Databases MCP servers

A server here queries or manages a database: SQL, NoSQL, graph or vector databases.

Not here: spreadsheets and datasets for download.

1,158servers
363 remote795 localTagged by Odel's AI, which can make mistakes

Best fit

751 made for this, ranked by starsRemoteLocal
  1. Fauna @mrfentmen/fauna-mcpMCP server for Fauna: collections, FQL queries. Needs a database secret.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  2. Aifp @aryanduntley/aifpDatabase-driven FP enforcement and project management for AI-maintained codebases5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  3. Shelbymcp @studio-moser/shelbymcpKnowledge-graph memory server for AI tools via MCP4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  4. Jarroba Tools @invarato/jarroba-tools134 deterministic tools for your AI: logs, tests, SQL, diagrams, SPARQL. Local, no network.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  5. Tabellum @dudko/tabellumMCP bridge to the Tabellum database client: schema, reads, SQL drafts; writes approved in the app.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  6. Telys — on-device memory @thyn-ai/telysPrivate on-device memory & retrieval for AI assistants — offline vector + lexical search.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  7. Databases (read-only, switchable) @shibbirweb/mcp-db-read-onlyRead-only SQL, MongoDB, Redis and Elasticsearch access, switchable mid-conversation.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  8. Astra DB @erichare/astra-mcpAstra DB tools for agents: schema, find, vector search, guarded writes, and interactive views.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  9. OwnPG @devops-infinity/ownpgPostgreSQL DBA tools over MCP, scoped to one database and one schema.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.
  10. Devart MCP Server for Dynamics 365 (ADO.NET) @devart/mcp-dynamics365Schema-aware read/write access to Dynamics 365 through Devart dotConnect ADO.NET data provider.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.
  11. Devart MCP Server for MySQL (ADO.NET) @devart/mcp-mysqlSchema-aware read/write access to MySQL through Devart dotConnect ADO.NET data provider.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.
  12. DBHawk @datasparc/dbhawkSecure access to DBHawk datasources: browse schemas, run governed queries, HawkAI text-to-SQL.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  13. MySQL (read-only, switchable) @shibbirweb/mcp-mysql-read-onlyRead-only MySQL access, with the database and server switchable mid-conversation.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  14. TractorScope @tractorscope/mcpQuery your databases and build charts, dashboards, filters and alerts in TractorScope.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  15. sqlglass @s-curvelabs/sqlglassSQL Server / Azure SQL for agents: real schema, lint, read-only runs, plans, write previews.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  16. SQL Safe MCP @proprock/sql-safe-mcpMinimal, read-only, PII-safe MCP server for SQL databases.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  17. health4ai @jefflitt1/health4aiQuery your Apple Health data from your own Supabase/Postgres via local MCP.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  18. Family Office Knowledge Graph @familyofficeknowledgegraph/fo-kgFamily Office Knowledge Graph: read-only MCP door over the public record. Agentic KG Holdings.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  19. MySQL Legacy MCP @rufflet/mysql-legacy-mcpInspect and query MySQL 5.0–5.6; opt-in INSERT/UPDATE/DELETE/DDL. Live-verified 5.0–8.0.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  20. WHOOP MCP @cunicopia-dev/whoop-postgres-mcpSync WHOOP recovery, sleep, strain, and workouts into Postgres and query them from any MCP client.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  21. SQL Server @hlgurgel/sqlserverServidor MCP para SQL Server com controle de permissões e modo somente-leitura5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  22. polymnemo @pcbz/polymnemoShared cross-LLM long-term memory over MCP: semantic recall, sessions, and media (pgvector).5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  23. Artsdata @artsdata/mcpSearch Artsdata for authoritative data on Canadian events, artists, organizations, and places.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  24. Archive @lunenburgbudgetproject/archiveThe Lunenburg, Massachusetts town and school budget, every figure traced to its source document.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.