How do I use mcp-databend?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@mcp-databend show tables in the analytics database" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

mcp-databend

Official

by databendlabs

Overview Schema Related Servers Score Discussions

Python

Hybrid

MCP Server for Databend

PyPI - Version

Connect AI agents to your Databend database safely. Session sandbox keeps production read-only while agents experiment. Works with Codex, Cursor, Claude Code, Gemini CLI, and any MCP-compatible client. Learn more at databend.com/mcp.

Usage

Get your Databend DSN. Format: databend://user:password@host:port/database?warehouse=your_warehouse Get it from Databend Cloud or the docs.
Session sandbox safety: writes only to mcp_sandbox_{session_id}_*; production stays read-only. Use get_session_sandbox_prefix to retrieve the live prefix.
Configure your MCP client.

Standard config works in most tools:

{
  "mcpServers": {
    "databend": {
      "command": "uv",
      "args": ["tool", "run", "--from", "mcp-databend@latest", "mcp-databend"],
      "env": {
        "DATABEND_DSN": "databend://user:password@host:port/database?warehouse=your_warehouse"
      }
    }
  }
}

Use the Codex CLI to add the Databend MCP server:

codex mcp add databend \
  --env DATABEND_DSN='databend://user:password@host:port/database?warehouse=your_warehouse' \
  -- uv tool run --from mcp-databend@latest mcp-databend

Use the Claude Code CLI to add the Databend MCP server:

claude mcp add databend \
  --env DATABEND_DSN='databend://user:password@host:port/database?warehouse=your_warehouse' \
  -- uv tool run --from mcp-databend@latest mcp-databend

Click the button to install:

Then open Cursor Settings -> MCP, select Databend, click Edit, and add DATABEND_DSN to the env section. Cursor keeps the command as a single string:

{
  "mcpServers": {
    "Databend": {
      "command": "uv tool run --from mcp-databend@latest mcp-databend",
      "env": {
        "DATABEND_DSN": "databend://user:password@host:port/database?warehouse=your_warehouse"
      },
      "args": []
    }
  }
}

Or install manually:

Go to Cursor Settings -> MCP -> Add new MCP Server. Paste command uv tool run --from mcp-databend@latest mcp-databend, then click Edit and add DATABEND_DSN in env.

Add the standard config above to your Gemini CLI settings.json.

Related MCP server: safedb-mcp

Safety Guarantees

Scope	Rules
Read access	`SELECT/SHOW/DESCRIBE/EXPLAIN/LIST` on any object.
Write access	Only objects prefixed with `mcp_sandbox_{session_id}_*`.
Sandbox objects	`CATALOG`, `DATABASE`, `TABLE`, `VIEW`, `STAGE`, `FUNCTION`, `USER`, `ROLE`, `TASK`, `PIPE`, `STREAM`, `CONNECTION`, `WAREHOUSE`, `SEQUENCE`, `PROCEDURE`, `DICTIONARY`, `TAG`, `FILE FORMAT`, `NETWORK POLICY`, `PASSWORD POLICY`, `MASKING POLICY`, `ROW ACCESS POLICY`, `NOTIFICATION INTEGRATION`, `WORKLOAD GROUP`, `DYNAMIC TABLE`, `INDEX` (AGGREGATING/INVERTED/NGRAM/VECTOR).
Write rules	`CREATE/CREATE OR REPLACE/DROP/ALTER` on sandbox objects; DML only on sandbox tables (`INSERT/UPDATE/DELETE/TRUNCATE/COPY/MERGE/REPLACE`); `GRANT/REVOKE` only on sandbox objects/principals; `ALTER ... SET

Available Tools

Tool	Description
`execute_sql`	Execute SQL with sandbox validation
`execute_multi_sql`	Execute multiple SQL statements
`show_databases`	List all databases
`show_tables`	List tables in database
`describe_table`	Get table schema
`get_session_sandbox_prefix`	Get current session prefix
`list_session_sandbox_databases`	List sandbox databases
`create_session_sandbox_database`	Create sandbox database
`show_stages` / `list_stage_files` / `create_stage`	Stage management
`show_connections`	List connections

Configuration

Variable	Default	Description
`DATABEND_DSN`	-	Connection string
`LOCAL_MODE`	`false`	Use embedded Databend
`DATABEND_QUERY_TIMEOUT`	`300`	Query timeout (seconds)
`DATABEND_MCP_SAFE_MODE`	`true`	Enable sandbox validation. Set to `false` to allow all SQL permitted by the Databend user.
`DATABEND_MCP_SERVER_TRANSPORT`	`stdio`	Transport: `stdio`, `http`, `sse`
`DATABEND_MCP_BIND_HOST`	`127.0.0.1`	Bind host for HTTP/SSE
`DATABEND_MCP_BIND_PORT`	`8001`	Bind port for HTTP/SSE

Local mode stores data in .databend/.

Development

git clone https://github.com/databendlabs/mcp-databend
cd mcp-databend
uv sync

# Run locally
uv run python -m mcp_databend.main

# Debug
npx @modelcontextprotocol/inspector uv run python -m mcp_databend.main

# Test
uv run pytest

Install Server

license - permissive license

quality

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

8wRelease cycle

6Releases (12mo)

Commit activity

Resources

GitHub Repository

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Tools

View all tools

Related MCP Servers

Igloo MCP
Databases Developer Tools Data Platforms
Evan-Kim2028
A
license
-
quality
C
maintenance
Enables AI assistants to interact with Snowflake databases through SQL queries, table previews, and metadata operations. Features built-in safety checks that block destructive operations and intelligent error handling optimized for AI workflows.
Last updated 2026-03-22
1
MIT
safedb-mcp
Databases Security
narekmalk
A
license
A
quality
A
maintenance
Secure MCP server for safe, read-only DB access by AI agents, with SQL guardrails, table allowlists, PII masking, and audit logs
Last updated 2026-05-27
6
49
7
MIT
DB Insights MCP Server
Databases Developer Tools
six-eyes-dev
F
license
-
quality
C
maintenance
Enables AI assistants to query SQL databases safely with read-only access, allowing schema discovery and SELECT queries while blocking writes and DDL operations.
Last updated 2026-06-17
db-mcp
Databases Developer Tools
paulushcgcj
A
license
B
quality
B
maintenance
Enables LLM agents to query databases with read-only access, while requiring human approval for writes through a token-based confirmation system.
Last updated 2026-06-22
6
GPL 3.0

View all related MCP servers

Related MCP Connectors

ateam-mcp
Build, validate, and deploy multi-agent AI solutions from any AI environment.
BankBridge
Read-only bank access for your AI agent. Connects Claude, ChatGPT, Cursor, Gemini, Codex.
SeedBase Test Data
Generate realistic, FK-consistent synthetic test data for your databases from your AI assistant.

View all MCP Connectors

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/databendlabs/mcp-databend'

If you have feedback or need assistance with the MCP directory API, please join our Discord server