Atlas / MCP servers / anarkh-lee / Universal DB

Universal DBCAUTION

Name: Universal DB
Author: anarkh-lee

mcp/anarkh-lee/universal-db

MCP server by anarkh-lee · Audited 2026-09-26

通用数据库 MCP 连接器:支持 MySQL、PostgreSQL、Oracle、MongoDB 等 17 种数据库,支持 Claude Desktop、Cursor、Windsurf、VS Code、ChatGPT 等 50+ 平台,用自然语言查询和分析数据

Verdict

CAUTION

Grade

Trust score

85 /100

Exposed tools

9 7r · 0w · 2d

Transport

sse · stdio · streamable-http

License

MIT

Stars

935

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Universal DB MCP

Connect AI to Your Database with Natural Language

A universal database connector implementing the Model Context Protocol (MCP) and HTTP API, enabling AI assistants to query and analyze your databases using natural language. Works with Claude Desktop, Cursor, Windsurf, VS Code, ChatGPT, and 50+ other platforms.

Features • Quick Start • Databases • Docs • Contributing

English | 中文文档

Why Universal DB MCP?

Imagine asking your AI assistant: "Show me the top 10 customers by order value this month" and getting instant results from your database - no SQL writing required. Universal DB MCP makes this possible by bridging AI assistants with your databases

Read from source at commit 60b95fbcbfddOBSERVED · 2026-09-26

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add universal-db-mcp --env API_KEYS=${API_KEYS} --env CORS_CREDENTIALS=${CORS_CREDENTIALS} --env DB_PASSWORD=${DB_PASSWORD} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "universal-db-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "API_KEYS": "${API_KEYS}",
        "CORS_CREDENTIALS": "${CORS_CREDENTIALS}",
        "DB_PASSWORD": "${DB_PASSWORD}"
      }
    }
  }
}

Exposed tools (9)

7 read · 0 write · 2 destructive. Blast radius: 2 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`clear_cache`	destructive	清除 Schema 缓存。当数据库结构发生变化(如新增表、修改列)时,可以调用此工具清除缓存。
`connect_database`	read	连接到数据库。支持动态指定数据库类型和连接参数,无需重启服务。如果当前已有连接,会自动断开旧连接再建立新连接。支持的数据库类型:mysql, postgres, redis, oracle, dm, sqlserver, mongodb, sqlite, kingbase, gaussdb, oceanbase, tidb, clickhouse, polardb, vastbase, highgo, goldendb。
`disconnect_database`	read	断开当前数据库连接。断开后需要重新调用 connect_database 才能执行查询。
`execute_query`	destructive	执行 SQL 查询或数据库命令。支持 SELECT、JOIN、聚合等查询操作。如果启用了写入模式,也可以执行 INSERT、UPDATE、DELETE 等操作。
`get_connection_status`	read	获取当前数据库连接状态。返回是否已连接、数据库类型、地址、数据库名、权限模式等信息。
`get_enum_values`	read	获取指定列的所有唯一值。用于了解 status、type、category 等枚举类型列的所有可能值,帮助生成准确的 WHERE 条件。例如:获取 orders.status 列的所有状态值(pending, shipped, delivered 等)。
`get_sample_data`	read	获取表的示例数据(已自动脱敏)。用于了解数据格式,如日期格式(2024-01-01 vs 20240101)、ID格式(UUID vs 自增)、金额精度等。敏感数据(手机号、邮箱、身份证等)会自动脱敏保护隐私。
`get_schema`	read	获取数据库结构信息,包括所有 Schema 中用户可访问的表名、列名、数据类型、主键、索引等元数据。在执行查询前调用此工具可以帮助理解数据库结构。结果会被缓存以提高性能。
`get_table_info`	read	获取指定表的详细信息,包括列定义、索引、预估行数等。用于深入了解某个表的结构。

Trust audit

CAUTIONgrade B · trust 85/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (6 observation(s))
Network: none-observed
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (21)

MEDIUMInventory / provenance · inv.binary · CWE-1104

universal-db-mcp-0.1.0.tgz

universal-db-mcp-0.1.0.tgz

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

clear_cache, execute_query

Why it matters. 2 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWInventory / provenance · inv.hidden_file · CWE-1104

docker/.env.docker.example

.env.docker.example

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose