Skip to main content
Glama
gbfeliped

mcp-sqlserver-readonly

by gbfeliped
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Remote

mcp-sqlserver

Read-only SQL Server MCP server for Claude Desktop (and any MCP-compatible client).

Tools exposed

Tool

Description

query

Run a SELECT query

list_tables

List all user tables with row-count estimate and size

describe_table

Show columns, types, nullability, PK for a table

list_schemas

List user-defined schemas

Related MCP server: sql-explorer-mcp

Security protections

Attack

Example

Status

Direct writes

DROP, DELETE, UPDATE, INSERT

✅ Blocked

Multiple statements

SELECT 1; DROP TABLE t

✅ Blocked

System procedures

xp_cmdshell, EXEC sp_help

✅ Blocked

DoS

WAITFOR DELAY '0:0:5'

✅ Blocked

Whitespace bypass

tabs and newlines between keywords

✅ Blocked

Comment bypass

/* */ and -- before keywords

✅ Blocked

Valid queries

SELECT, SELECT TOP, COUNT, WHERE

✅ Allowed

Environment variables

Variable

Required

Default

Description

MSSQL_SERVER

✅

—

Server hostname or IP

MSSQL_DATABASE

✅

—

Database name

MSSQL_USER

✅

—

SQL login username

MSSQL_PASSWORD

✅

—

SQL login password

MSSQL_PORT

1433

TCP port

MSSQL_ENCRYPT

true

Enable TLS (true/false)

MSSQL_TRUST_SERVER_CERTIFICATE

false

Trust self-signed certs

Build

npm install
npm run build

Claude Desktop configuration

Add to %APPDATA%\Claude\claude_desktop_config.json:

{
  "mcpServers": {
    "sqlserver": {
      "command": "node",
      "args": ["../path-to/mcp-sqlserver/dist/index.js"],
      "env": {
        "MSSQL_SERVER": "localhost",
        "MSSQL_DATABASE": "MyDatabase",
        "MSSQL_USER": "sa",
        "MSSQL_PASSWORD": "YourPassword",
        "MSSQL_TRUST_SERVER_CERTIFICATE": "true"
      }
    }
  }
}

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityInactive
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • sql-explorer-mcp

    govern-agents
    A
    license
    Not graded
    quality
    F
    maintenance
    Read-only MCP server for SQL databases (SQL Server, Postgres, SQLite) with multi-server support and three-layer safety using AST validation and linting.
    MIT

  • sql-explorer-mcp

    timsuv
    F
    license
    A
    quality
    C
    maintenance
    A read-only MCP server for browsing and querying SQL Server databases, providing tools to list schemas, tables, describe columns, and execute safe SELECT queries with validated parameters.
    15
    -

  • @dudqls816/database-mcp

    gong-yeongbin
    A
    license
    A
    quality
    B
    maintenance
    MCP server for Microsoft SQL Server that lets LLMs explore schema and execute read-only SELECT queries, with optional stored procedure execution when explicitly enabled.
    3
    42 npm
    MIT

  • mssql-mcp

    MCopin
    A
    license
    Not graded
    quality
    C
    maintenance
    Local MCP server for running ad hoc T-SQL queries against SQL Server databases, read-only by default with security safeguards.
    591 npm
    MIT