Best MCP Servers for OpenCode: Data and Tool AccessOpenCode 最佳 MCP Server:数据与工具接入指南
Compare MCP servers for OpenCode by capability fit, permissions, data quality, setup effort, and production reliability.
从能力匹配、权限、数据质量、配置成本和生产可靠性,对比适合 OpenCode 的 MCP Server。

The short answer: install for outcomes, not coverage
For most OpenCode projects, start with the one server that closes the clearest capability gap. QVeris is useful when coding work needs current, API-backed data; GitHub MCP fits repository, issue, and pull-request workflows. Add Context7 for current library documentation and Playwright when the task genuinely requires browser interaction. Database, filesystem, and memory servers deserve project-specific review because they expose broader or more durable access.
OpenCode supports local MCP servers launched as commands and remote MCP servers reached by URL. Once enabled, their tools become available to the model, so every extra server also adds context, latency, failure modes, and permissions to govern. The practical question is not how many integrations OpenCode can load, but which small set improves a repeated development workflow.
| # | Server | Best for | Typical scope | Main caution |
|---|---|---|---|---|
| 1 | QVeris MCP | Current data and API tools | Selected tools/providers | Choose only needed operations |
| 2 | GitHub MCP | Repositories, issues, PRs | Token and repository scope | Avoid broad write access |
| 3 | Context7 | Current library documentation | Remote documentation | Confirm library/version |
| 4 | Playwright MCP | Browser interaction and checks | Browser profiles and origins | Protect sessions and forms |
| 5 | Supabase MCP | Supabase project work | Project and feature groups | Prefer development projects |
| 6 | Filesystem | Bounded local documents | Explicit directories | Never expose broad roots |
| 7 | Fetch | Simple URL retrieval | Network read | Treat pages as untrusted |
| 8 | Memory | Structured persistent context | Dedicated knowledge store | Set retention and deletion rules |
The 8 best MCP servers for OpenCode
The order reflects usefulness in common coding workflows, maintainer authority, scope control, and how clearly each server complements OpenCode's built-in coding tools. It is an editorial shortlist—not a measured performance benchmark—and the best choice depends on the task.
QVeris MCP
Best for broad data and tool accessQVeris fits OpenCode workflows that need more than one narrow vendor integration. Its official MCP server exposes a compact discover, inspect, and call flow: find a capability, review its parameters and evidence, then execute it. This is especially useful for research, market monitoring, location, enrichment, or other workflows where current API-backed data matters.
The key advantage is consolidation: OpenCode can call a smaller, intentional tool surface instead of carrying separate integrations for every data source. The trade-off is governance—you still need to select individual operations, understand provider inputs, and keep credentials out of prompts and shared configuration.
Read the official QVeris MCP reference, inspect relevant QVeris tools, then validate the workflow in the QVeris Playground.
GitHub MCP Server
Best for repository operationsGitHub's official MCP server turns repository context into structured tools for code, issues, pull requests, and related workflows. It is the natural choice when OpenCode triages incoming work, summarizes project activity, or coordinates a coding agent.
Start with read access to named repositories. Add issue or pull-request writes only after testing the exact workflow and approval path. Repository content is untrusted input: an issue, README, or code comment can contain instructions that should never override your system policy.
Context7
Best for current developer documentationContext7 retrieves current, library-specific documentation instead of relying only on model memory. It is valuable when an OpenCode coding workflow spans fast-moving SDKs, frameworks, or APIs and needs version-aware examples.
Ask the agent to identify the library and target version before retrieval. Documentation is evidence, not execution authority: examples still need review against the project's runtime, lockfile, and security policy.
Playwright MCP
Best for browser workflowsMicrosoft's Playwright MCP server lets an agent inspect and interact with web pages through structured browser tools. Use it when OpenCode must verify a user journey, collect evidence from a web application, or perform a bounded browser task.
Use a dedicated browser profile without personal sessions. Restrict target origins where possible, require confirmation before submissions or purchases, and separate read-only inspection from actions that change external state.
Supabase MCP
Best for Supabase projectsSupabase's official server is the right domain-specific choice when the application already uses Supabase. Its documented surface includes project context and documentation search, with feature groups and access controls that should be narrowed to the task.
Connect a development project first. Keep production data and schema-changing operations behind a separate, explicit approval path; database access can turn a plausible but wrong agent step into durable damage.
Filesystem
Best for bounded local knowledgeThe reference Filesystem server is useful for a curated document directory, runbooks, exports, or a project workspace that OpenCode cannot otherwise access. Its value comes from a narrow root—not from exposing an entire machine.
