Atlas / MCP servers / donghao1393 / Dbutils

DbutilsSAFE

Name: Dbutils
Author: donghao1393

mcp/donghao1393/dbutils

MCP server by donghao1393 · database · modelcontextprotocol · mysql · Audited 2026-10-07

数读是一件可以让你的大模型安全连接到数据库的MCP工具。| DButils is an all-in-one MCP service that enables your AI to do data analysis by harnessing versatile types of database (sqlite, mysql, postgres, and more) within a unified configuration of multiple connections in a secured way (like SSL and controlled write access).

Verdict

SAFE

Grade

Trust score

85 /100

Exposed tools

8 5r · 2w · 1d

Transport

stdio

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/donghao1393/mcp-dbutils/actions) [](https://github.com/donghao1393/mcp-dbutils/actions) [](https://sonarcloud.io/dashboard?id=donghao1393_mcp-dbutils)

[](https://pypi.org/project/mcp-dbutils/) [](https://pypi.org/project/mcp-dbutils/) [](https://smithery.ai/server/@donghao1393/mcp-dbutils)

[](https://www.python.org/) [](LICENSE) [](https://github.com/donghao1393/mcp-dbutils/stargazers)

简介

MCP Database Utilities 是一个多功能的 MCP 服务,它使您的 AI 能够通过统一的连接配置安全地访问各种类型的数据库(SQLite、MySQL、PostgreSQL 等)进行数据分析。

您可以将其视为 AI 系统和数据库之间的安全桥梁,允许 AI 在不直接访问数据库或冒数据修改风险的情况下读取和分析您的数据。

核心特性

安全优先:严格只读操作,无直接数据库访问,隔离连接,按需连接,自动超时
隐私保障:本地处理,最小数据暴露,凭证保护,敏感数据屏蔽
多数据库支持:使用相同的接口连接 SQLite、MySQL、PostgreSQL
简单配置:所有数据库连接使用单个 YAML 文件
高级功能:表格浏览、架构分析和查询执行

🔒 安全说明:MCP 数据库工具采用安全优先的架构设计,非常适合注重数据保护的企业、初创公司和个人用户。详细了解我们的安全架构。

快速入门

我们提供了多种安装方式,包括 uvx、Docker 和 Smithery。详细的安装和配置步骤请参阅[安装指南](

Read from source at commit fc6ab07406c1OBSERVED · 2026-10-07

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add mcp-dbutils -- uvx mcp-dbutils

claude-desktop

{
  "mcpServers": {
    "mcp-dbutils": {
      "command": "uvx",
      "args": [
        "mcp-dbutils"
      ]
    }
  }
}

Exposed tools (8)

5 read · 2 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`dbutils-describe-table`	read	Provides detailed information about a table
`dbutils-execute-write`	destructive	CAUTION: This tool executes data modification operations (INSERT, UPDATE, DELETE) on the specified database. It requires explicit configuration and confirmation. Only available for connections with
`dbutils-explain-query`	read	Get execution plan for a SQL query
`dbutils-get-audit-logs`	write	Retrieves audit logs for database write operations. Shows who performed what operations, when, and with what results. Useful for security monitoring, compliance, and troubleshooting.
`dbutils-list-tables`	read	List all available tables in the specified database connection
`dbutils-run-query`	write	Execute read-only SQL query on database connection
`query`	read	执行只读SQL查询
`test-tool`	read	Test tool

Trust audit

SAFEgrade B · trust 85/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: UNDECLARED (1 observation(s))
Network: declared (4 observation(s))
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (16)

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

dbutils-execute-write

Why it matters. 1 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWInventory / provenance · inv.hidden_file · CWE-1104

.coveragerc

.coveragerc

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.pre-commit-config.yaml

.pre-commit-config.yaml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.releaserc.json

.releaserc.json

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose