Databases MCP servers

A server here queries or manages a database: SQL, NoSQL, graph or vector databases.

Not here: spreadsheets and datasets for download.

1,158servers
363 remote795 localTagged by Odel's AI, which can make mistakes

Best fit

751 made for this, ranked by starsRemoteLocal
  1. Canonic @mischuh/canonicThe Open Context Layer for Data AgentsNot assessed yet.Runs on your machine, installed from PyPI.3 GitHub stars.
  2. Chaos Cypher @chaoscypherinc/chaoscypherLocal-first knowledge graphs from your documents: build, search (GraphRAG) and edit on your machine.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
  3. Grain SQL @pattrnlabs/grainRun SQL queries and inspect database schemas through safe, visible MCP tools.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  4. legacy2mcp @bvenkata/legacy2mcpTurn a legacy SOAP/WSDL, database, or REST API into a safe, typed, audit-logged MCP server3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
  5. Facthouse @gordonkjlee/facthouseLocal AI memory: neuroscience-inspired Data→Information→Knowledge in SQLite you own.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  6. FactMem @gordonkjlee/factmemA local memory engine. You own the SQLite file. Not Mem0's hosted OpenMemory MCP.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  7. Th Memory @worakorn-prince/th-memory-mcpLocal long-term memory MCP server (SQLite) for AI coding agents — OpenCode, Claude Code, Cursor4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  8. ClickHouse @dockndevai/mcp-clickhouseClickHouse query & management for AI agents — SQL-classified read/write/destructive gating.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  9. Tgms @zxf-work/tgmsBi-temporal graph store with 15 verified temporal operators as typed, deterministic MCP tools.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
  10. Conarium @dogrucanemek-alt/conariumGoverned database access for AI assistants: masking, signed receipts, coverage reconciliation.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  11. Data Studio @geek-fun/data-studioUnified MCP server for SQL and NoSQL databases, powered by dockit and sqlkit desktop apps5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  12. PostgreSQL (hardened, read-only) @eszetael/postgres-mcp-hardenedRead-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  13. Weasley DeepMind @potatohoney-p/weasley-deepmindSecure, fragment-based long-term memory for MCP-compatible AI agents.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  14. misMEM @lucasmella-stack/mismemCooperative persistent memory for LLMs: episodes, memories and traits over SQLite (FTS5, Hebbian)5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  15. Ariadne @mclaut/ariadneLocal-first multilingual, auditable memory for Codex, Claude Code, and MCP clients.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.3 GitHub stars.
  16. Trino @txn2/mcp-trinoMCP server for Trino data warehouses. Query, analyze plans, and explore schemas.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.3 GitHub stars.
  17. Memkeeper @teflon07/memkeeperLocal-first memory for AI agents: on-device hybrid retrieval over a single SQLite file.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.3 GitHub stars.
  18. Custom Database @renanlido/custom-mcp-databaseRun alias-based queries against PostgreSQL, MySQL, MongoDB and Oracle without exposing credentials.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
  19. Mnemon @nikitacometa/mnemon-mcpPersistent layered memory for AI agents. SQLite FTS5, fact versioning, zero-cloud.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  20. Mimer @mimersql/mimer-mcpAn MCP server with Mimer SQL Database Connectivity3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
  21. Devtools @marin1321/mcp-devtoolsMCP server giving AI agents safe access to filesystem, databases, processes, and APIs.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  22. Vector DB MCP @kroq86/vector-db-mcpAssembly-accelerated DuckDB MCP server for code search, indexing, and symbol lookup.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.3 GitHub stars.
  23. Cloudflare MCP Pro @helbertparanhos/cloudflare-mcp-proCloudflare MCP: DNS, Zones, Workers, KV, R2, D1, Pages, WAF, SSL, Email, AI via REST API v47% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  24. Liquid @ertad-family/liquidConnect your AI agent to anything — APIs, databases, and agents; read and write, auto-discovered.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.