Dify Mcp

io.github.salted-butter-joshuaPublished by GitHub account salted-butter-joshuav0.1.0Updated Oct 24, 2026

MCP server exposing Dify knowledge base retrieval to Cursor and other MCP clients

Overview

AI-generated overview

Lets an assistant search and browse Dify knowledge bases through the Dify Knowledge API.

What you can do
Connects an MCP client to a self-hosted or remote Dify instance over HTTP and exposes its knowledge base retrieval. Tools list allowed datasets, fetch one dataset's metadata, run semantic chunk retrieval, and list documents and their text segments. A dataset allowlist restricts which dataset UUIDs are reachable.
When to use it
Use it when your team keeps documentation or internal knowledge in Dify and you want an assistant to retrieve relevant chunks and browse documents from that knowledge base. It suits setups where Dify is already running and reachable from your machine.
Requirements
Local Python 3.11+ runtime with the dify-mcp package installed, plus a running Dify instance with the Knowledge Base API enabled. Required environment variables: DIFY_API_BASE, DIFY_API_KEY and DIFY_ALLOWED_DATASETS; optional DIFY_TIMEOUT and DIFY_VERIFY_SSL. Network access from your machine to the Dify API endpoint is needed.
Before you install
The DIFY_API_KEY is a secret and should stay in local config, never in version control. One knowledge base key can reach all datasets visible to the account, so the DIFY_ALLOWED_DATASETS allowlist is the main limit on exposure. DIFY_VERIFY_SSL defaults to false, which disables TLS certificate verification; enable it unless you rely on self-signed certificates. Queries and retrieved content are sent to your Dify instance.

Installation

In SourceWeft

  1. Open Dify Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

dify-mcp

Expose Dify knowledge base retrieval capabilities via MCP (Model Context Protocol), for use in Cursor and other MCP-compatible clients.

Connect to a self-hosted or remote Dify instance over HTTP, with optional dataset allowlisting for access control.

Features

  • Knowledge base discovery — list and inspect allowed datasets
  • Semantic retrieval — search chunks via Dify POST /datasets/{dataset_id}/retrieve
  • Document browsing — list documents and segments within a dataset
  • Dataset allowlist — restrict access to specific dataset_id values
  • stdio transport — no manual server startup; the MCP client launches the process

Requirements

  • Python 3.11+
  • A running Dify instance with Knowledge Base API enabled
  • Network access from the machine running the MCP server to your Dify API endpoint
  • A Dify Knowledge Base API Key (Dify → Knowledge → Service API → API Key)

Quick Start

1. Clone and install

bash
git clone https://github.com/salted-butter-joshua/dify-mcp.git
cd dify-mcp

python3.11 -m venv .venv

# Windows
.venv\Scripts\python.exe -m pip install -e .

# macOS / Linux
.venv/bin/python -m pip install -e .

Verify import:

bash
# Windows
.venv\Scripts\python.exe -c "import dify_mcp; print('OK')"

# macOS / Linux
.venv/bin/python -c "import dify_mcp; print('OK')"

2. Configure environment

Copy the example env file and edit it:

bash
cp .env.example .env
env
DIFY_API_BASE=http://your-dify-host/v1
DIFY_API_KEY=dataset-your-api-key
DIFY_ALLOWED_DATASETS=dataset-uuid-1,dataset-uuid-2
DIFY_TIMEOUT=30
DIFY_VERIFY_SSL=false
VariableDescription
DIFY_API_BASEDify Knowledge API base URL, e.g. http://192.168.1.100/v1
DIFY_API_KEYKnowledge Base API key
DIFY_ALLOWED_DATASETSComma-separated dataset UUIDs to expose (required)
DIFY_TIMEOUTHTTP timeout in seconds (default: 30)
DIFY_VERIFY_SSLVerify TLS certificates (default: false for self-signed certs)

Run the health check:

bash
# Windows
.venv\Scripts\python.exe scripts/health_check.py

# macOS / Linux
.venv/bin/python scripts/health_check.py

3. Add to Cursor

You do not need to start the MCP server manually. Cursor launches it automatically via stdio.

