Databases MCP servers

A server here queries or manages a database: SQL, NoSQL, graph or vector databases.

Not here: spreadsheets and datasets for download.

1,174servers
366 remote808 localTagged by Odel's AI, which can make mistakes

Best fit

761 made for this, ranked by starsRemoteLocal
  1. Db Gateway @guardbee/db-gatewayKVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  2. Vector Store Scanner @guardbee/vector-store-scannerProbes vector-database endpoints for unauthenticated exposure of embeddings/RAG data20% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  3. AKKO MCP server for Trino @ab2dridi/akko-mcp-trinoRead-only MCP server for Trino: queries run as the user, and Trino's own policies decide.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  4. Zektor @m-akcan/zektorManaged Postgres and Valkey hosted in Germany. Agents can create a trial database with no signup.Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
  5. Mcpolyglot @ishay60/mcpolyglotPolicy-checked, audited agent access to Postgres, MySQL, SQLite, MongoDB and OpenAPI REST APIs.Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
  6. NeoSQL MCP @unvus/neosql-mcpSchemas, SQL, ERDs, and codegen for PostgreSQL, MySQL, Oracle, SQLite, and more via NeoSQL Desktop.Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
  7. Pg Migration Lock Lint @jmshinhwa/pg-migration-lock-lintNames every statement in a Rails, Django or raw SQL migration that takes a table-blocking Postgres l6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  8. Sql Card Data Lint @jmshinhwa/sql-card-data-lintNames every column, index, view and seed row in a .sql migration that stores card data, with its PCI8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  9. SQL Server MCP (macOS) @tharanabope/sql-server-mcp-macosSQL Server MCP with RAG capabilities for macOS (Docker SQL Server support)6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  10. Universal Db @fashad-ahmed/universal-db-mcpSecurity-first MCP server for PostgreSQL, SQLite, MySQL, DuckDB with SQL injection prevention.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  11. SQL @abhishekkumar2021/sqlRead-only SQL querying + schema introspection over Postgres & SQLite, with a gated write mode.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  12. GaussDB Ro @gxc/gaussdb-ro-mcpRead-only MCP server for Huawei GaussDB (centralized & distributed), built for coding agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.1 GitHub stars.
  13. nanomem @ombansod2/nanomemMemory that knows when a remembered fact has been replaced, not just when it was written.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  14. Engraphy @devon-clarkk/engraphySelf-hosted MCP memory server: a typed knowledge graph on Postgres 16 and pgvector.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
  15. JDBC MCP Server @igorolv/jdbc-mcp-serverRead-only SQL, plans, schema for AI agents: PostgreSQL, Oracle, SQL Server, Firebird, SQLite, JDBC4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
  16. Cost Guard MCP @mcpsmiths/cost-guard-mcpPre-flight query cost and result-size guardrails for AI agents on BigQuery, Snowflake, Databricks3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  17. MCPDBWizard @srmadscience/mcpdbwizardAn Oracle MCP server built from the PL/SQL, tables and statements you select. No run-sql tool5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
  18. Tether @sidyellur/tetherLocal-first agent memory over SQLite: remember, recall, link, forget. Degrades, never fails.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  19. Basalt @joshiii-xyz/basaltLocal SQL workspaces with bounded, recoverable writes for coding agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.1 GitHub stars.
  20. Qdrant MCP @avaazquezz/mcp-qdrantMCP server that wraps the Qdrant vector database API as tools.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  21. Percona Pg @dockndevai/mcp-percona-pgManage Percona PostgreSQL + PgBouncer on Kubernetes — safe-by-default access modes and guards.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  22. ContextDB Memory @mikhailbovt/contextdb-memoryLocal-first durable AI memory with policy-bound recall and a typed project graph.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
  23. Spreadsheet DB @manddarinshop/spreadsheet-db-mcpSQLite-authoritative entity database with an async Google Sheets projection for AI agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  24. LocalKeep @zuneracodes/localkeepLocal chronological memory banks you control; Claude recalls them via MCP.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.