Roboflow
by Roboflow
Manage computer vision datasets, train models, run inference and build Workflows from your AI assistant. 67 tools, OAuth sign-in, and 63 granular per-resource scopes — the finest-grained consent screen in this catalogue.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect Roboflow via MCP
https://mcp.roboflow.com/mcpWorks in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
Roboflow Tools & Capabilities (67)
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Limits
- This connector can spend money. Roboflow charges credits for data, training and deployment, and its documentation says credits are consumed whether the feature runs locally or on Roboflow's servers.
models_train,models_infer,workflows_runandautolabel_startall bill. Flex billing is on by default for every workspace with a 100 dollar per-month cap you can raise, lower or remove — set that cap deliberately before connecting an agent. - Set a credit cap on training. Roboflow's training documentation describes a per-run credit cap that stops the job and keeps the weights when reached. The cap requires a plan with usage-based billing, and a value below the model's minimum is rejected with
invalid_credit_cap. - The scope catalogue is wider than the tool list. 22 of the 63 application scopes — including the whole
api-key:andcredentials:families — match no tool in either the directory listing or Roboflow's reference, as of the dates above. Grant narrowly. - The connector cannot permanently delete. Roboflow reserves permanent deletion to the web app, explicitly so a stray script or automation cannot irrecoverably destroy data. Deleted items sit in Trash for 30 days.
- Non-Admin roles can do very little. Under Roboflow's role model, Reviewers and Labelers cannot train models, build Workflows, deploy models, upload or delete images, or view API keys. Role-based access control is itself a premium feature.
- Some architectures are plan-gated. Roboflow's training documentation restricts RF-DETR Medium, Large and Extra Large to paid users, and SAM3 to paid plans with usage-based billing. A training request for an unavailable architecture returns HTTP 400 and starts no job.
- We could not read tool schemas or safety annotations. The endpoint requires authentication, so the 67 count and the names are the directory's, and parameter-level detail is not published here. We never authenticated, called a tool, or started a training or inference job.
- Five tool names differ between Roboflow's docs and the directory, in each direction, as of the dates above.
- The connector is not the only Roboflow agent. Roboflow also ships an in-app Roboflow Agent and a separate Agent Skills package installed with
npx @roboflow/skills install. Setup steps for one do not apply to the others.
Frequently asked questions
Does the Roboflow MCP server need an API key?
No. Roboflow's MCP documentation states the server uses OAuth for authentication and that no API key is needed, prompting you to sign in to Roboflow on first use. We confirmed the posture on 2026-08-18: an anonymous request to the endpoint returned HTTP 401 with an OAuth challenge, so nothing connects without a browser consent step.
Can the Roboflow connector spend money on your account?
Yes. Roboflow bills training, inference and Workflow runs in credits, and the connector exposes models_train, models_infer and workflows_run. Roboflow's credits documentation says flex billing is enabled by default for all workspaces with a 100 dollar monthly cap, so an agent can consume credits past your plan allocation unless you lower or disable that cap.
Which Roboflow plan and role do you need to use the MCP server?
Any plan, including the free Public Plan, but the useful actions need an Admin role. Roboflow's access-control documentation reserves training models, building Workflows, deploying models, uploading and deleting images, and viewing API keys to Admins, and notes that without the premium role-based access control feature every user is an Admin anyway.
Can the Roboflow MCP server permanently delete your data?
Not through the API it uses. Roboflow's Trash documentation states permanent deletion is available only from the web app and is not exposed on the REST API, Python SDK or CLI, so a stray script cannot irrecoverably destroy data. Deleted projects, versions, trainings and Workflows sit in Trash for 30 days and can be restored.
Does a training job started by an agent keep running if you delete the project?
No. Roboflow's Trash documentation states that in-flight training jobs for a project or version are cancelled automatically when the item is moved to Trash, so you do not keep spending credits on something you are deleting. The connector also exposes trainings_stop and trainings_cancel for stopping a run directly.
What happens if the Roboflow MCP server rate-limits your agent?
It returns HTTP 429 and you should back off. Roboflow's production readiness checklist tells callers to retry 429 and 5xx responses with exponential backoff and jitter, and never to retry 400, 401, 403 or 404 automatically. Device log reads carry an explicit limit of 5 requests per minute per IP.
Sources
- Roboflow MCP Server documentation (retrieved 2026-08-18; HTTP 307 to
https://docs.roboflow.com/get-started/agents/mcp-server, read as Markdown athttps://docs.roboflow.com/agents/mcp-server.mdvia the.mdsuffix the host advertises) · retrieved 2026-08-18 - Roboflow Agents overview (retrieved 2026-08-18) · retrieved 2026-08-18
- Roboflow Sign In With Roboflow, scope catalogue (retrieved 2026-08-18) · retrieved 2026-08-18
- Roboflow Credits and billing (retrieved 2026-08-18) · retrieved 2026-08-18
- Roboflow Serverless Cloud API pricing (retrieved 2026-08-18) · retrieved 2026-08-18
- Roboflow Role-Based Access Control (retrieved 2026-08-18) · retrieved 2026-08-18
- Roboflow Trash and 30-day retention (retrieved 2026-08-18) · retrieved 2026-08-18
- Roboflow Production Readiness Checklist, rate limits and retries (retrieved 2026-08-18) · retrieved 2026-08-18
- Roboflow Train a Model, plan gates and credit caps (retrieved 2026-08-18) · retrieved 2026-08-18
docs.roboflow.com/robots.txt—Allow: /withContent-Signal: ai-train=yes, search=yes, ai-input=yes(retrieved 2026-08-18). Roboflow expressly permits AI synthesis of this documentation. · retrieved 2026-08-18- Live auth posture check against
https://mcp.roboflow.com/mcp— anonymousinitializereturned HTTP 401 with aWWW-Authenticate: Bearerchallenge carrying all 66 scopes inline; theoauth-protected-resourcedescriptor returned HTTP 200 with the identical list, andapp.roboflow.com/.well-known/oauth-authorization-serverreturned HTTP 200 with 67 (2026-08-18) · retrieved 2026-08-18 - Sibling scope comparison — Agentman connector pages for Alpha Vantage, PandaDoc, MuleSoft and Process Street, each recording that server's own OAuth descriptor (probed 2026-08-17 and 2026-08-18) · retrieved 2026-08-17
- Anthropic Connectors Directory entry (snapshot 2026-08-16) · retrieved 2026-08-16
- Roboflow support — <support@roboflow.com> · Privacy
Use in Agentman
Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioServer Info
- Category
- Developer Tools
- Developer
- Roboflow
- Tools
- 67
- Domain
- mcp.roboflow.com
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.