Install
$ agentstack add mcp-insighttful-sqlite-mcp-server-enhanced-filterable ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
SQLite MCP Server
Last Updated November 24, 2025 - Production/Stable v2.6.3
Enterprise-grade SQLite with AI-native JSON operations & intelligent workflow automation – v2.6.3
[](https://github.com/neverinfamous/sqlite-mcp-server) [](https://hub.docker.com/r/writenotenow/sqlite-mcp-server) [](https://opensource.org/licenses/MIT)
[](https://registry.modelcontextprotocol.io/v0/servers?search=io.github.neverinfamous/sqlite-mcp-server) [](https://pypi.org/project/sqlite-mcp-server-enhanced/) [](SECURITY.md) [](https://github.com/neverinfamous/sqlite-mcp-server/security/code-scanning) [](https://github.com/neverinfamous/sqlite-mcp-server)
Transform SQLite into a powerful, AI-ready database engine with 73 specialized tools for advanced analytics, JSON operations, text processing, vector search, geospatial operations, and intelligent workflow automation.
📋 Table of Contents
Quick Start
- [✅ Quick Test - Verify Everything Works](#-quick-test---verify-everything-works)
- [🚀 Quick Start](#-quick-start)
- [🔥 Core Capabilities](#-core-capabilities)
- [🏢 Enterprise Features](#-enterprise-features)
Configuration & Usage
- [📚 MCP Client Configuration](#-mcp-client-configuration)
- [🎨 Usage Examples](#-usage-examples)
- [📊 Tool Categories](#-tool-categories)
Resources & Information
- [🏆 Why Choose SQLite MCP Server?](#-why-choose-sqlite-mcp-server)
- [🔍 AI-Powered Wiki Search](#-ai-powered-wiki-search)
- [📚 Complete Documentation](#-complete-documentation)
- [🔗 Additional Resources](#-additional-resources)
- [🚀 Quick Links](#-quick-links)
- [📈 Project Stats](#-project-stats)
✅ Quick Test - Verify Everything Works
Test all 73 tools in 30 seconds!
Quick smoke test:
python test_runner.py --quick
Standard comprehensive test (recommended):
python test_runner.py --standard
Full test suite with edge cases:
python test_runner.py --full
Expected output:
🚀 SQLite MCP Server Comprehensive Test Suite v2.6.3
================================================================
🔍 Environment Detection:
✅ SQLite 3.50.4 (JSONB supported)
✅ Python 3.13.x
✅ MCP 1.14.0
✅ Pyright strict type checking: PASS
📊 Testing 73 Tools across 14 categories...
✅ Core Database Operations (8/8 passed)
✅ JSON Helper Tools (6/6 passed)
✅ JSON Operations (12/12 passed)
✅ Text Processing (8/8 passed)
🎉 SUCCESS: All 73 tools tested successfully!
🛡️ Security Testing
NEW: Comprehensive SQL injection protection testing
Test SQL injection protection (from tests directory):
cd tests && python test_sql_injection.py
Expected result: 🛡️ Overall security posture: STRONG
What it tests:
- Protection against the SQL injection vulnerability found in original Anthropic SQLite MCP server
- 11 different attack vectors including multiple statements, UNION injection, blind injection
- Parameter binding protection with malicious payloads
- Stacked queries and comment-based injection attempts
[⬆️ Back to Table of Contents](#-table-of-contents)
🚀 Quick Start
Option 1: Docker (Recommended)
Pull and run instantly:
docker pull writenotenow/sqlite-mcp-server:latest
Run with volume mount:
docker run -i --rm \
-v $(pwd):/workspace \
writenotenow/sqlite-mcp-server:latest \
--db-path /workspace/database.db
🛡️ Supply Chain Security
For enhanced security and reproducible builds, use SHA-pinned images:
Find available SHA tags at: https://hub.docker.com/r/writenotenow/sqlite-mcp-server/tags Look for tags starting with "master-" or "sha256-" for cryptographically verified builds
Option 1: Human-readable timestamped builds (recommended)
docker pull writenotenow/sqlite-mcp-server:master-YYYYMMDD-HHMMSS-
Option 2: Multi-arch manifest digest (maximum security)
docker pull writenotenow/sqlite-mcp-server@sha256:
Example: Run with cryptographically verified image
docker run -i --rm \
-v $(pwd):/workspace \
writenotenow/sqlite-mcp-server:master-YYYYMMDD-HHMMSS- \
--db-path /workspace/database.db
How to Find SHA Tags:
- Visit Docker Hub Tags
- For convenience: Use
master-YYYYMMDD-HHMMSS-tags (human-readable, multi-arch) - For maximum security: Use
sha256-tags (manifest digests, immutable)
Understanding SHA Tags:
- 🏷️
master-YYYYMMDD-HHMMSS-- Human-readable, timestamped, multi-arch safe - 🔒
sha256-- Multi-arch manifest digest (works on all architectures) - ⚠️ Architecture-specific digests - Only for debugging specific architectures
Security Features:
- ✅ Build Provenance - Cryptographic proof of build process
- ✅ SBOM Available - Complete software bill of materials
- ✅ Supply Chain Attestations - Verifiable build integrity
- ✅ Reproducible Builds - Exact image verification for compliance
Option 2: Python Installation
Install from PyPI:
pip install sqlite-mcp-server-enhanced
Or install from source:
git clone https://github.com/neverinfamous/sqlite-mcp-server.git
Navigate to directory:
cd sqlite-mcp-server
Install requirements:
pip install -r requirements.txt
Run the server:
python start_sqlite_mcp.py --db-path ./database.db
Option 3: Test in 30 Seconds
Clone repository:
git clone https://github.com/neverinfamous/sqlite-mcp-server.git
Navigate to directory:
cd sqlite-mcp-server
Run quick test:
python test_runner.py --quick
🆕 NEW in v2.6.0: Complete JSON Operations Suite
5 Major Improvements in this release:
- 🎯 JSON Helper Tools - 6 specialized tools for simplified JSON operations with path validation and merging
- 🤖 JSON Auto-Normalization - Automatically fixes Python-style JSON with configurable strict mode
- 🛡️ Parameter Binding Interface - Enhanced MCP tools with SQL injection prevention
- 📦 Automatic Parameter Serialization - Direct object/array parameters, no manual JSON.stringify()
- 🧠 Enhanced JSON Error Diagnostics - Intelligent error categorization with contextual guidance
⚡ Install to Cursor IDE
One-Click Installation
Click the button below to install directly into Cursor:
[](cursor://anysphere.cursor-deeplink/mcp/install?name=SQLite%20MCP%20Server&config=eyJzcWxpdGUtbWNwIjp7ImFyZ3MiOlsicnVuIiwiLWkiLCItLXJtIiwiLXYiLCIkKHB3ZCk6L3dvcmtzcGFjZSIsIndyaXRlbm90ZW5vdy9zcWxpdGUtbWNwLXNlcnZlcjpsYXRlc3QiLCItLWRiLXBhdGgiLCIvd29ya3NwYWNlL3NxbGl0ZV9tY3AuZGIiXSwiY29tbWFuZCI6ImRvY2tlciJ9fQ==)
Or copy this deep link:
cursor://anysphere.cursor-deeplink/mcp/install?name=SQLite%20MCP%20Server&config=eyJzcWxpdGUtbWNwIjp7ImFyZ3MiOlsicnVuIiwiLWkiLCItLXJtIiwiLXYiLCIkKHB3ZCk6L3dvcmtzcGFjZSIsIndyaXRlbm90ZW5vdy9zcWxpdGUtbWNwLXNlcnZlcjpsYXRlc3QiLCItLWRiLXBhdGgiLCIvd29ya3NwYWNlL3NxbGl0ZV9tY3AuZGIiXSwiY29tbWFuZCI6ImRvY2tlciJ9fQ==
Prerequisites
- ✅ Docker installed and running
- ✅ ~500MB disk space available
Configuration
After installation, Cursor will use this Docker-based configuration:
{
"sqlite-mcp": {
"command": "docker",
"args": [
"run", "-i", "--rm",
"-v", "$(pwd):/workspace",
"writenotenow/sqlite-mcp-server:latest",
"--db-path", "/workspace/sqlite_mcp.db"
]
}
}
📖 See Full Installation Guide →
🔥 Core Capabilities
- 📊 Statistical Analysis - Descriptive stats, percentiles, time series analysis
- 🔍 Advanced Text Processing - Regex, fuzzy matching, phonetic search, similarity
- 🧠 Vector/Semantic Search - AI-native embeddings, cosine similarity, hybrid search
