# Sqlite Mcp Server Enhanced Filterable

> SQLite MCP server with AI-native features, Vector Search, foreign key enforcement, Enhanced Virtual Tables, Advanced PRAGMA operations, Intelligent MCP Resources, FTS5 search, JSONB support, enterprise-grade transaction safety, business intelligence, Statistical Analysis, SpatiaLite Integration and the ability to filter which tools are available.

- **Type:** MCP server
- **Install:** `agentstack add mcp-insighttful-sqlite-mcp-server-enhanced-filterable`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Insighttful](https://agentstack.voostack.com/s/insighttful)
- **Installs:** 0
- **Category:** [Databases](https://agentstack.voostack.com/c/databases)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Insighttful](https://github.com/Insighttful)
- **Source:** https://github.com/Insighttful/sqlite-mcp-server-enhanced-filterable
- **Website:** https://adamic.tech/articles/2025-09-22-sqlite-mcp-server-v2-6-0

## Install

```sh
agentstack add mcp-insighttful-sqlite-mcp-server-enhanced-filterable
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# SQLite MCP Server

Last Updated November 24, 2025 - Production/Stable v2.6.3

*Enterprise-grade SQLite with AI-native JSON operations & intelligent workflow automation – v2.6.3*

[](https://github.com/neverinfamous/sqlite-mcp-server)
[](https://hub.docker.com/r/writenotenow/sqlite-mcp-server)
[](https://opensource.org/licenses/MIT)


[](https://registry.modelcontextprotocol.io/v0/servers?search=io.github.neverinfamous/sqlite-mcp-server)
[](https://pypi.org/project/sqlite-mcp-server-enhanced/)
[](SECURITY.md)
[](https://github.com/neverinfamous/sqlite-mcp-server/security/code-scanning)
[](https://github.com/neverinfamous/sqlite-mcp-server)

Transform SQLite into a powerful, AI-ready database engine with **73 specialized tools** for advanced analytics, JSON operations, text processing, vector search, geospatial operations, and intelligent workflow automation.



---

## 📋 Table of Contents

### Quick Start
- [✅ Quick Test - Verify Everything Works](#-quick-test---verify-everything-works)
- [🚀 Quick Start](#-quick-start)
- [🔥 Core Capabilities](#-core-capabilities)
- [🏢 Enterprise Features](#-enterprise-features)

### Configuration & Usage
- [📚 MCP Client Configuration](#-mcp-client-configuration)
- [🎨 Usage Examples](#-usage-examples)
- [📊 Tool Categories](#-tool-categories)

### Resources & Information
- [🏆 Why Choose SQLite MCP Server?](#-why-choose-sqlite-mcp-server)
- [🔍 AI-Powered Wiki Search](#-ai-powered-wiki-search)
- [📚 Complete Documentation](#-complete-documentation)
- [🔗 Additional Resources](#-additional-resources)
- [🚀 Quick Links](#-quick-links)
- [📈 Project Stats](#-project-stats)

---

## ✅ **Quick Test - Verify Everything Works**

**Test all 73 tools in 30 seconds!**

Quick smoke test:
```bash
python test_runner.py --quick
```

Standard comprehensive test (recommended):
```bash
python test_runner.py --standard
```

Full test suite with edge cases:
```bash
python test_runner.py --full
```

**Expected output:**
```
🚀 SQLite MCP Server Comprehensive Test Suite v2.6.3
================================================================

🔍 Environment Detection:
  ✅ SQLite 3.50.4 (JSONB supported)
  ✅ Python 3.13.x  
  ✅ MCP 1.14.0
  ✅ Pyright strict type checking: PASS

📊 Testing 73 Tools across 14 categories...

