# Db Mcp Server

> A Rust-based MCP server that enables AI assistants to interact with SQL databases (SQLite, PostgreSQL, MySQL) safely and efficiently.

- **Type:** MCP server
- **Install:** `agentstack add mcp-vika2603-db-mcp-server`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [vika2603](https://agentstack.voostack.com/s/vika2603)
- **Installs:** 0
- **Category:** [Databases](https://agentstack.voostack.com/c/databases)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [vika2603](https://github.com/vika2603)
- **Source:** https://github.com/vika2603/db-mcp-server

## Install

```sh
agentstack add mcp-vika2603-db-mcp-server
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# DB MCP Server

A Rust-based [MCP](https://modelcontextprotocol.io/) server that enables AI assistants to interact with SQL databases (SQLite, PostgreSQL, MySQL) safely and efficiently.

## Features

- **Multi-database support**: SQLite, PostgreSQL, MySQL
- **Read-only by default**: Write operations require explicit `?writable=true` flag
- **Transaction support**: Full ACID transaction management across multiple MCP calls
- **Two transport modes**:
  - stdio for CLI integration (Claude Desktop, etc.)
  - HTTP with Server-Sent Events for web clients
- **HTTP authentication**: Bearer token authentication for HTTP transport (MCP 2025-03-26 spec)
- **Parameterized queries**: Built-in SQL injection protection
- **Server-level connections**: Connect to database server without selecting a database
- **Dangerous operation guard**: AST-based protection against DROP, TRUNCATE, and unqualified DELETE/UPDATE
- **Lazy per-database pools**: Efficient connection pooling for server-level connections
- **Dynamic connection management**: Add, update, or remove database connections at runtime
- **Output formatting**: JSON, ASCII table, or Markdown table formats

## Installation

```bash
cargo install --path .
```

Or build from source:

```bash
cargo build --release
```

## Usage

### Single Database

```bash
# SQLite (read-only)
db-mcp-server --database sqlite:data.db

# SQLite (writable)
db-mcp-server --database sqlite:data.db?writable=true

# PostgreSQL (specific database)
db-mcp-server --database postgres://user:pass@localhost/mydb

# PostgreSQL (server-level, no default database)
db-mcp-server --database postgres://user:pass@localhost:5432?writable=true

# MySQL with write access
db-mcp-server --database mysql://user:pass@localhost/mydb?writable=true
```

### Multiple Databases

Configure multiple databases using one of these methods:

**Method 1: Command Line (repeat `-d` flag)**

```bash
# Use auto-generated IDs (derived from database name)
db-mcp-server -d sqlite:one.db -d postgres://localhost/two

# Use custom IDs (recommended)
db-mcp-server -d app=sqlite:app.db?writable=true -d analytics=postgres://user:pass@localhost/analytics

# Mix multiple databases
db-mcp-server \
  -d main=sqlite:main.db?writable=true \
  -d reports=mysql://user:pass@localhost/reports \
  -d logs=postgres://user:pass@localhost/logs?writable=true
```

**Method 2: Environment Variable (comma-separated)**

```bash
# Single database
export MCP_DATABASE="sqlite:data.db?writable=true"
db-mcp-server

# Multiple databases
export MCP_DATABASE="\
app=sqlite:app.db?writable=true,\
analytics=postgres://user:pass@localhost/analytics,\
logs=mysql://user:pass@localhost/logs?writable=true"
db-mcp-server
```

**Method 3: Claude Desktop Configuration**

See [Claude Desktop Configuration](#claude-desktop-configuration) section below.

### Connection String Format

```
# SQLite
sqlite:path/to/db.db
sqlite:path/to/db.db?writable=true

# PostgreSQL
postgres://user:pass@host:port/database
postgres://user:pass@host:5432                    # server-level
postgres://user:pass@host/database?writable=true

# MySQL
mysql://user:pass@host:port/database
mysql://user:pass@host:3306                       # server-level
mysql://user:pass@host/database?writable=true

# Named connections (recommended for multiple databases)
id=
app=sqlite:app.db?writable=true
analytics=postgres://user:pass@localhost/analytics
```

### HTTP Mode

```bash
# HTTP mode (with SSE)
db-mcp-server --transport http --database sqlite:data.db

# HTTP mode with custom host/port
db-mcp-server --transport http --database sqlite:data.db --http-host 0.0.0.0 --http-port 3000
```

### Authentication (HTTP Mode)

HTTP transport supports Bearer token authentication. STDIO transport does not require authentication as it relies on OS-level process isolation.

**Enable authentication:**

```bash
# Single token via CLI
db-mcp-server --transport http --database sqlite:data.db --auth-token my-secret-token

# Multiple tokens via CLI
db-mcp-server --transport http --database sqlite:data.db \
  --auth-token token1 --auth-token token2