  1. Open Cursor Settings → MCP → Edit config
  2. Add the following to mcpServers in your MCP config file:
    • Windows: %USERPROFILE%\.cursor\mcp.json
    • macOS / Linux: ~/.cursor/mcp.json
  3. Replace paths and env values with your own
  4. Restart Cursor

See mcp.json.example for a full example.

Windows example:

json
{
  "mcpServers": {
    "dify-knowledge": {
      "command": "/absolute/path/to/dify-mcp/.venv/Scripts/python.exe",
      "args": ["-m", "dify_mcp.server"],
      "cwd": "/absolute/path/to/dify-mcp",
      "env": {
        "DIFY_API_BASE": "http://your-dify-host/v1",
        "DIFY_API_KEY": "dataset-your-api-key",
        "DIFY_ALLOWED_DATASETS": "dataset-uuid-1,dataset-uuid-2",
        "DIFY_TIMEOUT": "30",
        "DIFY_VERIFY_SSL": "false"
      }
    }
  }
}

macOS / Linux example:

json
{
  "mcpServers": {
    "dify-knowledge": {
      "command": "/absolute/path/to/dify-mcp/.venv/bin/python",
      "args": ["-m", "dify_mcp.server"],
      "cwd": "/absolute/path/to/dify-mcp",
      "env": {
        "DIFY_API_BASE": "http://your-dify-host/v1",
        "DIFY_API_KEY": "dataset-your-api-key",
        "DIFY_ALLOWED_DATASETS": "dataset-uuid-1,dataset-uuid-2"
      }
    }
  }
}

4. Verify in Cursor

  1. Cursor Settings → MCP → confirm dify-knowledge shows as enabled
  2. In chat, try:
    • List available Dify knowledge bases
    • Search the knowledge base for "your query"

MCP Tools

ToolDescription
list_datasetsList knowledge bases within the allowlist
get_datasetGet metadata for one dataset
search_knowledgeRetrieve relevant chunks (primary retrieval tool)
list_documentsList documents in a dataset
list_document_segmentsList text segments for a document

Architecture

Cursor (MCP client)
    │ stdio
    ▼
dify-mcp (local process)
    │ HTTPS / HTTP
    ▼
Dify Knowledge API (/v1/datasets/...)

The MCP server runs locally on your machine and calls the Dify API over the network. Dify does not need to reach your machine.

Troubleshooting

IssueCauseFix
No matching distribution found for mcpPython < 3.11Use Python 3.11+ in .venv
MCP shows error (red)Wrong Python path, invalid key, or network issueCheck mcp.json paths and env vars
401 UnauthorizedInvalid API keyRegenerate key in Dify Service API panel
Dataset not in allowed listUUID not in DIFY_ALLOWED_DATASETSAdd the dataset UUID to the allowlist
Health check missing env vars.env not foundEnsure .env exists in the project root
Connection timeoutDify unreachableCheck network / VPN / firewall

Project Structure

dify-mcp/
├── src/dify_mcp/
│   ├── server.py        # MCP entry point
│   ├── config.py        # Settings and allowlist
│   ├── dify_client.py   # Dify Knowledge API client
│   └── formatters.py    # Response formatting
├── scripts/
│   └── health_check.py  # Connectivity test
├── mcp.json.example     # Cursor MCP config template
├── .env.example         # Environment variable template
└── Dify-API.md          # Local API path reference

API Reference

Security Notes

  • Never commit .env or API keys to version control
  • A single Knowledge Base API key can access all visible datasets under the account — use DIFY_ALLOWED_DATASETS to limit exposure
  • Prefer running MCP locally; keep API keys in mcp.json env or .env on your machine only

Source: README.md at commit 3a0957b

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts