MCP server category
Databases MCP servers: comparison and full list
The Databases category lists 138 open-source MCP servers, checked on GitHub. The best scored on our grid are Nhost, ArcadeDB MCP Server, and Jitsu. 67% received a commit in the last three months.
138servers
67 %active (3 months)
12official
100stars (median)
What Databases MCP servers are for
Database MCP servers let an AI agent inspect schemas, execute queries, or assist with diagnosis, depending on the available tools. They serve developers, analysts, and operations teams working with structured information. LINQ to DB supports schema inspection and SQL execution across different database providers. Postgres MCP covers PostgreSQL performance analysis, tuning, and health checks. You might ask: “Inspect this test database schema and prepare a query to find orders without a customer reference, then explain how you checked the result.” The agent’s reach depends on both the server’s capabilities and the database permissions assigned to its connection.
Example uses:
- Explore a test database schema to understand the relationships between tables available to your application.
- Prepare a query for a business question and inspect its results within the permissions you grant.
- Analyze PostgreSQL performance to identify areas that require further investigation by your database operations team.
- Check the consistency of accessible records without changing the data used by your production application.
The category in figures
Of the 138 servers in the category (4% of the directory), 12 are official vendor implementations, 88% declare a licence, 15 offer a remote server and 27 need at least one API key or token according to the MCP registry. The median repository has 100 stars.
All Databases MCP servers
Click a header to sort. Score out of 100: adoption, maintenance and framework (licence, registry, official status); risk: system access, secrets, licence, abandonment.
| Server | Stars | Last commit | Licence | Risk | Score |
|---|---|---|---|---|---|
| Dbx Query databases from AI agents using connections configured in DBX. | 27,672 | Oct 24, 2026 | Apache-2.0 | low | 85 |
| MCP Toolbox for Databases MCP Toolbox for Databases enables your agent to connect to your database. | 16,717 | Oct 23, 2026 | Apache-2.0 | low | 85 |
| Nhost ◆ Official Nhost MCP server, bundled with the Nhost CLI. Lets AI coding assistants read your GraphQL schema, run the queries and mutations you | 9,366 | Oct 24, 2026 | MIT | low | 100 |
| Jitsu Manage Jitsu data pipelines: destinations, streams, connections, functions, live events. | 5,112 | Oct 23, 2026 | MIT | low | 88 |
| Postgres MCP (crystaldba) Postgres development and operations: performance analysis, tuning and health checks. | 3,425 | Aug 17, 2026 | MIT | low | 75 |
| LINQ to DB Inspect database schemas and execute SQL queries across multiple database providers with LINQ to DB. | 3,335 | Oct 24, 2026 | MIT | low | 80 |
| Supabase MCP server for interacting with the Supabase platform | 2,969 | Oct 24, 2026 | Apache-2.0 | moderate | 86 |
| Mindwtr Task automation via SQLite, desktop Local API, or Mindwtr Cloud; read-only by default. | 2,318 | Oct 24, 2026 | AGPL-3.0 | moderate | 79 |
| MCP server mysql MySQL database integration with configurable access controls and schema inspection. | 2,179 | Jul 27, 2026 | MIT | low | 73 |
| Pg aiguide Comprehensive PostgreSQL documentation and best practices, including ecosystem tools | 1,873 | Oct 22, 2026 | Apache-2.0 | moderate | 78 |
| MCP server qdrant Qdrant integration. | 1,553 | Sep 4, 2026 | Apache-2.0 | low | 72 |
| Mysql MCP server (designcomputer) MySQL database integration with configurable access controls, schema inspection and security guidelines. | 1,403 | Aug 2, 2026 | MIT | low | 71 |
