Databases MCP servers

A server here queries or manages a database: SQL, NoSQL, graph or vector databases.

Not here: spreadsheets and datasets for download.

1,158servers
363 remote795 localTagged by Odel's AI, which can make mistakes

Best fit

751 made for this, ranked by starsRemoteLocal
  1. Sqlite3 @daedalus/mcp-sqlite3MCP server exposing sqlite3 library functionality4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  2. text2sql @cpenniman12/text2sql-mcpAsk any SQL database in natural language. Agent explores schema, writes SQL, self-corrects.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  3. LiteScope @croc100/litescopeOperations toolchain for SQLite, Cloudflare D1 & Turso: inspect, diff, migrate, monitor & repair.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  4. Knowledge Graph RDBMS @cunicopia-dev/knowledge-graph-rdbmsA label property graph on SQLite/Postgres with multi-ontology routing and a gated MCP server.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  5. Boyce @boyce-io/boyceDeterministic SQL compiler for AI agents. Your agent stops guessing SQL.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  6. Queryshield @bch1212/queryshieldSecure SQL proxy for AI agents — NL→SQL, AST safety, per-agent RLS, audit log.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  7. memex @ayushagrawal288/memexPersistent memory for AI agents — semantic + recency search, ONNX embeddings, Docker Compose.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
  8. Fastmcp Sqltools @atarkowska/fastmcp-sqltoolsA MCP server provides SQL database access with support for PostgreSQL, MySQL, and SQLite.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  9. FastTransfer @arpe-io/fasttransfer-mcpMCP server for FastTransfer — high-performance parallel data transfer between databases5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  10. Spark SQL @aidancorrell/spark-sql-mcp-serverQuery Spark SQL clusters via Thrift/HiveServer2. Works with Spark, EMR, Hive, Impala.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  11. SQL Server MCP (Windows) @tharanabope/sql-server-mcpSQL Server MCP with RAG capabilities for Windows (native ODBC support)5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  12. WhatsApp Chat Reader (Unofficial) @nabheetcloud/wa-chat-readerUnofficial read-only MCP server for your local WhatsApp chat history (stays on your machine).7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  13. Ariel Memory @cipher208/ariel-memoryTwo-layer memory MCP server for AI agents with 37 tools, RAG, graphs, wiki, auth5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  14. Sql Builder Ai @csoai-org/sql-builder-ai-mcpSql Builder Ai MCP Server by MEOK AI Labs9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  15. Atlas @atlasdevhq/atlasAtlas is a YAML-defined semantic layer for analytics — authored by humans, consumed by AI agents.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  16. Neurohive @adelelo13/neurohiveMulti-agent memory intelligence with expertise tracking and conflict detection5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  17. Flarelink @flarelink/mcpBuild on the Flarelink stack — Cloudflare auth, D1, and R2 — from your AI coding tools.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  18. Plexus @pcas-io/plexusTyped on-prem knowledge graph for AI agents — read-only for humans, write-only for agents via MCP.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.1 GitHub stars.
  19. Memors @kkeo/memorsLocal, explainable knowledge base for AI agents: hybrid search with provenance over SQLite.Not assessed yet.Runs on your machine, installed from MCPB.
  20. Shadowjoin @harsh-chandak/shadowjoinMeasure the matches your exact join is silently dropping, and get the rule that fixes each.Not assessed yet.Runs on your machine, installed from npm.
  21. LogCarver @caiderek/logcarver-mcpRead-only MCP server that finds deleted SQL Server rows from the transaction log (fn_dblog).8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.
  22. Qdrant RBAC @fidonis/qdrant-mcp-rbacRole-based access to your Qdrant vector store, via MCP. OIDC in, scoped JWTs out.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  23. PostgreSQL Performance (read-only) @gouranshul/pg-perf-mcpRead-only PostgreSQL performance diagnostics: slow queries, EXPLAIN, index advice, locks, functionsNot assessed yet.Runs on your machine, installed from Docker.
  24. Maplith Bridge @maplith/bridgeShare a folder of data files read-only over MCP, and fill it from PostgreSQL under a read-only role.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.