# Via environment variable (comma-separated)
export MCP_AUTH_TOKENS="token1,token2,token3"
db-mcp-server --transport http --database sqlite:data.db
```

**Client usage:**

Include the token in the `Authorization` header:

```
Authorization: Bearer my-secret-token
```

## MCP Tools

### Read-Only Tools

| Tool | Description |
|------|-------------|
| `list_connections` | List available database connections with type and read-only status |
| `query` | Execute SELECT queries with optional output formatting (json/table/markdown) |
| `list_tables` | List tables and views in a database |
| `describe_table` | Get detailed table schema (columns, primary keys, foreign keys, indexes) |
| `list_databases` | List all databases on server (MySQL/PostgreSQL only) |
| `explain` | Show query execution plan without executing |
| `list_transactions` | List all active transactions with duration |

### Write Tools (require `?writable=true` in connection string)

| Tool | Description |
|------|-------------|
| `execute` | Execute INSERT/UPDATE/DELETE/DDL statements |
| `begin_transaction` | Start a new transaction (returns transaction_id) |
| `commit` | Commit a transaction by transaction_id |
| `rollback` | Rollback a transaction by transaction_id |

### Connection Management Tools

| Tool | Description |
|------|-------------|
| `add_connection` | Add a new database connection at runtime |
| `update_connection` | Update connection URL or writable flag (fails if active transactions) |
| `delete_connection` | Remove a connection (fails if active transactions) |

### Key Features

- **Parameterized queries**: Use `?` or `$1, $2, ...` placeholders with `params` array
- **Output formatting**: `query` and `explain` support `format` parameter (json, table, markdown)
- **Transaction workflow**: `begin_transaction` → `query`/`execute` with `transaction_id` → `commit`/`rollback`
- **Dangerous operation protection**: DROP, TRUNCATE, DELETE/UPDATE without WHERE require `skip_sql_check: true`
- **Server-level operations**: Use `database` parameter to target specific database for server-level connections

## AI CLI Configuration Examples

### Claude Code

**Using CLI command:**

```bash
# Single database
claude mcp add --transport stdio database -- db-mcp-server --database "sqlite:app.db?writable=true"

# Multiple databases
claude mcp add --transport stdio database -- db-mcp-server \
  -d "app=sqlite:app.db?writable=true" \
  -d "analytics=postgres://user:pass@localhost/analytics"
```

**Or edit `~/.claude.json` or `.mcp.json` manually:**

```json
{
  "mcpServers": {
    "database": {
      "command": "db-mcp-server",
      "args": [
        "-d", "app=sqlite:app.db?writable=true",
        "-d", "analytics=postgres://user:pass@localhost/analytics"
      ]
    }
  }
}
```

### Codex

**Using CLI command:**

```bash
# Single database
codex mcp add database -- db-mcp-server --database "sqlite:app.db?writable=true"

# Multiple databases
codex mcp add database -- db-mcp-server \
  -d "app=sqlite:app.db?writable=true" \
  -d "analytics=postgres://user:pass@localhost/analytics"
```

**Or edit `~/.codex/config.toml` manually:**

```toml
[mcp_servers.database]
command = "db-mcp-server"
args = [
  "-d", "app=sqlite:app.db?writable=true",
  "-d", "analytics=postgres://user:pass@localhost/analytics"
]
```

### Claude Desktop

Add to your `claude_desktop_config.json`:

```json
{
  "mcpServers": {
    "database": {
      "command": "db-mcp-server",
      "args": [
        "-d", "app=sqlite:app.db?writable=true",
        "-d", "analytics=postgres://user:pass@localhost/analytics"
      ]
    }
  }
}
```

Or using environment variables:

```json
{
  "mcpServers": {
    "database": {
      "command": "db-mcp-server",
      "env": {
        "MCP_DATABASE": "app=sqlite:app.db?writable=true,analytics=postgres://user:pass@localhost/analytics"
      }
    }
  }
}
```

## Environment Variables

| Variable | Description | Default |
|----------|-------------|---------|
| `MCP_DATABASE` | Database connection string | - |
| `MCP_TRANSPORT` | Transport mode (stdio/http) | stdio |
| `MCP_HTTP_HOST` | HTTP bind host | 127.0.0.1 |
| `MCP_HTTP_PORT` | HTTP bind port | 8080 |
| `MCP_AUTH_TOKENS` | Comma-separated auth tokens (HTTP only) | - |
| `MCP_LOG_LEVEL` | Log level (trace/debug/info/warn/error) | info |

## Development

```bash
# Build from source
cargo build --release

# Run tests
cargo test
```

## Contributing

Contributions are welcome! Please feel free to submit a Pull Request.

## License

MIT

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [vika2603](https://github.com/vika2603)
- **Source:** [vika2603/db-mcp-server](https://github.com/vika2603/db-mcp-server)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-vika2603-db-mcp-server
- Seller: https://agentstack.voostack.com/s/vika2603
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.