| FireCMS Cloud Manage FireCMS Cloud from an AI agent: Firestore data, collections, schemas and users. | 1,281 | Oct 23, 2026 | — | moderate | 72 |
| ArcadeDB MCP Server ◆ Built into ArcadeDB, a multi-model database (graph, document, key-value, time-series, vector) with SQL, Cypher, Gremlin and MongoDB QL suppo | 1,215 | Oct 24, 2026 | Apache-2.0 | low | 91 |
| Mongodb MCP server MongoDB Model Context Protocol Server | 1,151 | Oct 23, 2026 | Apache-2.0 | moderate | 76 |
| QueryWeaver An MCP server for Text2SQL: transforms natural language into SQL using graph schema understanding. | 1,086 | Oct 19, 2026 | AGPL-3.0 | low | 81 |
| StackQL MCP Server SQL-native query and provisioning engine for cloud infrastructure, served over MCP. | 1,068 | Oct 24, 2026 | MIT | low | 75 |
| MCP google sheets Create, read, update and manage spreadsheets through the Google Sheets API. | 1,012 | May 14, 2026 | MIT | low | 63 |
| MCP neo4j Neo4j integration: run queries, use Neo4j as knowledge graph memory and manage Neo4j Aura instances. | 989 | Sep 9, 2026 | MIT | moderate | 75 |
| Sequential Thinking Working Notes Local working notes, decisions, evidence and resumable sessions with SQLite persistence. | 959 | Oct 23, 2026 | MIT | low | 75 |
| ClickHouse ClickHouse database integration with schema inspection and query capabilities. | 892 | Oct 21, 2026 | Apache-2.0 | moderate | 80 |
| Supabase MCP server Execute SQL queries and explore Supabase databases. | 833 | Aug 21, 2026 | Apache-2.0 | low | 69 |
| Planetscale MCP Built into the PlanetScale CLI: direct access to your PlanetScale databases. | 671 | Oct 24, 2026 | Apache-2.0 | low | 73 |
| Neon Create and manage Postgres databases with Neon Serverless Postgres. | 655 | Oct 21, 2026 | MIT | low | 84 |
| MCP redis Manage and search data in Redis. | 640 | Oct 20, 2026 | MIT | low | 73 |
| Chroma MCP ◆ Access local and cloud Chroma instances for retrieval. | 600 | Sep 17, 2025 | Apache-2.0 | moderate | 55 |
| EnvKit Control the EnvKit local dev stack (PHP, nginx, MySQL, sites). Requires the EnvKit desktop app. | 579 | Oct 24, 2026 | — | moderate | 63 |
| Compartment Durable agentic memory, encrypted at rest. Fully offline: no network, no API key, no cloud. | 577 | Oct 20, 2026 | Apache-2.0 | low | 73 |
| Apple Health Local-first Apple Health MCP server for questions about your sleep, workouts and heart data. | 575 | Oct 2, 2026 | MIT | low | 73 |
| Gateway Automatically generate APIs from database schema and data for PostgreSQL, ClickHouse, MySQL, Snowflake, BigQuery and Supabase. | 548 | Jul 18, 2025 | Apache-2.0 | moderate | 44 |
| Pgmcp Natural-language queries for any PostgreSQL database, with automatic streaming and read-only safety. | 540 | May 26, 2026 | — | moderate | 50 |
| MCP server motherduck SQL analytics and data engineering for AI Assistants and IDEs | 534 | Oct 7, 2026 | MIT | moderate | 72 |
| Prometheus MCP Server Query and analyze Prometheus, the open-source monitoring system. | 519 | Oct 19, 2026 | MIT | moderate | 77 |
| Db MCP server MySQL and PostgreSQL access: query execution, transaction management, schema exploration, query building and performance analysis. | 472 | Oct 17, 2026 | MIT | low | 72 |
| Airtable Airtable database integration with schema inspection, read and write capabilities. | 455 | Oct 20, 2026 | MIT | moderate | 77 |
| MCP alchemy Access PostgreSQL, MySQL, MariaDB, SQLite, Oracle, SQL Server and more via SQLAlchemy, with schema and relationship inspection and large dat | 422 | Oct 15, 2026 | MPL-2.0 | low | 71 |
| Sec edgar MCP SEC EDGAR MCP server that provides access to the US public filings through the US SEC EDGAR API | 374 | Oct 3, 2026 | AGPL-3.0 | low | 71 |