- 🗺️ SpatiaLite Geospatial - Enterprise GIS with spatial indexing and operations
- 🔐 Transaction Safety - Auto-wrapped transactions with rollback protection
- 🎛️ 73 Specialized Tools - Complete database administration and analytics suite
🏢 Enterprise Features
- 📈 Business Intelligence - Integrated insights memo and workflow automation
- 🔄 Backup/Restore - Enterprise-grade operations with integrity verification
- 🎯 Full-Text Search (FTS5) - Advanced search with BM25 ranking and snippets
- 🏗️ Virtual Tables - Smart CSV/JSON import with automatic type inference
- ⚙️ Advanced PRAGMA - Complete SQLite configuration and optimization
[⬆️ Back to Table of Contents](#-table-of-contents)
📚 MCP Client Configuration
Claude Desktop
{
"mcpServers": {
"sqlite-mcp-server": {
"command": "python",
"args": ["/path/to/sqlite-mcp-server/start_sqlite_mcp.py", "--db-path", "/path/to/database.db"]
}
}
}
Docker with Claude Desktop
{
"mcpServers": {
"sqlite-mcp-server": {
"command": "docker",
"args": ["run", "-i", "--rm", "-v", "/path/to/project:/workspace", "writenotenow/sqlite-mcp-server:latest", "--db-path", "/workspace/database.db"]
}
}
}
[⬆️ Back to Table of Contents](#-table-of-contents)
🎨 Usage Examples
Data Analysis Workflow
- Quick validation:
python test_runner.py --quick
- Start with your data:
python start_sqlite_mcp.py --db-path ./sales_data.db
- Use with Claude/Cursor for:
- Statistical analysis of your datasets
- Text processing and pattern extraction
- Vector similarity search
- Geospatial analysis and mapping
- Business intelligence insights
Docker Development
Development with live reload:
docker run -i --rm \
-v $(pwd):/workspace \
-e SQLITE_DEBUG=true \
writenotenow/sqlite-mcp-server:latest \
--db-path /workspace/dev.db
🎯 JSON Helper Tools - Simplified JSON Operations
NEW in v2.6.0: Six powerful JSON helper tools that make complex JSON operations simple:
// ✅ Insert JSON with auto-normalization
json_insert({
"table": "products",
"column": "metadata",
"data": {'name': 'Product', 'active': True, 'price': None}
})
// ✅ Update JSON by path
json_update({
"table": "products",
"column": "metadata",
"path": "$.price",
"value": 29.99,
"where_clause": "id = 1"
})
// ✅ Query JSON with complex filtering
json_query({
"table": "products",
"column": "metadata",
"filter_paths": {"$.category": "electronics"},
"select_paths": ["$.name", "$.price"]
})
JSON Helper Tools:
- 🎯 json_insert - Insert JSON data with auto-normalization
- 🔄 json_update - Update JSON by path with creation support
- 🔍 json_select - Extract JSON data with multiple output formats
- 🔎 json_query - Complex JSON filtering and aggregation
- ✅ jsonvalidatepath - Validate JSON paths with security checks
- 🔗 json_merge - Merge JSON objects with conflict resolution
Auto-normalization still works:
- 🔧 Single quotes → Double quotes
- 🔧 Python
True/False→ JSONtrue/false - 🔧 Python
None→ JSONnull - 🔧 Trailing commas removed
- 🛡️ Security validation prevents malicious input
🧠 Enhanced JSON Error Diagnostics
Enhanced in v2.6.0: When JSON validation fails, get intelligent, contextual error messages with specific guidance:
// ❌ Invalid JSON input:
validate_json('{key_without_quotes: "value"}')
// ✅ Enhanced error response:
{
"valid": false,
"error": "Expecting property name enclosed in double quotes: line 1 column 2 (char 1)",
"enhanced_message": "JSON validation failed (structural_syntax): Expecting property name...",
"error_context": {
"error_type": "structural_syntax",
"security_concern": false,
"suggestions": [
"Ensure all object keys are properly quoted strings",
"Check for missing colons (:) between keys and values",
