SQL to MCP

Connect PostgreSQL, MySQL, SQL Server, Oracle or MongoDB to Claude, ChatGPT and Copilot. Powered by AnythingMCP.

SQL to MCP lets Claude, ChatGPT, Copilot and Cursor query PostgreSQL, MySQL, MariaDB, SQL Server, Oracle and MongoDB through MCP, without code. AnythingMCP turns each database into schema, example and query tools. This repository runs the chain locally against two demo databases, reached as a read-only user.

Last verified: 2026-09-26 against the bundled PostgreSQL 17 and MySQL 8.4 demo databases (docker compose up + scripts/smoke.mjs: tools/list, SELECTs on both, an INSERT rejected by the read-only guard).
Adapter synced: 2026-09-26

Maintained by helpcode.ai, the team that builds and maintains AnythingMCP.

Try it in five minutes

Needs Docker 24+, openssl and Node 18+.

git clone https://github.com/HelpCode-ai/sql-to-mcp.git
cd sql-to-mcp
./scripts/install.sh
npm install && node scripts/smoke.mjs

install.sh starts AnythingMCP with a PostgreSQL and a MySQL database seeded with a small wholesale business (examples/sql-demo: customers, products, orders, order lines), installs both database connectors as the read-only user amcp_reader, and creates an MCP API key. smoke.mjs lists the tools and asks PostgreSQL for the open orders.

Related MCP server: Database Assistant MCP Server

Supported databases

MariaDB uses the MySQL connector; SQLite is available as a custom database connector in the UI. *_query runs a SELECT the model writes; the other tools read the schema or return fixed example queries.

Connect your own database

1. Create a user that can only read. PostgreSQL:

   CREATE ROLE amcp_reader LOGIN PASSWORD 'change-me';
   GRANT CONNECT ON DATABASE sales TO amcp_reader;
   GRANT USAGE ON SCHEMA public TO amcp_reader;
   GRANT SELECT ON ALL TABLES IN SCHEMA public TO amcp_reader;
   ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT ON TABLES TO amcp_reader;

2. Fill the variables for your database in .env (see .env.example) and re-run ./scripts/install.sh, or install the connector from the store in the UI.

3. A database on your internal network needs its hostname in SSRF_ALLOWED_HOSTS (the docker-compose.yml here does that for the demo hosts).

Read-only by default, twice. AnythingMCP only runs a single SELECT (or WITH … SELECT) and blocks writes and stacked statements; the demo also connects as amcp_reader, which the database itself limits to SELECT. Keep both: the engine guard can be switched off per connector, grants cannot be talked around.

Connect Claude, ChatGPT, Copilot or Cursor

• Claude (claude.ai, Desktop, mobile): Customize → Connectors → Add custom connector, paste your MCP server URL and sign in. Claude connects from Anthropic's cloud, so the URL must be public HTTPS: your AnythingMCP Cloud URL, or your own instance behind TLS.

• Claude Code:

  claude mcp add --transport http sql-to-mcp http://localhost:4000/mcp --header "X-API-Key: <MCP_API_KEY>"

• Cursor (.cursor/mcp.json) and VS Code / GitHub Copilot (.vscode/mcp.json, key servers instead of mcpServers, plus "type": "http"):

  { "mcpServers": { "sql-to-mcp": { "url": "http://localhost:4000/mcp", "headers": { "X-API-Key": "<MCP_API_KEY>" } } } }

• ChatGPT: add the public HTTPS URL as a connector (app) in ChatGPT's settings. A localhost URL does not work there.

Example prompts

• Which orders are still open, for which customers, and since when?

• Which products are at or below their reorder level?

• What is the total value of open orders per customer?

• Which customer has the highest order value this month, and what is their credit limit?

• Compare the PostgreSQL and MySQL copies: do both have the same open orders?

• Which products appear in open orders but have less stock than ordered?

More in examples/prompts.md.

Security

• Writes are blocked by default: the query tools accept a single SELECT and nothing else, unless you switch a connector to read-write.

• The database user is the second line. Grant SELECT only, on the schemas the AI needs.

• Fixed queries for sensitive tables: define the SQL yourself and let the model supply parameters.

• Response mapping drops columns such as IBANs or salaries before a result reaches the model.

• Audit log: every query with its SQL, result, duration and status, in your own database.

• Roles decide which tools each MCP server exposes.

FAQ

Can Claude query my SQL database?

Yes, through MCP. AnythingMCP connects to PostgreSQL, MySQL/MariaDB, SQL Server, Oracle or MongoDB and gives the model tools to list tables, describe columns and run a query. Claude, ChatGPT, Copilot and Cursor call those tools like any other.

Is it read-only?

Yes, by default. The query tools only run a single SELECT (or WITH … SELECT); AnythingMCP blocks INSERT, UPDATE, DELETE, DDL and stacked statements before they reach the database. Connect with a SELECT-only user as well, as the demo does with amcp_reader, so the database enforces the same thing on its own.

Does my data leave the network?

The database connection stays between AnythingMCP and your database. Query results go to the AI model you use; response mapping drops columns before they do, and every query is logged in your own audit log.

Which databases are supported?

PostgreSQL, MySQL, MariaDB, Microsoft SQL Server, Oracle and MongoDB have ready connectors with five tools each; SQLite works as a custom database connector.

Is this text-to-SQL?

It is the model doing text-to-SQL with the schema in front of it: it reads the table and column names first, then writes the query. The quality depends on how readable your table and column names are.

Can I connect a database on my internal network?

Yes, with a self-hosted AnythingMCP that can reach it. Add the hostname to SSRF_ALLOWED_HOSTS.

Troubleshooting

Related

• soap-to-mcp: Turn any SOAP/WSDL web service into MCP tools for Claude & ChatGPT. Legacy SOAP APIs as AI tools, no code, self-hosted.

• AnythingMCP: the open-source MCP server and gateway this repository is built on.

License

AGPL-3.0-only. The adapter definition in adapter/ comes from AnythingMCP (AGPL-3.0).