✅ Core Database Operations (8/8 passed)
✅ JSON Helper Tools (6/6 passed)  
✅ JSON Operations (12/12 passed)  
✅ Text Processing (8/8 passed)
🎉 SUCCESS: All 73 tools tested successfully!
```

### 🛡️ **Security Testing**

**NEW: Comprehensive SQL injection protection testing**

Test SQL injection protection (from tests directory):
```bash
cd tests && python test_sql_injection.py
```

Expected result: 🛡️ Overall security posture: STRONG

**What it tests:**
- Protection against the SQL injection vulnerability found in original Anthropic SQLite MCP server
- 11 different attack vectors including multiple statements, UNION injection, blind injection
- Parameter binding protection with malicious payloads
- Stacked queries and comment-based injection attempts

[⬆️ Back to Table of Contents](#-table-of-contents)

## 🚀 **Quick Start**

### **Option 1: Docker (Recommended)**

Pull and run instantly:
```bash
docker pull writenotenow/sqlite-mcp-server:latest
```

Run with volume mount:
```bash
docker run -i --rm \
  -v $(pwd):/workspace \
  writenotenow/sqlite-mcp-server:latest \
  --db-path /workspace/database.db
```

#### 🛡️ **Supply Chain Security**
For enhanced security and reproducible builds, use SHA-pinned images:

Find available SHA tags at: https://hub.docker.com/r/writenotenow/sqlite-mcp-server/tags
Look for tags starting with "master-" or "sha256-" for cryptographically verified builds

Option 1: Human-readable timestamped builds (recommended)
```bash
docker pull writenotenow/sqlite-mcp-server:master-YYYYMMDD-HHMMSS-
```

Option 2: Multi-arch manifest digest (maximum security)
```bash
docker pull writenotenow/sqlite-mcp-server@sha256:
```

Example: Run with cryptographically verified image
```bash
docker run -i --rm \
  -v $(pwd):/workspace \
  writenotenow/sqlite-mcp-server:master-YYYYMMDD-HHMMSS- \
  --db-path /workspace/database.db
```

**How to Find SHA Tags:**
1. Visit [Docker Hub Tags](https://hub.docker.com/r/writenotenow/sqlite-mcp-server/tags)
2. **For convenience**: Use `master-YYYYMMDD-HHMMSS-` tags (human-readable, multi-arch)
3. **For maximum security**: Use `sha256-` tags (manifest digests, immutable)

**Understanding SHA Tags:**
- 🏷️ **`master-YYYYMMDD-HHMMSS-`** - Human-readable, timestamped, multi-arch safe
- 🔒 **`sha256-`** - Multi-arch manifest digest (works on all architectures)
- ⚠️ **Architecture-specific digests** - Only for debugging specific architectures

**Security Features:**
- ✅ **Build Provenance** - Cryptographic proof of build process
- ✅ **SBOM Available** - Complete software bill of materials  
- ✅ **Supply Chain Attestations** - Verifiable build integrity
- ✅ **Reproducible Builds** - Exact image verification for compliance

### **Option 2: Python Installation**

Install from PyPI:
```bash
pip install sqlite-mcp-server-enhanced
```

Or install from source:
```bash
git clone https://github.com/neverinfamous/sqlite-mcp-server.git
```

Navigate to directory:
```bash
cd sqlite-mcp-server
```

Install requirements:
```bash
pip install -r requirements.txt
```

Run the server:
```bash
python start_sqlite_mcp.py --db-path ./database.db
```

### **Option 3: Test in 30 Seconds**

Clone repository:
```bash
git clone https://github.com/neverinfamous/sqlite-mcp-server.git
```

Navigate to directory:
```bash
cd sqlite-mcp-server
```

Run quick test:
```bash
python test_runner.py --quick
```

### **🆕 NEW in v2.6.0: Complete JSON Operations Suite**

**5 Major Improvements in this release:**
- 🎯 **JSON Helper Tools** - 6 specialized tools for simplified JSON operations with path validation and merging
- 🤖 **JSON Auto-Normalization** - Automatically fixes Python-style JSON with configurable strict mode  
- 🛡️ **Parameter Binding Interface** - Enhanced MCP tools with SQL injection prevention
- 📦 **Automatic Parameter Serialization** - Direct object/array parameters, no manual JSON.stringify()
- 🧠 **Enhanced JSON Error Diagnostics** - Intelligent error categorization with contextual guidance

---

## ⚡ **Install to Cursor IDE**

### **One-Click Installation**

Click the button below to install directly into Cursor:

[](cursor://anysphere.cursor-deeplink/mcp/install?name=SQLite%20MCP%20Server&config=eyJzcWxpdGUtbWNwIjp7ImFyZ3MiOlsicnVuIiwiLWkiLCItLXJtIiwiLXYiLCIkKHB3ZCk6L3dvcmtzcGFjZSIsIndyaXRlbm90ZW5vdy9zcWxpdGUtbWNwLXNlcnZlcjpsYXRlc3QiLCItLWRiLXBhdGgiLCIvd29ya3NwYWNlL3NxbGl0ZV9tY3AuZGIiXSwiY29tbWFuZCI6ImRvY2tlciJ9fQ==)

Or copy this deep link:
```
cursor://anysphere.cursor-deeplink/mcp/install?name=SQLite%20MCP%20Server&config=eyJzcWxpdGUtbWNwIjp7ImFyZ3MiOlsicnVuIiwiLWkiLCItLXJtIiwiLXYiLCIkKHB3ZCk6L3dvcmtzcGFjZSIsIndyaXRlbm90ZW5vdy9zcWxpdGUtbWNwLXNlcnZlcjpsYXRlc3QiLCItLWRiLXBhdGgiLCIvd29ya3NwYWNlL3NxbGl0ZV9tY3AuZGIiXSwiY29tbWFuZCI6ImRvY2tlciJ9fQ==
```

### **Prerequisites**
- ✅ Docker installed and running
- ✅ ~500MB disk space available

### **Configuration**
After installation, Cursor will use this Docker-based configuration:
```json
{
  "sqlite-mcp": {
    "command": "docker",
    "args": [
      "run", "-i", "--rm",
      "-v", "$(pwd):/workspace",
      "writenotenow/sqlite-mcp-server:latest",
      "--db-path", "/workspace/sqlite_mcp.db"
    ]
  }
}
```

**📖 [See Full Installation Guide →](https://github.com/neverinfamous/sqlite-mcp-server/wiki/Installation-and-Configuration)**

---

## 🔥 **Core Capabilities**
- 📊 **Statistical Analysis** - Descriptive stats, percentiles, time series analysis
- 🔍 **Advanced Text Processing** - Regex, fuzzy matching, phonetic search, similarity
- 🧠 **Vector/Semantic Search** - AI-native embeddings, cosine similarity, hybrid search
- 🗺️ **SpatiaLite Geospatial** - Enterprise GIS with spatial indexing and operations
- 🔐 **Transaction Safety** - Auto-wrapped transactions with rollback protection
- 🎛️ **73 Specialized Tools** - Complete database administration and analytics suite

### **🏢 Enterprise Features**
- 📈 **Business Intelligence** - Integrated insights memo and workflow automation
- 🔄 **Backup/Restore** - Enterprise-grade operations with integrity verification
- 🎯 **Full-Text Search (FTS5)** - Advanced search with BM25 ranking and snippets
- 🏗️ **Virtual Tables** - Smart CSV/JSON import with automatic type inference
- ⚙️ **Advanced PRAGMA** - Complete SQLite configuration and optimization

[⬆️ Back to Table of Contents](#-table-of-contents)

## 📚 **MCP Client Configuration**

### **Claude Desktop**
```json
{
  "mcpServers": {
    "sqlite-mcp-server": {
      "command": "python",
      "args": ["/path/to/sqlite-mcp-server/start_sqlite_mcp.py", "--db-path", "/path/to/database.db"]
    }
  }
}
```

### **Docker with Claude Desktop**
```json
{
  "mcpServers": {
    "sqlite-mcp-server": {
      "command": "docker",
      "args": ["run", "-i", "--rm", "-v", "/path/to/project:/workspace", "writenotenow/sqlite-mcp-server:latest", "--db-path", "/workspace/database.db"]
    }
  }
}
```

[⬆️ Back to Table of Contents](#-table-of-contents)

## 🎨 **Usage Examples**

### **Data Analysis Workflow**

1. Quick validation:
```bash
python test_runner.py --quick
```

2. Start with your data:
```bash
python start_sqlite_mcp.py --db-path ./sales_data.db
```

3. Use with Claude/Cursor for:
   - Statistical analysis of your datasets
   - Text processing and pattern extraction  
   - Vector similarity search
   - Geospatial analysis and mapping
   - Business intelligence insights

### **Docker Development**

Development with live reload:
```bash
docker run -i --rm \
  -v $(pwd):/workspace \
  -e SQLITE_DEBUG=true \
  writenotenow/sqlite-mcp-server:latest \
  --db-path /workspace/dev.db
```

### **🎯 JSON Helper Tools - Simplified JSON Operations**

**NEW in v2.6.0:** Six powerful JSON helper tools that make complex JSON operations simple:

```javascript
// ✅ Insert JSON with auto-normalization
json_insert({
  "table": "products",
  "column": "metadata", 
  "data": {'name': 'Product', 'active': True, 'price': None}
})

// ✅ Update JSON by path
json_update({
  "table": "products",
  "column": "metadata",
  "path": "$.price",
  "value": 29.99,
  "where_clause": "id = 1"
})

// ✅ Query JSON with complex filtering
json_query({
  "table": "products",
  "column": "metadata",
  "filter_paths": {"$.category": "electronics"},
  "select_paths": ["$.name", "$.price"]
})
```

**JSON Helper Tools:**
- 🎯 **json_insert** - Insert JSON data with auto-normalization
- 🔄 **json_update** - Update JSON by path with creation support  
- 🔍 **json_select** - Extract JSON data with multiple output formats
- 🔎 **json_query** - Complex JSON filtering and aggregation
- ✅ **json_validate_path** - Validate JSON paths with security checks
- 🔗 **json_merge** - Merge JSON objects with conflict resolution

**Auto-normalization still works:**
- 🔧 Single quotes → Double quotes  
- 🔧 Python `True`/`False` → JSON `true`/`false`
- 🔧 Python `None` → JSON `null`
- 🔧 Trailing commas removed
- 🛡️ Security validation prevents malicious input

### **🧠 Enhanced JSON Error Diagnostics**

**Enhanced in v2.6.0:** When JSON validation fails, get intelligent, contextual error messages with specific guidance:

```javascript
// ❌ Invalid JSON input:
validate_json('{key_without_quotes: "value"}')

// ✅ Enhanced error response:
{
  "valid": false,
  "error": "Expecting property name enclosed in double quotes: line 1 column 2 (char 1)",
  "enhanced_message": "JSON validation failed (structural_syntax): Expecting property name...",
  "error_context": {
    "error_type": "structural_syntax",
    "security_concern": false,
    "suggestions": [
      "Ensure all object keys are properly quoted strings",
      "Check for missing colons (:) between keys and values",
      "Verify proper key-value pair structure: \"key\": \"value\""
    ]
  }
}
```

**Enhanced Error Categories:**
- 🔧 **Structural Issues** - Missing quotes, colons, brackets with specific fix suggestions
- 🛡️ **Security Warnings** - Detects potential SQL injection patterns in JSON strings  
- 📝 **Encoding Problems** - Character encoding and escape sequence guidance
- 🎯 **Context-Aware Tips** - Line/column position with targeted recommendations

### **🛡️ Enhanced Parameter Binding + Auto-Serialization**

**NEW in v2.6.0:** Built-in SQL injection protection with automatic JSON serialization:

