Databases MCP servers

A server here queries or manages a database: SQL, NoSQL, graph or vector databases.

Not here: spreadsheets and datasets for download.

1,155servers
361 remote794 localTagged by Odel's AI, which can make mistakes

Best fit

751 made for this, ranked by starsRemoteLocal
  1. SchemaCrawler AI @schemacrawler/schemacrawler-aiEnables natural language schema queries — explore tables, keys, procedures, and get SQL help fast3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.12 GitHub stars.
  2. Datris @datris/datrisThe data control plane for AI agents — acquire, validate, land, and query data over MCP.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.12 GitHub stars.
  3. ChromaDB Remote MCP Server @meloncafe/chromadb-remote-mcpRemote ChromaDB vector database MCP server with streamable HTTP transport6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.12 GitHub stars.
  4. Scherlok @rbmuller/scherlokZero-config data-quality monitoring: profile a warehouse, detect anomalies, gate CI.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.11 GitHub stars.
  5. Hydrolix @hydrolix/mcp-hydrolixAn MCP server to query Hydrolix3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.11 GitHub stars.
  6. VelociRAG @haseebkhalid1507/velociragLightning-fast RAG for AI agents. 4-layer fusion, ONNX Runtime, sub-200ms search.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.11 GitHub stars.
  7. SchemaBrain @arun-kc/schemabrainThe trust and intelligence layer between AI agents and your database.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.11 GitHub stars.
  8. Postgram @ivo-toby/postgramSelf-hosted memory for AI agents with hybrid search, knowledge graphs, tasks, and document sync.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.10 GitHub stars.
  9. fabric-dw @sdebruyn/fabric-dw-mcpMCP server for Microsoft Fabric Data Warehouses and SQL Analytics Endpoints4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.10 GitHub stars.
  10. Hot Memory @michael-denyer/hot-memory-mcpTwo-tier memory: hot cache (0ms) + semantic search. Self-organizing.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.10 GitHub stars.
  11. BigQuery @snowleopard-ai/bigquery-mcpA SnowLeopardAI-managed MCP server that provides access to Google BigQuery data.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.10 GitHub stars.
  12. ZoteroBridge @combjellyshen/zotero-bridgeMCP Server for Zotero SQLite Database - collection, tagging, PDF reading and more.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.10 GitHub stars.
  13. AvianSuite @aviansuite/stellar-jayAI agents run business processes on your business data. Every change is attributed and reversible.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.9 GitHub stars.
  14. DBeast PostgreSQL MCP @snss10/dbeastPostgreSQL MCP server for schema, query, health, security, and performance analysis.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.9 GitHub stars.
  15. Memory Arbiter @billy12151/memory-arbiter-mcpLocal SQLite MCP memory: evidence-based recall, advisory conflict notices, authorized governance.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.9 GitHub stars.
  16. Microsoft SQL Server @alyiox/mcp-mssqlMCP server for SQL Server metadata, parameterized queries, plan analysis, and writes opt-in.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.9 GitHub stars.
  17. Context @alex-feel/mcp-context-serverAn MCP server that provides persistent multimodal context storage for LLM agents.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.9 GitHub stars.
  18. Engram @hbarefoot/engramLocal-first persistent memory for AI agents — SQLite + local embeddings, MCP-native, no cloud.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.9 GitHub stars.
  19. Schemagate @ashishsinha1602/schemagateIdentity-scoped schema selection for text-to-SQL. Returns only the tables the caller may read.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.8 GitHub stars.
  20. CPersona @cloto-dev/cpersonaPersistent AI memory in one SQLite file: 3-layer hybrid search, confidence scoring, 29 tools.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.8 GitHub stars.
  21. TimeBase @epam/timebase-mcpExplore and query TimeBase streams, schemas, QQL, symbols, and server status via MCP.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.8 GitHub stars.
  22. kg @nnar1o/kg-mcpLocal knowledge graph memory MCP server for AI assistants.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.8 GitHub stars.
  23. Safedb @narekmalk/safedb-mcpA secure MCP server that lets AI agents query databases safely.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.8 GitHub stars.
  24. Migrationpilot @mickelsamuel/migrationpilot112 rules that catch dangerous PostgreSQL migrations, plus a pass/fail gate to call before any DDL.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.8 GitHub stars.