"Retrieving Markdown Files from a Database" matching MCP servers:

Enables read-only listing and reading of files in an Azure Files SMB share, enforcing each user's NTFS permissions per request.

MCP server enabling Claude Code to capture screenshots of Windows applications through WSL2, allowing AI to diagnose UI errors and verify layouts.

Enables AI agents to call tools through a security gateway that intercepts requests, enforces deterministic policy and risk checks, blocks or escalates high-risk actions for human approval, and keeps tool credentials and audit logs protected.

Enables LLM agents to access Global Database's company intelligence, including company profiles, financials, ownership, people search, prospecting, and KYB/compliance lookups against official registries.

A small MCP server that lets an LLM query PostgreSQL, MySQL, MariaDB, SQL Server, or SQLite databases safely — read-only, role-restricted, and with sensitive data blacked out.

Read-only security audit for Supabase. Surfaces RLS gaps, permissive policies, exposed functions and grants, and returns scored findings with fix SQL that is never executed.

Enables LLM clients to safely inspect database schemas and run only approved read-only queries and stored procedures, with auditing.

Enables AI clients to safely query PostgreSQL or SQLite databases read-only through AST-validated guardrails, schema introspection, and statistical table profiling. It returns results as Markdown tables, JSON audit reports, and database health checks.

Enables AI agents to request an independent second opinion from a different frontier model, with PII scrubbing before transit, live web search grounding, caching, and multi-provider failover.

This MCP server provides secure access to databases for AI agents, enforcing authentication, authorization, human approval, logging, and notifications to prevent dangerous actions.

Enables an AI host to list, read, and move files within a single designated folder, where each action is held until a human approves it through a consent card and the decision is recorded on a tamper-evident chain. Actions proceed only with a written receipt, and any missing answer or error counts as a refusal.

Read selected local folders from ChatGPT on macOS, with per-folder read-only or read-write access and hash-checked, recoverable edits. Requires local installation and a private ChatGPT app. The Glama container is a synthetic evaluation demo; it does not connect to files on your Mac.

Enables database querying and modification through an MCP server where each action is gated by human-granted scopes, per-call confirmations for destructive operations, and revocable access.

Enables AI agents to query PostgreSQL databases securely with read-only defaults, PII masking, rate limiting, and human-approved, expiring mutation tokens.

Enables AI assistants and signed-in support staff to search and read customer tickets, add internal notes, issue refunds under per-scope and per-customer limits, and export ticket data over a remote, OAuth-protected Streamable HTTP endpoint. Tool lists, resources, prompts, and write operations are gated by bearer tokens and audience-bound scopes so that refund and export actions stay bounded.

Enables AES-256-CBC encryption and decryption of messages with passphrase-derived keys, exposing tools, resources, and prompts for MCP clients like VS Code Copilot Chat.

Provides agent certification and trust verification tools for AI agents, enabling certification checks, trust score calculations, audit ticket issuance, and emergency kill switch activation through the A-SOC trust network.

DataNexa is a local, read-only database MCP gateway for AI agents. It routes SQLite, MySQL, PostgreSQL, and any JDBC-compatible database through a single localhost endpoint, enforces read-only access via SQL AST validation with row, time, and connection limits, and keeps a local audit trail of every query.

Enables AI agents to interact with a user management REST API, providing list, get, and create operations while preventing destructive actions like update/delete through an explicit access registry.

Enables AI agents to manage VPN infrastructure through provisioning, lifecycle control, traffic routing, and health monitoring.

Enables MCP clients to triage SOC alerts while enforcing a trust firewall across retrieval, memory, and privileged actions. It exposes tools for alerts, logs, memory, and alert actions, with defenses that refuse risky operations in the presence of attacker-controllable content.

Enables executing arbitrary Joern/CPGQL queries against a loaded Code Property Graph, loading source code in multiple languages (PHP, Java, JavaScript, Python, C/C++) to build new CPGs, and inspecting loaded projects and the active workspace. It communicates with a running Joern server over its synchronous HTTP query endpoint, so no state polling is required.

Enables chatting with PostgreSQL databases through secure GitHub OAuth authentication, supporting read operations for all users and write operations for privileged users. Deployable as a production-ready remote MCP server on Cloudflare Workers with automatic schema discovery and SQL injection protection.

SchemaBrain is an MCP server that sits between AI agents (Claude, Cursor, Windsurf) and your SQL database as a read-only trust + intelligence layer. The agent never writes SQL — 12 tools compile it from definitions you control, PII and secret categories are refused before the query runs, and every call lands in a tamper-evident (SHA-256-chained) audit log. Postgres today.

Enables AI agents to securely use real secrets (API keys, database passwords) by requiring human approval for each release, ensuring secrets never enter the model's context.

An MCP server that enables AI agents to securely add secrets to .env files by prompting the user to input the value through a local masked dialog, ensuring the agent never sees the secret.

A secure MCP server for querying a subscription business database with AST-based SQL guarding, PII masking, audited two-step write actions, and a seeded demo dataset.

An MCP server that exposes tools for issuing scoped agent credentials, delegating narrower child credentials, handling approvals, revoking task trees, and retrieving audit trails and evidence packets.

A secure PostgreSQL Model Context Protocol server that provides read-only database access through tools like schema listing, object inspection, query execution, and EXPLAIN analysis, with database-enforced access control via read-only transactions and a minimal role rather than SQL text parsing.

Connect your database to your AI agent, read-only, without sharing your password. Maplith Bridge serves a folder of data files over MCP behind a token you create, and fills it from PostgreSQL under a role that can only read.