```javascript
// ✅ SECURE: Parameter binding prevents injection
read_query({
  "query": "SELECT * FROM users WHERE name = ? AND age > ?",
  "params": ["John", 25]
})

// ✅ NEW: Direct object/array parameters (auto-serialized)
write_query({
  "query": "INSERT INTO products (metadata, tags) VALUES (?, ?)",
  "params": [
    {"name": "Product", "price": 29.99, "active": true},  // Auto-serialized to JSON
    ["electronics", "featured", "new"]                    // Auto-serialized to JSON
  ]
})

// ✅ SIMPLIFIED: No more manual JSON.stringify()
// Before v2.6.0:
write_query({
  "query": "INSERT INTO table (data) VALUES (?)",
  "params": [JSON.stringify({"key": "value"})]  // Manual serialization required
})

// After v2.6.0:
write_query({
  "query": "INSERT INTO table (data) VALUES (?)",
  "params": [{"key": "value"}]  // Automatic serialization!
})
```

**v2.6.0 Benefits:**
- 🛡️ **SQL Injection Prevention** - Parameter binding treats malicious input as literal data
- 📦 **Auto-Serialization** - Objects and arrays automatically converted to JSON strings  
- 🔄 **Backward Compatible** - Existing queries continue to work unchanged
- ⚡ **Better Performance** - Query plan caching and parameter optimization
- 📝 **Cleaner API** - No manual JSON.stringify() or parameter preparation needed

[⬆️ Back to Table of Contents](#-table-of-contents)

## 📊 **Tool Categories**

The SQLite MCP Server provides **73 specialized tools** across **14 categories**:

> 💡 **Want the complete tool list?** See the [**detailed tool reference**](./docs/sqlite-mcp-server.wiki/Home.md) with descriptions for all 73 tools, 7 resources, and 7 prompts.

| Category | Tool Count | Description |
|----------|------------|-------------|
| **[Core Database](./docs/sqlite-mcp-server.wiki/Core-Database-Tools.md)** | 15 | CRUD operations, schema management, transactions |
| **[JSON Helper Tools](./docs/sqlite-mcp-server.wiki/JSON-Helper-Tools.md)** | 6 | Simplified JSON operations, path validation, merging |
| **[Text Processing](./docs/sqlite-mcp-server.wiki/Advanced-Text-Processing.md)** | 9 | Regex, fuzzy matching, phonetic search, similarity |
| **[Statistical Analysis](./docs/sqlite-mcp-server.wiki/Statistical-Analysis.md)** | 8 | Descriptive stats, percentiles, time series |
| **[Virtual Tables](./docs/sqlite-mcp-server.wiki/Virtual-Tables.md)** | 8 | CSV, R-Tree, series generation |
| **[Semantic Search](./docs/sqlite-mcp-server.wiki/Semantic-Vector-Search.md)** | 8 | Embeddings, similarity, hybrid search |
| **[Geospatial](./docs/sqlite-mcp-server.wiki/SpatiaLite-Geospatial.md)** | 7 | Spatial indexing, geometric operations |
| **[PRAGMA Operations](./docs/sqlite-mcp-server.wiki/PRAGMA-Operations.md)** | 5 | Configuration, optimization, introspection |
| **[Full-Text Search](./docs/sqlite-mcp-server.wiki/Full-Text-Search.md)** | 3 | FTS5 creation, indexing, BM25 ranking |
| **[Vector Optimization](./docs/sqlite-mcp-server.wiki/Vector-Index-Optimization.md)** | 2 | ANN search

…

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Insighttful](https://github.com/Insighttful)
- **Source:** [Insighttful/sqlite-mcp-server-enhanced-filterable](https://github.com/Insighttful/sqlite-mcp-server-enhanced-filterable)
- **License:** MIT
- **Homepage:** https://adamic.tech/articles/2025-09-22-sqlite-mcp-server-v2-6-0

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-insighttful-sqlite-mcp-server-enhanced-filterable
- Seller: https://agentstack.voostack.com/s/insighttful
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.