 to skip TLS certificate verification (NODE_TLS_REJECT_UNAUTHORIZED=0); for self-signed cert local development only, never in production.
FORMIO_PLUGIN_CONTEXT optional Set automatically by the plugin manifest; when 1, enables the project_set tool and reads project URLs per cwd from ~/.formio/projects..
  1. Install Claude Code.\n2. Run within Claude Code: /plugin marketplace add https://github.com/formio/ai.git\n3. Run: /plugin install formio-ai@formio\nAlternatively, use the MCP server standalone by creating a .mcp.json in your project root with the configuration shown.
.mcp.json
{
  "mcpServers": {
    "formio-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@formio/mcp"
      ],
      "env": {
        "FORMIO_BASE_URL": "https://api.form.io",
        "FORMIO_PROJECT_URL": "https://your-project.form.io"
      }
    }
  }
}

Shown for Claude Code. Other clients may use a different file or key (VS Code uses "servers") — the configurator below converts it.

.vscode/mcp.json
{
  "servers": {
    "formio-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@formio/mcp"
      ],
      "env": {
        "FORMIO_BASE_URL": "https://api.form.io",
        "FORMIO_PROJECT_URL": "https://your-project.form.io"
      }
    }
  }
}

Goes in your project's .vscode/mcp.json (VS Code uses a "servers" key).

Terminal
claude mcp add formio-mcp -e FORMIO_BASE_URL=https://api.form.io -e FORMIO_PROJECT_URL=https://your-project.form.io -- npx -y @formio/mcp

Run it in a terminal; replace any <…> placeholders with your own values first.

Check that it works

Call the hello smoke-test tool from your client — a returned greeting confirms the MCP wiring works; the first authenticated tool call triggers the browser portal-login flow.

Troubleshooting

  1. Ensure correct FORMIO_BASE_URL and FORMIO_PROJECT_URL are set
  2. Verify FORMIO_API_KEY is valid if using API key mode
  3. In CI, set FORMIO_FORCE_BROWSER=1 if unable to perform browser login
  4. Check network connectivity to the Form.io deployment
  5. Inspect server logs for error messages

Things to try

Once connected, you can ask your AI assistant things like:

  • Using the formio-mcp tools, show me every form and role in my Form.io project, then export the full project template and save it to ./backup/template..
  • Using the formio-mcp form_create tool, create a new form called "Contact Us" with fields for full name (required), email (required), subject, and message, plus a submit button.
  • List all available action types on my Form.io project and show the settings for each.
  • Import this template JSON into my project, adding the roles and forms it contains.

Tools 20

form_create writes
Create a new form.
form_get read-only
Fetch a single form definition by ID or path.
form_list read-only
List forms with optional filtering and pagination.
form_update writes
Update an existing form.
form_revisions_list read-only
List immutable published revision summaries for a form.
form_revision_get read-only
Fetch a single immutable form revision.
role_create writes
Create a new project role.
role_list read-only
List all project roles.
Show 12 more tools
role_update writes
Full-replacement update of a role.
action_types_list read-only
List all action types available on the server.
action_type_get read-only
Get an action type's settings schema.
action_create writes
Attach a new action to a form.
action_list read-only
List actions on a form.
action_get read-only
Get a single action by ID.
action_update writes
Update an action.
action_delete destructive
Detach an action from a form.
project_export read-only
Export the project's complete template as a portable JSON document.
project_import writes
Import a template JSON, additively merging roles, resources, forms, and actions.
project_set writes
Plugin-mode only: persist a per-directory project URL mapping.
hello read-only
Smoke-test tool returning a static greeting.

Use cases

Build complete form-based applications such as CRM, help desk, and storyboard.
Create complex forms and multi-page conditional wizards, like college application or FHIR-compliant patient forms.
Embed and render Form.io forms in existing applications.
Work the REST API via natural language prompts to create resources, forms, or submissions.

Supported clients

Claude Code
Claude Desktop
Cursor
VS Code
Windsurf
Cline

Listed from the project's documentation, not tested by this site.

Overview

The Form.io Agentic Coding Toolset is a comprehensive package including an MCP server (@formio/mcp), a Claude Code plugin (@formio/ai), and an AI skills library, designed to let developers perform complex actions against the Form.io Enterprise Server using their favorite agentic coding tools (starting with Claude Code). It enables creating and managing forms, resources, actions, roles, and projects, and provides a rich skill library (app orchestration, form building, resource planning, schema authoring, etc.) to accelerate development. The toolset turns Form.io into a composable backend for agentically coded applications, leveraging production-grade data, RBAC, and audit infrastructure.

Similar servers

Context7 80 · B

Upstash's official server providing up-to-date third-party library docs for AI coding assistants

★ 63.3k · Tools 2 Compare with this →

Source revision 8e5964c29055 Data synced 2026-10-19 Read the FMRS scoring method