Ariful Islam
README.md
# database-mcp
[](https://github.com/arifulislamat/database-mcp/actions/workflows/ci.yml)
[](LICENSE)
[](https://www.npmjs.com/package/@database-mcp/core)
[](https://pypi.org/project/database-mcp-core/)
[](https://crates.io/crates/database-mcp-rs-core)
[](https://nodejs.org)
MCP servers that give AI clients safe, structured access to SQL databases.
One installable package per database engine, in TypeScript (npm), Python
(PyPI), and Rust (crates.io). Every package exposes the same minimal
two-tool surface, `execute_sql` and `search_objects`, with guardrails on by
default: read-only mode, row caps, and statement timeouts.
## Packages
| Engine | TypeScript (npm) | Python (PyPI) | Rust (crates.io) |
| -------- | ---------------- | ------------- | ---------------- |
| SQLite | [`@database-mcp/sqlite`](https://www.npmjs.com/package/@database-mcp/sqlite) [](https://www.npmjs.com/package/@database-mcp/sqlite) | [`database-mcp-sqlite`](https://pypi.org/project/database-mcp-sqlite/) [](https://pypi.org/project/database-mcp-sqlite/) | [`database-mcp-rs-sqlite`](https://crates.io/crates/database-mcp-rs-sqlite) [](https://crates.io/crates/database-mcp-rs-sqlite) |
| libSQL | [`@database-mcp/libsql`](https://www.npmjs.com/package/@database-mcp/libsql) [](https://www.npmjs.com/package/@database-mcp/libsql) | [`database-mcp-libsql`](https://pypi.org/project/database-mcp-libsql/) [](https://pypi.org/project/database-mcp-libsql/) | [`database-mcp-rs-libsql`](https://crates.io/crates/database-mcp-rs-libsql) [](https://crates.io/crates/database-mcp-rs-libsql) |
| MySQL | [`@database-mcp/mysql`](https://www.npmjs.com/package/@database-mcp/mysql) [](https://www.npmjs.com/package/@database-mcp/mysql) | [`database-mcp-mysql`](https://pypi.org/project/database-mcp-mysql/) [](https://pypi.org/project/database-mcp-mysql/) | [`database-mcp-rs-mysql`](https://crates.io/crates/database-mcp-rs-mysql) [](https://crates.io/crates/database-mcp-rs-mysql) |
| MariaDB | [`@database-mcp/mariadb`](https://www.npmjs.com/package/@database-mcp/mariadb) [](https://www.npmjs.com/package/@database-mcp/mariadb) | [`database-mcp-mariadb`](https://pypi.org/project/database-mcp-mariadb/) [](https://pypi.org/project/database-mcp-mariadb/) | [`database-mcp-rs-mariadb`](https://crates.io/crates/database-mcp-rs-mariadb) [](https://crates.io/crates/database-mcp-rs-mariadb) |
| Postgres | [`@database-mcp/postgres`](https://www.npmjs.com/package/@database-mcp/postgres) [](https://www.npmjs.com/package/@database-mcp/postgres) | [`database-mcp-postgres`](https://pypi.org/project/database-mcp-postgres/) [](https://pypi.org/project/database-mcp-postgres/) | [`database-mcp-rs-postgres`](https://crates.io/crates/database-mcp-rs-postgres) [](https://crates.io/crates/database-mcp-rs-postgres) |
All three lines are published and pass the same language-agnostic
conformance suite against real databases in CI, so behavior is identical
regardless of language. Every engine is also listed on the
[MCP Registry](https://registry.modelcontextprotocol.io) with all three
install options: npm, PyPI, and cargo.
Rust crates are named `database-mcp-rs-<engine>` because the plain names are
taken on crates.io; the command each one installs is still
`database-mcp-<engine>`. Go is planned.
## Design principles
- **Two tools, no more.** A tiny tool surface keeps the model's context window
clean. `search_objects` progressively discloses schema: call it with no
arguments to list tables, with a table name to get columns, indexes, and
foreign keys.
- **Safe by default.** Read-only mode is enforced in two layers: a
conservative SQL guard, plus a session-level read-only setting in the
database itself. Rows are capped (default 1000) and statements time out
(default 30s).
- **Configured at launch, never via chat.** Connection details come from
flags, a YAML config file, or environment variables. Credentials are never
accepted through a tool call.
- **Secrets never appear in logs.** Passwords live in non-printable secret
types, DSNs are sanitized before logging, and a redaction filter guards the
log boundary.
## Quick start
Pick your engine's package; each README has the full config surface. SQLite
via npm:
```json
{
"mcpServers": {
"sqlite": {
"command": "npx",
"args": ["-y", "@database-mcp/sqlite", "--dsn", "/absolute/path/to/database.db"]
}
}
}
```
Or via PyPI: use `"command": "uvx"` and
`"args": ["database-mcp-sqlite", "--dsn", "/absolute/path/to/database.db"]`.
Or as a native binary, with no Node or Python runtime: run
`cargo install database-mcp-rs-sqlite`, then use
`"command": "database-mcp-sqlite"` with the same `args` minus the package
name.
Flags, environment variables, and YAML config are identical across all
three lines.
Networked engines take credentials from the environment (`MYSQL_*`,
`MARIADB_*`, `POSTGRES_*`/`DATABASE_URL`, `LIBSQL_URL`/`LIBSQL_AUTH_TOKEN`),
`*_FILE` mounted secrets, or a YAML file via `--config`. Never from a chat
prompt.
## Contributing
See [CONTRIBUTING.md](CONTRIBUTING.md). The short version: the conformance
suite is the definition of done. A change is mergeable only when
`conformance/run.mjs` passes against every affected server.
## License
[MIT](LICENSE)
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessResponsive