Microsoft SQL Server データベースとの安全なやり取りを可能にするモデルコンテキストプロトコル（MCP）サーバー。このサーバーにより、AI アシスタントは制御されたインターフェースを介してテーブルの一覧表示、データの読み取り、SQL クエリの実行が可能になり、データベースの探索と分析をより安全かつ構造化できます。
利用可能な SQL Server テーブルをリソースとして一覧表示する
表の内容を読む
適切なエラー処理でSQLクエリを実行する
環境変数による安全なデータベースアクセス
包括的なログ記録
システム依存関係の自動インストール
Related MCP server: SQL Server MCP
パッケージは、MCP 経由でインストールされると、必要なシステム依存関係 (FreeTDS など) を自動的にインストールします。
pip install mssql-mcp-server次の環境変数を設定します。
MSSQL_SERVER=localhost
MSSQL_USER=your_username
MSSQL_PASSWORD=your_password
MSSQL_DATABASE=your_databaseこれをclaude_desktop_config.jsonに追加します:
{
"mcpServers": {
"mssql": {
"command": "uv",
"args": [
"--directory",
"path/to/mssql_mcp_server",
"run",
"mssql_mcp_server"
],
"env": {
"MSSQL_SERVER": "localhost",
"MSSQL_USER": "your_username",
"MSSQL_PASSWORD": "your_password",
"MSSQL_DATABASE": "your_database"
}
}
}
}# Install dependencies
pip install -r requirements.txt
# Run the server
python -m mssql_mcp_server# Clone the repository
git clone https://github.com/RichardHan/mssql_mcp_server.git
cd mssql_mcp_server
# Create virtual environment
python -m venv venv
source venv/bin/activate # or `venv\Scripts\activate` on Windows
# Install development dependencies
pip install -r requirements-dev.txt
# Run tests
pytest環境変数や資格情報をコミットしないでください
必要最小限の権限を持つデータベースユーザーを使用する
本番環境での使用にクエリホワイトリストを実装することを検討する
すべてのデータベース操作を監視して記録する
このMCPサーバーは機能するためにデータベースへのアクセスが必要です。セキュリティのため：
最小限の権限を持つ専用の SQL Server ログインを作成する
sa 資格情報や管理者アカウントは使用しないでください
必要な操作のみにデータベースアクセスを制限する
監査目的でログを有効にする
データベースアクセスの定期的なセキュリティレビュー
詳細な手順については、 SQL Server セキュリティ構成ガイドを参照してください。
制限付き SQL Server ログインの作成
適切な権限の設定
データベースアクセスの監視
セキュリティのベストプラクティス
⚠️ 重要: データベース アクセスを構成するときは、常に最小権限の原則に従ってください。
MIT ライセンス - 詳細については LICENSE ファイルを参照してください。
リポジトリをフォークする
機能ブランチを作成します（ git checkout -b feature/amazing-feature ）
変更をコミットします ( git commit -m 'Add some amazing feature' )
ブランチにプッシュする ( git push origin feature/amazing-feature )
プルリクエストを開く
Execute an SQL query on the SQL Server
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | The SQL query to execute |
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, and the description fails to disclose whether queries are read-only or can modify data, potential risks like SQL injection, or result formats. This is a significant gap for a tool that can execute arbitrary SQL.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise at one sentence, but it lacks structure and does not front-load key information beyond the basic action. It could include more detail without becoming verbose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of output schema and annotations, the description is incomplete. It does not explain what the tool returns (e.g., result sets, affected rows), error behavior, or any constraints. Critical context for safe usage is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has high coverage (100%) and describes the 'query' parameter sufficiently. The description adds no extra meaning beyond what the schema already provides, so a baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'execute' and the resource 'SQL query on the SQL Server', making the purpose straightforward. However, it restates the tool name without adding depth beyond stating it runs queries.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool or when to avoid it. No mention of prerequisites, security considerations, or alternatives. The description provides no contextual usage direction.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
v1.0.0execute_sqlScored across 1 tool
Only one tool exists, so there is no risk of confusion or overlap.
With a single tool, naming is trivially consistent to itself.
A single SQL execution tool is insufficient for the typical scope of SQL Server operations, which usually requires multiple tools for schema exploration, query execution, and data manipulation.
The tool set is severely incomplete; it lacks fundamental operations such as listing tables, describing schemas, or managing databases, limiting useful agent workflows.
Draxlr's remote MCP server connects AI assistants to your SQL databases and dashboards. Explore schemas, run read-only queries, manage saved queries and dashboards, and export results, all with row-level security so each user sees only their own data.
Text-to-SQL MCP server: read-only queries on PostgreSQL, MySQL and SQL Server with your real schema
The BigQuery remote MCP server is a fully managed service that uses the Model Context Protocol to connect AI applications and LLMs to BigQuery data sources. It provides secure, standardized tools for AI agents to list datasets and tables, retrieve schemas, generate and execute SQL queries through natural language, and analyze data—enabling direct access to enterprise analytics data without requiring manual SQL coding.
The HubSpot MCP Server acts as a bridge that enables AI assistants and Large Language Models to securely interact with HubSpot CRM data through natural conversation, without requiring users to understand complex API structures. It provides read-only access to standard CRM objects (contacts, companies, deals, tickets, products, invoices, and more) and their associations, secured via OAuth 2.0, allowing AI agents to perform tasks like summarizing deals, fetching company updates, and looking up record changes.
