Databases MCP servers

A server here queries or manages a database: SQL, NoSQL, graph or vector databases.

Not here: spreadsheets and datasets for download.

1,158servers
363 remote795 localTagged by Odel's AI, which can make mistakes

Best fit

751 made for this, ranked by starsRemoteLocal
  1. Telys — on-device memory @thyn-ai/telysPrivate on-device memory & retrieval for AI assistants — offline vector + lexical search.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  2. Databases (read-only, switchable) @shibbirweb/mcp-db-read-onlyRead-only SQL, MongoDB, Redis and Elasticsearch access, switchable mid-conversation.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  3. OwnPG @devops-infinity/ownpgPostgreSQL DBA tools over MCP, scoped to one database and one schema.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.
  4. Devart MCP Server for Dynamics 365 (ADO.NET) @devart/mcp-dynamics365Schema-aware read/write access to Dynamics 365 through Devart dotConnect ADO.NET data provider.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.
  5. Devart MCP Server for MySQL (ADO.NET) @devart/mcp-mysqlSchema-aware read/write access to MySQL through Devart dotConnect ADO.NET data provider.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.
  6. DBHawk @datasparc/dbhawkSecure access to DBHawk datasources: browse schemas, run governed queries, HawkAI text-to-SQL.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  7. MySQL (read-only, switchable) @shibbirweb/mcp-mysql-read-onlyRead-only MySQL access, with the database and server switchable mid-conversation.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  8. sqlglass @s-curvelabs/sqlglassSQL Server / Azure SQL for agents: real schema, lint, read-only runs, plans, write previews.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  9. SQL Safe MCP @proprock/sql-safe-mcpMinimal, read-only, PII-safe MCP server for SQL databases.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  10. health4ai @jefflitt1/health4aiQuery your Apple Health data from your own Supabase/Postgres via local MCP.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  11. MySQL Legacy MCP @rufflet/mysql-legacy-mcpInspect and query MySQL 5.0–5.6; opt-in INSERT/UPDATE/DELETE/DDL. Live-verified 5.0–8.0.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  12. WHOOP MCP @cunicopia-dev/whoop-postgres-mcpSync WHOOP recovery, sleep, strain, and workouts into Postgres and query them from any MCP client.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  13. SQL Server @hlgurgel/sqlserverServidor MCP para SQL Server com controle de permissões e modo somente-leitura5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  14. BigQuery Data Platform @debilla/data-platform-mcpRead-only BigQuery tools for plain-language data questions, with a cost gate on every query3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  15. RCLL @rcll/fleet-memorySelf-hosted shared memory for a team of AI agents. Rooms, L0-L3 depth, no LLM on the read path.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  16. Loreweave @lets-order-some-fries/loreweaveDurable agent memory over a markdown vault: bitemporal facts, timelines, hybrid graph search.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  17. metabrain @ariaxhan/metabrainMCP server giving AI agents persistent SQLite memory that proves which lessons hold.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  18. pgops @arzharch/pgops-mcpSafe, audited PostgreSQL operations for AI agents: queries, migrations, EXPLAIN, containers3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  19. BanditDB @banditdb/mcpPersistent decision memory for agents — learns which action works in which context3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  20. Websupport @tydung26/websupport-mcpManage a Websupport account: DNS, FTP, hosting, databases, mailboxes, VPS and invoices.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  21. Docker MCP Server @hypnosis/docker-mcp-serverDocker for AI agents — containers, compose stacks, logs and databases, locally or over SSH.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  22. SafeSelect MCP @antonillos/safeselectFail-closed, read-only PostgreSQL and MongoDB access for AI agents over MCP.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
  23. MySQL MCP @gistrec/mcp-mysql-clientMCP server for one MySQL database: schema, read-only queries and guarded writes.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  24. Copilot Datagate @afurlane/copilot-datagatePolicy-driven, read-only MCP server for safe database access from AI tools.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.