Atlas / MCP servers / erikej / SqlServer.Rules

SqlServer.RulesBLOCK

Name: SqlServer.Rules
Author: erikej

mcp/erikej/sqlserver-rules

MCP server by erikej · dacfx · sql · Audited 2026-10-06

⚑ Report / re-scan Source ↗

140+ T-SQL static code analysis rules for SQL Database Projects and ad-hoc scripts

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

—

Transport

stdio

License

MIT

Stars

241

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[marketplace]: https://marketplace.visualstudio.com/items?itemName=ErikEJ.TSqlAnalyzer [ssmsmarketplace]: https://ssmsgallery.azurewebsites.net/extension/TSqlAnalyzerSsms.f1322c34-dfaa-4842-8933-b439626da91d [vsixgallery]: http://www.vsixgallery.com/extension/SqlAnalyzer.abc6ba2-edd5-4419-8646-a55d0a83f7ff/

[](https://mcptoplist.com/server/glama%2FErikEJ%2FSqlServer.Rules)

[](https://www.nuget.org/packages/ErikEJ.DacFX.SqlServer.Rules)

Overview

A library of SQL best practices implemented as over 140 database code analysis rules checked at build time.

The rules can be added as NuGet packages to SQL Database projects:

Modern SDK-style projects: MSBuild.Sdk.SqlProj and Microsoft.Build.Sql
Classic .sqlproj: Legacy SSDT projects (Visual Studio 2017+ required)

For a complete list of the current rules we have implemented see here.

Component Stack

flowchart TD
VS["Visual Studio T-SQL AnalyzerLive feedback in Visual Studio"]
SSMS["SSMS T-SQL AnalyzerLive feedback in SQL Server Management Studio"]
VSC["VS Code T-SQL AnalyzerLive feedback in Visual Studio Code"]
CLI["T-SQL Analyzer CLItsqlanalyze command line tool"]
MBSQL["SQL Database ProjectsBuild-time SQL Project analysis"]
RULES["SqlServer.Rules(NuGet package)Static SQL code analysis rules"]
MCP["MCP ServerAI Agent integration for SQL code analysis rul

Read from source at commit afd5da792c46OBSERVED · 2026-10-06

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add tsqlanalyzerextension -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "tsqlanalyzerextension": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	FAIL
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: none-observed
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (12)

HIGHPrompt injection · prompt.override · CWE-94, CWE-1427

docs/ignoring_rules.md:8

- GLOBAL IGNORE {RuleId}: Ignores all occurrences of that rule within the file.

Why it matters. asks the agent to drop prior instructions or safety

Fix. remove the instruction

HIGHPrompt injection · prompt.override · CWE-94, CWE-1427

docs/ignoring_rules.md:35

Now you could just add ignores for each occasion of this rule violation, but instead you could use a global ignore to ignore all violations of that rule within the stored procedure.

Why it matters. asks the agent to drop prior instructions or safety

Fix. remove the instruction