Cloud platforms. MCP servers, the command line and skills for connecting an agent to Firebase.
firebasePublished by Firebase's owner: we named it as the system's official server after reading its registry record, or it is published under Firebase's own domain. See what first-party means.
Gives AI development tools Firebase-specific capabilities and expertise.
firebase-tools version 14.27.0, runs over stdioVersion 0.3.0. Registry record last changed .
firebase is a command-line tool for Firebase. For an agent that runs on your machine and has a shell, a command-line tool can be the simpler choice: there is no server to connect, and no tool definitions take room in the context window. See its documentation.
Agent Skills published by the vendor in firebase/agent-skills.
Read from the vendor's repository on GitHub on , most recently changed first. Weight is the skill's SKILL.md counted with OpenAI's o200k_base tokenizer: what loading it puts in a context window. Other makers' tokenizers count differently, so it compares skills with each other and is not a bill. Where a count is missing, the file's size in bytes stands in. A skill that ships scripts carries code an agent may run: read it first.
| Skill | What it is for | Weight when loaded | Scripts | Last changed |
|---|---|---|---|---|
extension-to-functions-codebase | Skill for converting an installed Firebase Extension (or extension source) into a standalone Cloud Functions for Firebase codebase or publishable npm package, including V1 to V2 trigger upgrades, lifecycle hooks, and declarative security | about 1,104 tokens | none | not since |
firebase-ai-logic-basics | Integrates Firebase AI Logic (formerly Vertex AI for Firebase) into mobile and web apps (Android, iOS, Web, and Flutter) to call Gemini models from client code. Use when provisioning or initializing Firebase AI Logic, or adding Gemini features to an app: text generation, multimodal input, chat, str… | about 2,827 tokens | none | not since |
firebase-analytics | Comprehensive guide for Google Analytics for Firebase (GA4F), including base setup, SDK initialization, screen tracking, and event logging on Android and iOS. Use this skill when setting up Google Analytics, adding the SDK, or logging analytics events. Don't use for standalone CLI login or project/… | about 584 tokens | none | not since |
firebase-app-hosting-basics | Deploys and manages full-stack web applications (Next.js, Angular) with Server-Side Rendering (SSR) using Firebase App Hosting. Use when deploying Next.js/Angular apps, configuring apphosting.yaml or firebase.json apphosting blocks, managing secrets, setting up GitHub CI/CD, or configuring Blaze bi… | about 826 tokens | none | not since |
firebase-auth-basics | Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules. | about 1,073 tokens | none | not since |
firebase-basics | Provides foundational Firebase CLI setup, CLI installation, version checks (`firebase-tools@latest --version`), CLI login (including --no-localhost), project creation, project selection (`firebase use`), and app config file downloads (`google-services.json`, `GoogleService-Info.plist`). Use ONLY fo… | about 1,745 tokens | none | not since |
firebase-crashlytics | Comprehensive guide for Firebase Crashlytics, including provisioning and SDK usage. Use this skill when the user needs help setting up Crashlytics, adding crash reporting, or using the Crashlytics SDK in their application. | about 440 tokens | none | not since |
firebase-data-connect | Builds and deploys Firebase SQL Connect (aka Firebase Data Connect) backends with PostgreSQL securely. Use when designing schemas with tables and relations, writing authorized queries and mutations, configuring real-time data updates, or generating type-safe SDKs. Use when you need a relational dat… | about 2,039 tokens | none | not since |
firebase-firestore | Sets up, manages, queries, and configures Cloud Firestore databases (Standard/Enterprise edition), including data modeling, security rules, indexes, and SDK integrations (Web, Admin, Python, iOS, Android, Flutter). Use when adding or migrating app databases, creating/listing Firestore databases, de… | about 1,164 tokens | none | not since |
firebase-hosting-basics | Deploys and configures classic Firebase Hosting for static websites, single-page apps (SPAs), and microservices. Use when deploying static sites/SPAs, setting up custom domains, configuring firebase.json hosting settings (redirects, rewrites, headers, multi-site), or managing preview channels. Don'… | about 530 tokens | none | not since |
firebase-remote-config-basics | Manages Firebase Remote Config templates, feature flags, loading strategies, and SDKs (Android, iOS). Use when downloading/deploying remoteconfig JSON templates, managing version history/feature flags, setting in-app defaults, fetchAndActivate(), real-time listeners, or SDK setup. Don't use for Fir… | about 1,073 tokens | none | not since |
firebase-security-rules-auditor | Audits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource exhaustion, type safety, size limits, and hasOnly ownership checks. Use when auditing/reviewing rules, running red-team rule assessments, or… | about 898 tokens | none | not since |
firestore-rules-creation | Designs, authors, refactors, and hardens production-grade Cloud Firestore Security Rules (firestore.rules). IMPORTANT: If subagent delegation AND the firestore-rules-author subagent are available in your environment, delegate authoring firestore.rules to the firestore-rules-author subagent. If suba… | about 6,450 tokens | none | not since |
xcode-project-setup | Safely modifies Xcode projects (.pbxproj) to add Swift Packages and link files. Use this skill whenever an iOS project needs dependencies installed (e.g. Firebase, Alamofire). | about 1,430 tokens | ships scripts | not since |
8 servers for Firebase that name a public repository or a package. Anyone can publish one, and we have not read their code: check the publisher and the source before giving one a credential.
In this order: live servers before deprecated ones, first-party first, a known vulnerability last, then more downloads, then a more recent push, then by name. There is no score. Downloads are from npm and pypistats, the last push from GitHub and vulnerabilities from OSV; a server's own page has the day each was read, and "not read" means we have no figure, not that there is none. See how this directory is made.
| Server | Publisher | Reach | Downloads a week | Last push | Vulnerabilities |
|---|---|---|---|---|---|
| io.github.jmshinhwa/firebase-deploy-leak-audit | Sourced | npm | 130 | not read | none known |
| io.github.dasasian/firebase-mcp-server | Sourced | npm | 100 | not read | none known |
Firebase MCPcom.renzojohnson/firebase-mcp | Sourced | npm | not read | not read | none known |
Firebase push-id charset, value discardedio.github.sadri-dridi/pushid-ok | Sourced | remote | not read | not read | not checked |
Firebase push-id 20-char, value discardedio.github.sadri-dridi/pushid-ok2 | Sourced | remote | not read | not read | not checked |
Firebase push-id entropy charset, value discardedio.github.sadri-dridi/pushid-rand | Sourced | remote | not read | not read | not checked |
Firebase PushID shapeio.github.sadri-dridi/pushid-shape | Sourced | remote | not read | not read | not checked |
Firebase push-id time prefix, value discardedio.github.sadri-dridi/pushid-ts | Sourced | remote | not read | not read | not checked |
A server is listed for Firebase when we have named it as the system's official server, when its registry title or the last part of its registry name names Firebase as whole words, or when it is published under Firebase's own domain. See how this directory is made.
Built from agent catalog version 2026-11-13.3 of , from the MCP Registry as read on . A listing here is not an endorsement: anyone can publish a server, and we have not read its code. Names, descriptions and addresses are the publisher's own. See how this directory is made, and tell us about a wrong entry through the contact page.