"Techniques for Detecting XSS and SQL Injection Vulnerabilities" matching MCP servers:

An MCP server for identifying SQL injection vulnerabilities in web applications using various techniques like error-based, time-based, and union-based scanning. It supports bulk URL processing, WAF bypass strategies, and authenticated testing across multiple database systems.

Enables natural-language querying and analysis of an e-commerce SQLite database via MCP, with read-only SQL execution, table inspection, and AI-generated answers.

Runs SQL statements in memory against real PostgreSQL 18 and SQLite 3.49 engines after loading your schema and sample rows, returning each statement's own verdict: errors with line, column, and hints, constraint violations, or the resulting rows. It also compares both dialects to expose portability differences, all with no database server, network, or API key.

Enables AI assistants to safely explore and query MySQL, MariaDB, PostgreSQL, SQLite and StarRocks databases through read-only tools for schema listing, table description, schema search, row sampling, query execution, and plan explanation. Enforces least-privilege accounts, engine-level read-only sessions with timeouts, parsed SQL guardrails, and column masking so runaway or unsafe queries are refused.

A read-only MCP server for SQL Server and PostgreSQL that enables exploring and querying databases (schemas, tables, views, procedures, indexes, foreign keys) and running arbitrary SELECT queries.

An MCP server that connects LLMs to SQL databases for development assistance, enabling query execution, schema exploration, and data manipulation while providing safety controls against destructive operations.

WAF for AI agents — block prompt injection before it reaches the LLM.

A Model Context Protocol server that provides AI assistants with comprehensive access to SQL databases, enabling schema inspection, query execution, and database operations with enterprise-grade security.

Enables interaction with Microsoft SQL Server databases using both SQL Server and Windows Authentication. It supports flexible connection configurations, including read-only modes and encrypted communication for secure data management.

An extensible read-only MCP server for SQL databases, enabling schema exploration and safe SELECT queries via tools like list_schemas, list_tables, describe_table, and execute_query.

MCP server for querying H3Yun SQL data, enabling AI to execute read-only SQL queries and troubleshoot H3Yun business issues.

Enables read-only interaction with SQL databases through MCP, providing database metadata exploration, sample data retrieval, and secure query execution. Supports MySQL with multiple transport options and built-in security features including SQL injection protection and data sanitization.

Analyzes SQL queries for performance issues, provides optimization suggestions with automated rewriting, and recommends indexes across multiple database dialects (PostgreSQL, MySQL, Oracle, SQL Server).

A token-efficient MCP server for MySQL, PostgreSQL, and SQLite, providing tools to query databases, execute SQL, and analyze query performance.

Enables read-only querying and diagnostics for dual SQL Server 2019 instances with rate limiting and security controls, accessible via MCP tools over HTTP.

Enables natural language and SQL querying across SQLite, MySQL, PostgreSQL, and MongoDB databases with support for bulk operations and schema inspection. It features a safety mechanism requiring explicit user confirmation for destructive actions like data modification and deletion.

Enables querying SQL Server databases using natural language through Claude.

Enables AI assistants to query SQLite databases using plain language, with strict read-only enforcement and column-level access control to prevent damage or unauthorized data reads.

Converts SQL queries between different database dialects using the sqlglot library to ensure cross-system compatibility. It allows users to list supported dialects and transpile SQL code from one syntax to another through the Model Context Protocol.

A general-purpose MCP server that lets AI work with multiple databases within clear boundaries.

Enables secure database operations on SQL Server instances through a three-tier safety system, supporting schema exploration, query execution, performance analysis, and data export with configurable security levels from read-only to full development access.

Enables Azure SQL Database performance and administration through typed execution, query benchmarking, and managed DBA operations.

An MCP server that connects AI assistants to Microsoft SQL Server databases, enabling schema exploration and read-only queries safely.

Enables AI assistants to query PostgreSQL, MySQL, SQL Server, Oracle, and MongoDB databases through MCP with read-only, audited access.

Enables MCP clients to connect to a privacy-first, self-hostable workout planning and training log, allowing coaching agents to preview and apply program changes while accessing training data through OAuth-protected endpoints.

Enables AI assistants to explore and analyse local CSV, Parquet or JSON files through validated read-only SELECT queries, with schema discovery, profiling and query-plan tools. Results are capped, timed, PII-masked and audit-logged inside a locked DuckDB sandbox that cannot write, reach the network or read other files.

Enables AI models to interact with multiple database types (MySQL, MSSQL, Oracle, Sybase) through a unified interface with standardized tools for querying, inspecting schemas, and managing connections without requiring separate server configurations.

Gives an LLM read-only, schema-aware SQL database access so users can ask business questions in plain English and receive the exact result set, with malformed queries returned as errors for automatic retry and correction.

Enables interaction with SQLite, MySQL, PostgreSQL, and SQL Server databases through tools for connection management, parameterized query execution, and schema inspection.

Validates SQL queries via AST parsing, ensuring they are single read-only SELECTs on allowed tables with enforced LIMITs, and masks PII columns based on user roles. Provides a tamper-evident audit log and runs fully offline.