| Elasticsearch MCP server Interact with Elasticsearch. | 313 | Oct 19, 2026 | Apache-2.0 | moderate | 75 |
| OSS Snowflake MCP Server Snowflake: prompt Cortex Agents, query structured and unstructured data, manage objects, run SQL and query semantic views, with RBAC and CRU | 301 | May 15, 2026 | Apache-2.0 | moderate | 63 |
| MCP mongo server MongoDB database integration. | 283 | Jul 29, 2026 | MIT | low | 65 |
| Mysql MCP server pro MySQL CRUD plus database anomaly analysis and role-based permission control, with easily extensible custom tools. | 250 | Aug 28, 2025 | MIT | moderate | 41 |
| Firebase MCP Firebase services including Auth, Firestore and Storage. | 247 | Oct 27, 2025 | MIT | low | 49 |
| MCP server milvus Interact with Milvus and Zilliz databases. | 245 | Aug 11, 2026 | Apache-2.0 | low | 64 |
| Pgedge postgres MCP Enterprise PostgreSQL MCP server with NL queries, hybrid search (pgvector+BM25), and web UI | 241 | Oct 23, 2026 | PostgreSQL | low | 69 |
| Xiyan MCP server Fetch data from databases with natural-language queries, using XiyanSQL as the text-to-SQL model. | 238 | Feb 11, 2026 | Apache-2.0 | low | 49 |
| DexSQL SQL for Android APK and DEX files: classes, methods, strings, references and smali. | 231 | Oct 18, 2026 | — | moderate | 65 |
| Mongodb lens Full-featured MongoDB database integration. | 208 | Apr 23, 2025 | MIT | moderate | 40 |
| CrowdSentinels AI MCP AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics | 204 | Jul 19, 2026 | GPL-3.0 | moderate | 56 |
| Context sync Universal AI Memory - Sync context across Claude, VsCode, Cursor, Continue, Windsurf, Zed & more | 189 | Apr 11, 2026 | MIT | low | 48 |
| MCP snowflake server Snowflake integration with read and optional write operations, plus insight tracking. | 184 | Oct 7, 2025 | GPL-3.0 | moderate | 40 |
| Betterlytics Query your Betterlytics web analytics from AI agents: traffic, funnels, journeys, errors, uptime. | 180 | Oct 24, 2026 | AGPL-3.0 | low | 74 |
| MCP server duckdb DuckDB database integration with schema inspection and query capabilities. | 179 | May 5, 2025 | MIT | moderate | 40 |
| Mongo MCP MongoDB integration for interacting directly with databases. | 176 | Mar 15, 2025 | MIT | moderate | 39 |
| MCP mysql server MySQL database integration for secure database operations. | 169 | Nov 14, 2025 | MIT | low | 47 |
| MCP confluent Confluent integration to interact with Confluent Kafka and Confluent Cloud REST APIs. | 168 | Oct 24, 2026 | MIT | low | 67 |
| Faucet SQL database to MCP tools and REST API: PostgreSQL, MySQL, SQL Server, Oracle, SQLite, Snowflake. | 165 | Oct 18, 2026 | MIT | low | 67 |
| MCP server weaviate Use Weaviate collections as a knowledge base and as a chat memory store. | 161 | May 26, 2026 | — | moderate | 45 |
| Alibabacloud tablestore MCP server Alibaba Cloud Tablestore: add documents and search them semantically by vectors and scalars, suited to serverless RAG. | 157 | Mar 19, 2026 | Apache-2.0 | low | 47 |
| Schemagate Selects the schema objects a SQL agent sees and returns only the tables the calling principal may read, on Postgres, Oracle, MySQL and SQL S | 154 | Oct 24, 2026 | Apache-2.0 | moderate | 72 |
| MCP bigquery server Access and query Google BigQuery databases. | 148 | May 22, 2026 | MIT | low | 55 |
| MCP sqlite Interact with SQLite databases. | 131 | Apr 5, 2026 | MIT | low | 46 |
| MCP server bigquery BigQuery database integration with schema inspection and query capabilities. | 131 | Mar 26, 2026 | MIT | low | 46 |
| MCP trino Trino integration. | 122 | Jul 1, 2026 | MIT | moderate | 59 |
| MCP memgraph Run queries against Memgraph and access its schema. | 117 | Oct 23, 2026 | MIT | low | 66 |
