OraLink MCP

Oracle Autonomous Database MCP Server — an OAuth 2.0-compatible, hosted connector for Claude.ai and any MCP client.

What is this?

OraLink MCP is a hosted, OAuth 2.0-compatible Model Context Protocol server that bridges any MCP client (Claude.ai, Claude Desktop, Cursor, VS Code Copilot, Cline, etc.) to Oracle Autonomous Database on OCI — with no SQLcl, no Oracle Instant Client, and no local tooling required.

Unlike Oracle's existing SQLcl MCP server (STDIO/local-only), OraLink MCP:

• Runs as an HTTPS endpoint reachable from the cloud

• Implements OAuth 2.0 authorization code flow — eligible for the Claude.ai connector marketplace

• Works from any device including mobile

• Connects to any Oracle ADB instance across regions

• Uses node-oracledb Thin Mode — no Oracle Client libraries needed

Related MCP server: Universal Database MCP Server

Architecture

Claude.ai / Cursor / Any MCP Client
        │  (MCP over HTTPS + Bearer token)
        ▼
┌──────────────────────────┐
│       OraLink MCP        │
│  ┌──────────────────┐   │
│  │   OAuth 2.0      │   │
│  │   /oauth/*       │   │
│  └────────┬─────────┘   │
│  ┌─────────▼─────────┐  │
│  │   MCP Tools       │  │
│  │ schema / query /  │  │
│  │ metadata / DDL    │  │
│  └────────┬──────────┘  │
│  ┌─────────▼─────────┐  │
│  │  node-oracledb    │  │
│  │  (Thin Mode v6)   │  │
│  └────────┬──────────┘  │
└───────────┼──────────────┘
            │  (TLS / mTLS)
            ▼
  Oracle Autonomous Database
        (OCI Cloud)

MCP Tools

Quick Start

Prerequisites

• Node.js 18+

• An Oracle Autonomous Database instance (19c or 26ai)

• OCI wallet .zip (for mTLS) or TLS connection string

Install & run

git clone https://github.com/hvrcharon1/oralink-mcp.git
cd oralink-mcp
npm install
cp .env.example .env
# Edit .env — see MANUAL_STEPS.md for secret generation
npm run dev

Connect your MCP client

{
  "mcpServers": {
    "oralink": {
      "type": "streamableHttp",
      "url": "http://localhost:3000/mcp",
      "headers": {
        "Authorization": "Bearer <your_access_token>"
      }
    }
  }
}

OAuth 2.0 Flow (for Claude.ai marketplace)

1. User clicks "Connect Oracle ADB" in Claude.ai
2. Redirected → GET /oauth/authorize
3. User enters ADB connection details (connect string, username, password, wallet)
4. POST /oauth/authorize → stores encrypted credentials, issues auth code
5. POST /oauth/token → returns access_token (JWT) + refresh_token
6. Claude.ai stores token, sends as Bearer on every MCP request
7. OraLink validates JWT → routes to per-user Oracle connection pool

Discovery document

GET /.well-known/oauth-authorization-server returns the RFC 8414 metadata document required by Claude.ai.

Deployment

See MANUAL_STEPS.md for actions requiring human input.

# Docker
docker compose up -d

Security

• Credentials encrypted at rest with AES-256-GCM

• Per-user isolated connection pools

• Only SELECT allowed by default; DML requires explicit opt-in per connection

• All queries logged with user context

• Wallet content held in memory only — never written to disk

• SQL injection prevention via Oracle parameterized query API

License

Datacules LLC Open Source License © 2026 Datacules LLC