# Mssql Mcp Server

> Microsoft SQL Server MCP server for queries, inspection, and troubleshooting

- **Type:** MCP server
- **Install:** `agentstack add mcp-chillwind132-mssql-mcp-server`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Chillwind132](https://agentstack.voostack.com/s/chillwind132)
- **Installs:** 0
- **Category:** [Databases](https://agentstack.voostack.com/c/databases)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Chillwind132](https://github.com/Chillwind132)
- **Source:** https://github.com/Chillwind132/mssql-mcp-server

## Install

```sh
agentstack add mcp-chillwind132-mssql-mcp-server
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# mssql-mcp-server

[](LICENSE)
[](https://www.python.org/)
[](Dockerfile)

**A Microsoft SQL Server MCP server.** Query, inspect, and troubleshoot any SQL Server instance from Cursor, Claude Code, Codex, or any MCP (Model Context Protocol) client. Connects via ODBC using per-caller credentials elicited at runtime. Passwords live only in server memory with an idle TTL and are never logged.

- **Query tools**: `connect` / `disconnect` / `list_sessions` session lifecycle, `execute_sql` with table/JSON/CSV output, and `explain_query` for estimated or actual Showplan XML execution plans
- **Per-caller identity**: the `X-DB-User` and `X-DB-Password` headers are both optional; anything missing is elicited once and cached in-memory
- **Permission-scoped access**: read vs. write is governed by the SQL login's own permissions; `provision_mcp_read.sql` provisions a ready-made read-only `mcp_read` login across all user databases
- **Zero secrets on disk**: no credentials in config files, env vars, or logs

## Example prompts

- "Show the execution plan for this query and suggest a better index."
- "Who is blocking whom on `db1` right now?"
- "List the 10 largest tables in the `sales` database."
- "Find all stored procedures that reference the `Orders` table."
- "Export the results of this query as CSV."

## Tools

| Tool | Description |
|------|-------------|
| `connect` | Open a session to a SQL Server database and return a `session_id` |
| `disconnect` | Close an active SQL Server session |
| `list_sessions` | List active sessions with server, database, and usage details |
| `execute_sql` | Run a SQL statement and return rows as table, JSON, or CSV |
| `explain_query` | Estimated or actual execution plan as Showplan XML |

## Quick Start

```bash
docker compose -f docker-compose.yml -p mssql-mcp up -d --build --force-recreate
```

## Client setup

Both `X-DB-User` and `X-DB-Password` headers are optional: anything missing is prompted for once via MCP elicitation and cached in memory.

### Cursor (`mcp.json`)

```json
{
  "mcpServers": {
    "mssql-mcp": {
      "type": "http",
      "url": "http://localhost:8007/mcp",
      "headers": {
        "X-DB-User": "",
        "X-DB-Password": ""
      }
    }
  }
}
```

### Claude Code

```bash
claude mcp add --transport http mssql-mcp http://localhost:8007/mcp \
  --header "X-DB-User: " \
  --header "X-DB-Password: "
```

### Codex (`~/.codex/config.toml`)

```toml
[mcp_servers.mssql-mcp]
url = "http://localhost:8007/mcp"
http_headers = { "X-DB-User" = "", "X-DB-Password" = "" }
```

Any other MCP client works the same way: point it at the streamable HTTP endpoint and pass the headers.

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Chillwind132](https://github.com/Chillwind132)
- **Source:** [Chillwind132/mssql-mcp-server](https://github.com/Chillwind132/mssql-mcp-server)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-chillwind132-mssql-mcp-server
- Seller: https://agentstack.voostack.com/s/chillwind132
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.