"Verify proper key-value pair structure: \"key\": \"value\""
]
}
}
Enhanced Error Categories:
- 🔧 Structural Issues - Missing quotes, colons, brackets with specific fix suggestions
- 🛡️ Security Warnings - Detects potential SQL injection patterns in JSON strings
- 📝 Encoding Problems - Character encoding and escape sequence guidance
- 🎯 Context-Aware Tips - Line/column position with targeted recommendations
🛡️ Enhanced Parameter Binding + Auto-Serialization
NEW in v2.6.0: Built-in SQL injection protection with automatic JSON serialization:
// ✅ SECURE: Parameter binding prevents injection
read_query({
"query": "SELECT * FROM users WHERE name = ? AND age > ?",
"params": ["John", 25]
})
// ✅ NEW: Direct object/array parameters (auto-serialized)
write_query({
"query": "INSERT INTO products (metadata, tags) VALUES (?, ?)",
"params": [
{"name": "Product", "price": 29.99, "active": true}, // Auto-serialized to JSON
["electronics", "featured", "new"] // Auto-serialized to JSON
]
})
// ✅ SIMPLIFIED: No more manual JSON.stringify()
// Before v2.6.0:
write_query({
"query": "INSERT INTO table (data) VALUES (?)",
"params": [JSON.stringify({"key": "value"})] // Manual serialization required
})
// After v2.6.0:
write_query({
"query": "INSERT INTO table (data) VALUES (?)",
"params": [{"key": "value"}] // Automatic serialization!
})
v2.6.0 Benefits:
- 🛡️ SQL Injection Prevention - Parameter binding treats malicious input as literal data
- 📦 Auto-Serialization - Objects and arrays automatically converted to JSON strings
- 🔄 Backward Compatible - Existing queries continue to work unchanged
- ⚡ Better Performance - Query plan caching and parameter optimization
- 📝 Cleaner API - No manual JSON.stringify() or parameter preparation needed
[⬆️ Back to Table of Contents](#-table-of-contents)
📊 Tool Categories
The SQLite MCP Server provides 73 specialized tools across 14 categories:
> 💡 Want the complete tool list? See the [detailed tool reference](./docs/sqlite-mcp-server.wiki/Home.md) with descriptions for all 73 tools, 7 resources, and 7 prompts.
| Category | Tool Count | Description | |----------|------------|-------------| | [Core Database](./docs/sqlite-mcp-server.wiki/Core-Database-Tools.md) | 15 | CRUD operations, schema management, transactions | | [JSON Helper Tools](./docs/sqlite-mcp-server.wiki/JSON-Helper-Tools.md) | 6 | Simplified JSON operations, path validation, merging | | [Text Processing](./docs/sqlite-mcp-server.wiki/Advanced-Text-Processing.md) | 9 | Regex, fuzzy matching, phonetic search, similarity | | [Statistical Analysis](./docs/sqlite-mcp-server.wiki/Statistical-Analysis.md) | 8 | Descriptive stats, percentiles, time series | | [Virtual Tables](./docs/sqlite-mcp-server.wiki/Virtual-Tables.md) | 8 | CSV, R-Tree, series generation | | [Semantic Search](./docs/sqlite-mcp-server.wiki/Semantic-Vector-Search.md) | 8 | Embeddings, similarity, hybrid search | | [Geospatial](./docs/sqlite-mcp-server.wiki/SpatiaLite-Geospatial.md) | 7 | Spatial indexing, geometric operations | | [PRAGMA Operations](./docs/sqlite-mcp-server.wiki/PRAGMA-Operations.md) | 5 | Configuration, optimization, introspection | | [Full-Text Search](./docs/sqlite-mcp-server.wiki/Full-Text-Search.md) | 3 | FTS5 creation, indexing, BM25 ranking | | [Vector Optimization](./docs/sqlite-mcp-server.wiki/Vector-Index-Optimization.md) | 2 | ANN search
…
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Insighttful
- Source: Insighttful/sqlite-mcp-server-enhanced-filterable
- License: MIT
- Homepage: https://adamic.tech/articles/2025-09-22-sqlite-mcp-server-v2-6-0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.