| Obsidian Hybrid Search Search Obsidian vaults with hybrid full-text, fuzzy, semantic, and graph retrieval. | 113 | Oct 24, 2026 | MIT | moderate | 66 |
| Sqlite explorer fastmcp MCP server Safe, read-only access to explore and query SQLite databases, with query validation. | 108 | Jul 18, 2025 | — | high | 27 |
| MCP gsheets Google Sheets API integration for reading, writing, formatting and sheet management. | 104 | Oct 4, 2026 | MIT | moderate | 70 |
| Dicom MCP DICOM integration to query, read and move medical images and reports from PACS and other DICOM-compliant systems. | 104 | Oct 18, 2026 | MIT | low | 65 |
| VelesDB Memory Offline agentic memory: remember/recall/relate/forget/why over a fused vector+graph+columnar engine | 100 | Oct 24, 2026 | — | moderate | 55 |
| Sqlsure Semantic SQL inspector: catches double-counting, wrong joins, PII exposure before execution. | 99 | Jul 18, 2026 | Apache-2.0 | low | 53 |
| Neo4j GDS Agent Neo4j Graph Data Science MCP server | 98 | Oct 12, 2026 | MIT | moderate | 65 |
| Legion MCP Multi-database access for PostgreSQL, Redshift, CockroachDB, MySQL, RDS MySQL, SQL Server, BigQuery, Oracle and SQLite. | 95 | May 11, 2025 | GPL-3.0 | moderate | 37 |
| Django ORM Lens Static analysis of Django ORM schemas without a database: models, relationships, migration dependencies, missing indexes, ER diagrams and si | 93 | Oct 19, 2026 | MIT | low | 70 |
| Airtable MCP Airtable integration: query, create, update and delete records, manage bases, tables and schemas, filter records and migrate data. | 87 | Sep 10, 2026 | MIT | low | 59 |
| Keboola MCP Connect your AI assistants to Keboola and expose your data, transformations, SQL queries, ... | 85 | Oct 24, 2026 | MIT | low | 70 |
| Nutrition MCP Nutrition tracking: log meals and macros, USDA and Open Food Facts lookups, history, app import. | 81 | Oct 10, 2026 | MIT | low | 64 |
| CogniCore Memory, reflection and safety for AI agents. Hosted or local, no vector database. | 81 | Oct 21, 2026 | MIT | low | 64 |
| Mnemiq Natural-language questions over Postgres, Oracle, Snowflake, Databricks, DuckDB and SQLite; generated SQL is validated deterministically bef | 81 | Oct 24, 2026 | Apache-2.0 | low | 64 |
| Lific Local-first, lightweight issue tracker. Single binary, SQLite-backed, MCP-native. | 80 | Oct 19, 2026 | Apache-2.0 | low | 64 |
| SmartDB MCP Connect to multiple databases at once (MySQL, PostgreSQL, SQL Server, MariaDB, Dameng, Oracle) for operations, health analysis and SQL optim | 77 | Oct 23, 2026 | MIT | low | 64 |
| Nocodb MCP server NocoDB database integration with read and write capabilities. | 76 | Mar 30, 2026 | — | moderate | 34 |
| Appwrite MCP ◆ Manage Appwrite databases, auth, users, functions, storage, messaging and more. | 73 | Oct 24, 2026 | MIT | low | 79 |
| Remnus app MCP-native open-source Notion alternative: read & write pages, databases and kanban boards. | 72 | Oct 12, 2026 | AGPL-3.0 | low | 64 |
| Misata: synthetic data library Local, offline: multi-table synthetic data with joins that hold and exact totals. Seeds databases. | 70 | Oct 15, 2026 | MIT | low | 63 |
| Dati Semantic gateway that turns common databases into MCP services, enriched with business metadata and parameterized SQL tools. | 70 | Oct 23, 2026 | Apache-2.0 | low | 63 |
| Reverie Graph memory that dreams: Neo4j knowledge-graph memory for AI agents with hybrid search | 69 | Oct 17, 2026 | MIT | moderate | 69 |
| Orbit Task management for people and AI agents, with scoped OAuth access to issues, projects, and docs. | 69 | Oct 22, 2026 | Apache-2.0 | low | 63 |
| MCP AutoMem Graph-vector memory for AI assistants using FalkorDB and Qdrant | 66 | Oct 22, 2026 | MIT | low | 63 |
