Databases MCP servers

A server here queries or manages a database: SQL, NoSQL, graph or vector databases.

Not here: spreadsheets and datasets for download.

1,158servers
363 remote795 localTagged by Odel's AI, which can make mistakes

Best fit

751 made for this, ranked by starsRemoteLocal
  1. BigQuery Data Platform @debilla/data-platform-mcpRead-only BigQuery tools for plain-language data questions, with a cost gate on every query3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  2. Neon Zero-Trust Gateway @ansarii/zero-trust-gatewayZero-Trust MCP gateway securing internal database tools behind an API key firewall.22% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  3. RCLL @rcll/fleet-memorySelf-hosted shared memory for a team of AI agents. Rooms, L0-L3 depth, no LLM on the read path.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  4. Loreweave @lets-order-some-fries/loreweaveDurable agent memory over a markdown vault: bitemporal facts, timelines, hybrid graph search.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  5. metabrain @ariaxhan/metabrainMCP server giving AI agents persistent SQLite memory that proves which lessons hold.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  6. pgops @arzharch/pgops-mcpSafe, audited PostgreSQL operations for AI agents: queries, migrations, EXPLAIN, containers3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  7. BanditDB @banditdb/mcpPersistent decision memory for agents — learns which action works in which context3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  8. Websupport @tydung26/websupport-mcpManage a Websupport account: DNS, FTP, hosting, databases, mailboxes, VPS and invoices.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  9. Docker MCP Server @hypnosis/docker-mcp-serverDocker for AI agents — containers, compose stacks, logs and databases, locally or over SSH.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  10. SafeSelect MCP @antonillos/safeselectFail-closed, read-only PostgreSQL and MongoDB access for AI agents over MCP.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
  11. MySQL MCP @gistrec/mcp-mysql-clientMCP server for one MySQL database: schema, read-only queries and guarded writes.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  12. Copilot Datagate @afurlane/copilot-datagatePolicy-driven, read-only MCP server for safe database access from AI tools.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  13. Postgres @sparta2025/postgres-mcpPostgreSQL MCP server with 15 tools (SQL, EXPLAIN, health, indexes) plus a Gradio UI with LLM chat.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  14. Supabase @mcp-dir/supabase-mcpYour Supabase account in natural language: run SQL, apply migrations, manage tables, storage, edge f6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  15. Databricks @mcp-dir/databricks-mcpYour Databricks Lakehouse in natural language: run SQL on your SQL warehouses, track long-running qu8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  16. pgmcp @pascalallen/pgmcpRead-only Postgres ops/DBA diagnostics: slow queries, EXPLAIN, locks, index and table health.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  17. freebase.cloud @freebase/freebaseFree cloud databases over MCP: query, store, list and annotate across 15 engines.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
  18. Firebase @dasasian/firebase-mcp-serverMCP server for Firebase — Firestore, Storage, Auth, and Cloud Logging, with schema validation.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  19. Footnote @brick-byte/footnoteEvery number in an AI answer traces back to the rows that produced it.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  20. Tclp @thechancerylaneproject/tclp-mcpMCP server for The Chancery Lane Project's climate-aligned contract clause knowledge graph.2% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  21. sw-postgres-mcp @jpka/sw-postgres-mcpSafe-write Postgres MCP server with preview-before-execute writes and rollback safety.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  22. Postgres @ofershap/postgresPostgreSQL MCP — query databases, inspect schemas, explain queries.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  23. Naumu @naumu/mcpSearch, extend, and act on your team's Naumu knowledge graph: notes, threads, and nodes.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  24. CAN IMMUNE @sanjaysgk/can-immuneQuery CAN-IMMUNE: cancer neoantigen mutations, peptides, cell lines, MHC-I binding. Read-only.2% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.