Create a dedicated directory containing only the material the agent needs. Prefer read-only mounts, exclude secret files and credential stores, and never configure a home directory, filesystem root, or broad shared drive as the allowed path.
Fetch
Best for simple web retrievalFetch is a lightweight option when OpenCode needs to retrieve a known URL and extract readable content without a full browser. It suits public documentation, static pages, and bounded research inputs.
It does not replace search, JavaScript-capable browsing, or source verification. Treat returned content as untrusted, enforce network policy, and avoid internal addresses or endpoints that could expose metadata and private services.
Memory
Best for structured persistent contextA Memory server can preserve entities, relationships, preferences, or decisions across sessions in a structured store. Use it only when OpenCode's existing memory model does not meet a clearly defined retention need.
Persistent context creates privacy and lifecycle obligations. Define what may be stored, who can retrieve it, how corrections work, and when records expire. Do not use memory as a silent archive of every conversation.
How to choose the right OpenCode MCP stack
1. Start with the missing capability
Write one representative task and identify the exact information or action OpenCode lacks.
2. Prefer authoritative maintainers
Choose first-party or clearly documented servers with source, releases, and an explicit security model.
3. Compare the permission surface
A read-only data tool and a browser with an authenticated session have very different failure impact.
4. Measure a real workflow
Test success, denial, bad input, timeout, and server downtime before expanding access.
Three sensible starter stacks
| Workflow | Start with | Add only if needed |
|---|---|---|
| Research and monitoring | QVeris + Fetch | Playwright for interactive pages |
| Software delivery | GitHub + Context7 | Playwright for end-to-end checks |
| Supabase application | Supabase + Context7 | GitHub for issue/PR workflows |
Configure MCP servers in OpenCode safely
Use OpenCode's current MCP documentation and CLI reference as the source of truth. Roll out incrementally: add one server, confirm its connection status, review the tools it exposes, and keep write-capable access behind explicit project rules and human approval.
- Use a local definition when OpenCode should launch a command; use a remote definition for an MCP endpoint reached by URL.
- Reference credentials through environment variables or the server's supported OAuth flow—never commit literal secrets.
- Run
opencode mcp addto use the guided setup, or editopencode.jsondirectly. - Run
opencode mcp listto confirm configured servers and connection status. - Use
opencode mcp auth <name>for remote servers that require OAuth. - Test with non-production resources and require approval for state-changing tools.
opencode mcp add
opencode mcp list
opencode mcp auth <name>
opencode mcp debug <name>Command behavior can change; confirm it in the current OpenCode CLI reference.
OpenCode MCP security checklist
- Verify the maintainer, repository, package name, release history, and official documentation before installation.
- Pin or review versions. Convenience tags are useful for evaluation, not a complete supply-chain policy.
- Use per-server tool filters and prefer read-only actions with narrow resource scopes.
- Treat pages, issues, documents, database rows, and tool descriptions as untrusted content that may contain prompt injection.
- Keep secrets in approved environment or secret-reference mechanisms and redact them from logs.
- Separate read, write, publish, payment, deletion, and production access into distinct approval classes.
- Record server identity, tool name, decision, result status, and latency without logging unnecessary personal data.
- Define a disable path. One unhealthy or compromised server should be removable without breaking the entire agent.
Frequently asked questions
Does OpenCode support MCP servers?
Yes. OpenCode supports local servers launched by command and remote servers reached by URL. Its CLI can add and list servers, authenticate OAuth-enabled remote servers, and debug OAuth connection problems.
Which MCP server should I add first to OpenCode?
Start with the smallest server that closes a recurring capability gap. Consider QVeris for current API-backed data, GitHub for repository work, or Context7 for fast-changing developer documentation. Define the task before adding a broad bundle.
How many MCP servers should OpenCode use?
There is no universal limit. The stack is too large when tools overlap, selection becomes unreliable, context use and latency rise, or permissions become difficult to audit. A small project-specific set is usually easier to test and govern than a broad global stack.
Should OpenCode automatically allow MCP tools?
Only low-impact, narrowly scoped, well-tested tools should run without confirmation. Keep writes, publishing, purchases, deletion, credential access, and production changes behind explicit approval and project-level permission rules.
Are MCP servers the same as OpenCode instructions?
No. Project instructions tell OpenCode how to work, while an MCP server exposes callable tools, resources, or prompts over the protocol. They complement each other: instructions can define when and how OpenCode should use a narrowly scoped MCP tool.
Give OpenCode the smallest useful toolset
Choose one missing capability, inspect its source and permissions, test it with representative data, and expand only after the complete workflow is reliable.