| Wener mssql MCP MSSQL database integration with schema inspection and query capabilities. | 66 | Oct 23, 2026 | MIT | low | 63 |
| Go MCP mysql MySQL access with a configurable read-only mode and schema inspection. | 66 | Jan 21, 2026 | MIT | low | 43 |
| Memory Vault Local-first AI memory layer with hybrid search. Postgres + pgvector. Self-hosted, MIT. | 65 | Oct 19, 2026 | MIT | moderate | 63 |
| ČSFD Movies, TV series, creators and user ratings from ČSFD.cz, the Czech-Slovak film database | 65 | Oct 20, 2026 | MIT | low | 63 |
| Adx MCP server Query and analyze Azure Data Explorer databases. | 59 | Mar 25, 2026 | MIT | low | 43 |
| Ai memory MCP Persistent memory for any AI — zero token cost until recall | 54 | Oct 24, 2026 | Apache-2.0 | low | 62 |
| Influxdb MCP server Run queries against the InfluxDB OSS API v2. | 46 | Jan 14, 2026 | MIT | low | 42 |
| InfluxDB 3 ◆ Interact with InfluxDB 3 Core, Enterprise and Cloud Dedicated. | 38 | Oct 23, 2026 | — | high | 66 |
| MCP database server Fireproof ledger database with multi-user sync. | 31 | Dec 19, 2024 | — | high | 22 |
| PostgreSQL performance Tuner MCP Server PostgreSQL performance tuning. | 30 | Jun 2, 2026 | Apache-2.0 | low | 53 |
| Greptimedb MCP server Query GreptimeDB. | 29 | Oct 12, 2026 | MIT | moderate | 65 |
| Ydb MCP ◆ Interact with YDB databases. | 29 | Sep 21, 2026 | Apache-2.0 | low | 65 |
| Aiven MCP ◆ Navigate Aiven projects and interact with PostgreSQL, Apache Kafka, ClickHouse and OpenSearch services. | 28 | Oct 22, 2026 | Apache-2.0 | moderate | 74 |
| MCP server sqlalchemy Generic database (DBMS) connectivity via SQLAlchemy using pyodbc. | 25 | May 23, 2025 | MIT | moderate | 31 |
| DBConvert Streams (Federated SQL) ◆ Read-only SQL across PostgreSQL, MySQL, S3-compatible storage and Parquet/CSV/JSON files, with cross-source joins federated by DuckDB. | 24 | Sep 5, 2026 | MIT | low | 69 |
| PostgreSQL Access PostgreSQL databases, including those behind an SSH bastion. | 24 | Sep 16, 2026 | MIT | moderate | 59 |
| MCP server tidb TiDB database integration with schema inspection and query capabilities. | 24 | Apr 15, 2025 | Apache-2.0 | moderate | 31 |
| MCP libsql Security and management tools for libSQL databases. | 21 | Oct 22, 2026 | MIT | low | 58 |
| Druid MCP server Manage and analyze Apache Druid clusters with tools, resources and prompts. | 18 | Aug 31, 2026 | Apache-2.0 | moderate | 64 |
| MCP Dataverse Microsoft Dataverse: entity CRUD, FetchXML and OData queries, metadata inspection, workflow execution, audit logs and Power Platform integra | 18 | Oct 14, 2026 | MIT | low | 63 |
| MCP server trino Query and access data in Trino clusters. | 18 | Apr 22, 2025 | MIT | moderate | 30 |
| Nile MCP server Manage and query Nile Postgres databases, tenants, users and auth. | 18 | Mar 10, 2025 | MIT | moderate | 30 |
| MCP server jdbc Generic database (DBMS) connectivity via JDBC. | 17 | Jul 22, 2025 | MIT | moderate | 29 |
| Mysql MCP server (dave-wind) Read-only MySQL database access. | 16 | May 18, 2026 | MIT | low | 45 |
| DataCharter Local, contract-governed federation across files and databases (Postgres, Snowflake, BigQuery, DuckDB, Excel) with read-only guards and PII | 15 | Oct 21, 2026 | Apache-2.0 | low | 62 |
| MCPg PostgreSQL catalog introspection, AST-validated query execution, index tuning, natural-language SQL, and pgvector, TimescaleDB and AGE integ | 14 | Oct 19, 2026 | MIT | low | 61 |
| Google sheets MCP Google Sheets automation tools. | 13 | Sep 11, 2025 | — | high | 23 |
| MCP server odbc Generic database (DBMS) connectivity via ODBC. | 13 | Jul 23, 2025 | MIT | moderate | 28 |
| Kafka MCP Inspect Apache Kafka topics and consumer groups and safely manage offsets (reset, rewind). | 13 | Aug 23, 2026 | Apache-2.0 | low | 51 |
| SchemaBrain Read-only Postgres access with SQL compiled from your own definitions, PII refusal and a tamper-evident audit chain. | 12 | Aug 24, 2026 | Apache-2.0 | moderate | 56 |
| IBGE Brasil MCP Brazilian IBGE data: demographics, geography and economics, including localities, SIDRA tables, census data, population projections and geog | 12 | Oct 23, 2026 | MIT | low | 61 |
| MCP cockroachdb Manage, monitor and query data in CockroachDB. | 12 | Jul 16, 2026 | MIT | low | 44 |
| Postgres MCP (JaviMaligno) PostgreSQL querying, schema exploration and table analysis, read-only by default with SQL injection prevention. | 12 | Oct 23, 2026 | MIT | low | 56 |
| Coremcp Tunnel-based bridge connecting local and on-premise databases (such as MSSQL) to LLMs, with AST-based query safety and PII masking. | 11 | Jul 15, 2026 | Apache-2.0 | low | 43 |
| Memvid MCP server Local server for memvid storage and semantic search. | 10 | Jun 20, 2025 | — | high | 17 |
| Migrationpilot Check PostgreSQL migrations against lock-safety rules before an agent applies them, offline and without a database. | 9 | Oct 23, 2026 | MIT | low | 60 |
| Safedb MCP Safe, read-only database access with SQL guardrails, table allowlists, PII masking and audit logs. | 9 | Sep 23, 2026 | MIT | moderate | 55 |
| SqlAugur Read-only SQL Server access with AST-based query validation, schema exploration, ER diagrams and DBA toolkits like First Responder Kit and s | 8 | Oct 13, 2026 | MIT | low | 59 |
| Simple snowflake MCP Snowflake access that works behind a corporate proxy, with read and optional write operations. | 8 | Jul 16, 2026 | MIT | low | 42 |
| VictoriaMetrics MCP server Interact with the VictoriaMetrics database. | 8 | Oct 8, 2026 | — | moderate | 44 |
| Sql query MCP Work with PostgreSQL and MySQL within clear boundaries: schema discovery, sampling, read-only queries and query-plan inspection. | 7 | Jun 26, 2026 | MIT | low | 41 |
| Dolphindb MCP server DolphinDB database integration with schema inspection and query capabilities. | 7 | Mar 20, 2026 | — | moderate | 23 |
| Local YDB MCP Operate Docker-based local-ydb deployments locally or over SSH: bootstrap, diagnostics, auth hardening, storage workflows, dump/restore and | 5 | Oct 21, 2026 | MIT | low | 57 |
| DataLink Secure access to PostgreSQL, MySQL and SQLite databases with parameterized queries and schema inspection. | 5 | Oct 22, 2026 | MIT | moderate | 57 |
| Vikingdb MCP server VikingDB integration: collection and index info, vector storage and search. | 5 | Aug 18, 2025 | — | high | 14 |
| Nlqueries Self-hosted natural-language-to-SQL engine with validation for PostgreSQL, MySQL, Snowflake, BigQuery and DuckDB, plus document QA and seman | 5 | Oct 24, 2026 | — | moderate | 42 |
| QuestDB Web Console MCP Server ◆ Drive the QuestDB Web Console: notebook cells, SQL queries and charts on live time-series data. | 3 | Sep 30, 2026 | Apache-2.0 | low | 65 |
| S2 streamstore MCP ◆ Interact with the S2 serverless stream platform. | 1 | Jul 7, 2026 | — | moderate | 33 |
| Infino MCP ◆ Retrieval over your own data with Infino (BM25 full-text, vector, hybrid and SQL), an embedded engine on Apache Parquet over object storage. | 0 | Oct 21, 2026 | Apache-2.0 | low | 60 |
| Seedfast MCP ◆ Fill a PostgreSQL database with synthetic test data generated from its live schema: plan, run and track seeds without production data. | 0 | Sep 17, 2026 | MIT | low | 50 |
Official servers
Published by the service's own vendor (per the awesome-mcp-servers list): they usually track the API closely and are better maintained.
- Nhost 9.4K ★
- ArcadeDB MCP Server 1.2K ★
- Chroma MCP 600 ★
- Appwrite MCP 73 ★
- InfluxDB 3 38 ★
- Ydb MCP 29 ★
- Aiven MCP 28 ★
- DBConvert Streams (Federated SQL) 24 ★
- QuestDB Web Console MCP Server 3 ★
- S2 streamstore MCP 1 ★
- Infino MCP 0 ★
- Seedfast MCP 0 ★
Choosing and securing
Check database engine support, connection methods, and the operations actually exposed. Review permission handling, transactions, and query limits. Assess official and community projects through their maintenance, licenses, and documentation. Whether results are processed locally or remotely matters for confidentiality. Test against a representative database and examine error reporting. Confirm how the server identifies data-changing operations and whether its restrictions are enforced beyond instructions given to the agent.
Queries may expose personal data, application secrets, or confidential business information. Writes can alter records, while some read queries can consume substantial resources. Use a dedicated account, restrict table access, and prefer read-only permissions for exploration. Stored values may contain malicious instructions that should remain untrusted data. Require approval for changes, protect connection credentials, and avoid sending sensitive query results to services that are not authorized to receive them.
Before connecting a server to an agent with access to your data, run the AI agent security check.
Most recent
- DexSQL created October 14, 2026
- Schemagate created September 6, 2026
- Dati created August 23, 2026
- Seedfast MCP created August 4, 2026
- DataCharter created July 24, 2026
Other categories
Learn more
Frequently asked questions
What is the best Databases MCP server?
On our grid (adoption, maintenance, framework), Nhost (100/100), ArcadeDB MCP Server (91/100), and Jitsu (88/100) come first. The right choice mostly depends on the service you need and the rights you are willing to grant.
Are these servers free?
88% declare an open-source licence and are free to use. 27 need an API key: the connected service may be paid.
Is a read-only account enough to get started?
It often suits schema exploration and retrieval queries when the required permissions are available. Some diagnostic tools may need additional access. Start with a restricted scope and add only justified permissions. Read-only access still allows data exposure, and expensive queries may affect database resources even when they change no records.
Can I trust SQL generated by the agent?
Check that it matches both the schema and your question. A syntactically valid query may produce misleading results through incorrect joins, filters, or assumptions about the data. Review its logic using known examples and examine execution cost. Data-changing statements need appropriate validation before they are run against important records.
Related articles
- Build your own MCP server in 30 minutesOctober 24, 2026
- Automate your inbox with an AI agentOctober 18, 2026
- MCP, A2A, and tool calling: agent protocols explainedOctober 17, 2026
- Build an AI agent with n8n, without codingOctober 16, 2026
Neutrality. No affiliate links. No vendor pays to be reviewed, rated or ranked. Reviews are directed by François Chollet, neutral and factual, and every data point is dated and sourced. How we score