Databases MCP servers

A server here queries or manages a database: SQL, NoSQL, graph or vector databases.

Not here: spreadsheets and datasets for download.

1,158servers
363 remote795 localTagged by Odel's AI, which can make mistakes

Best fit

751 made for this, ranked by starsRemoteLocal
  1. Engraphy @devon-clarkk/engraphySelf-hosted MCP memory server: a typed knowledge graph on Postgres 16 and pgvector.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
  2. JDBC MCP Server @igorolv/jdbc-mcp-serverRead-only SQL, plans, schema for AI agents: PostgreSQL, Oracle, SQL Server, Firebird, SQLite, JDBC4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
  3. Cost Guard MCP @mcpsmiths/cost-guard-mcpPre-flight query cost and result-size guardrails for AI agents on BigQuery, Snowflake, Databricks3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  4. MCPDBWizard @srmadscience/mcpdbwizardAn Oracle MCP server built from the PL/SQL, tables and statements you select. No run-sql tool5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
  5. Tether @sidyellur/tetherLocal-first agent memory over SQLite: remember, recall, link, forget. Degrades, never fails.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  6. NicheDB @nichedb/nichedbSources in, feeds out: an open, ever-growing database of real-time public data, enriched.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  7. Basalt @joshiii-xyz/basaltLocal SQL workspaces with bounded, recoverable writes for coding agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.1 GitHub stars.
  8. Qdrant MCP @avaazquezz/mcp-qdrantMCP server that wraps the Qdrant vector database API as tools.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  9. Percona Pg @dockndevai/mcp-percona-pgManage Percona PostgreSQL + PgBouncer on Kubernetes — safe-by-default access modes and guards.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  10. 한국 세법 그래프 DB @minsooparkk/korea-tax-law-mcpKorean tax law graph: current statutes, 150k+ court/tribunal cases, 145k+ NTS rulings.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  11. ContextDB Memory @mikhailbovt/contextdb-memoryLocal-first durable AI memory with policy-bound recall and a typed project graph.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
  12. Spreadsheet DB @manddarinshop/spreadsheet-db-mcpSQLite-authoritative entity database with an async Google Sheets projection for AI agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  13. LocalKeep @zuneracodes/localkeepLocal chronological memory banks you control; Claude recalls them via MCP.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  14. hybridlog @imgrund/hybridlogReads your own Garmin mirror: readiness, training load, muscle freshness, and read-only SQL.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
  15. iceDQ Tools MCP @icedq-tools/mcp-serverMCP Server for iceDQ Data Reliability Platform5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  16. SAP ABAP SQL @daslab/sap-abap-sqlChecks and fixes ABAP Open SQL for SAP's ADT data-preview console. Connects to nothing.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  17. MCP DB Connect @phatngoit/mcp-db-connectMCP server for Oracle, MSSQL, PostgreSQL, MySQL, SQLite, MongoDB, and Qdrant vector search access.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  18. Oe @enthrium/oe-mcpConnect any AI coding app to enterprise data sources. One binary, one JSON config.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  19. Junê @junemind/june-mcpShared, cited knowledge-graph memory for agents — ask, search, remember, keep standing instructions4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  20. Ainative ZeroDB Memory @ainative-studio/ainative-zerodb-memory-mcpZeroDB agent-memory MCP — 18 tools: memory + write-back to Slack, Gmail, Calendar, GitHub.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  21. Oe @openenterprise-info/oe-mcpConnect Claude Code, Cursor & Windsurf to 2,600+ enterprise data sources with one binary.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  22. nlqdb — analytical memory for AI agents @nlqdb/nlqdbAnalytical memory for AI agents: a real Postgres queried in plain English over MCP. One command.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
  23. Graph-Mem @sathvik-1007/graphmem-mcpPersistent knowledge-graph memory for AI agents, with local semantic search. No API keys.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  24. ERP Report Engine @gulmezeren2-byte/erp-report-engineRead-only MCP for the SQL database behind an ERP: provably read-only guard, public benchmark.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.