SQLite ExplorerCAUTION
An MCP server that provides safe, read-only access to SQLite databases through Model Context Protocol (MCP). This server is built with the FastMCP framework, which enables LLMs to explore and query SQLite databases with built-in safety features and query validation.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://mseep.ai/app/hannesrudolph-sqlite-explorer-fastmcp-mcp-server)
An MCP server that provides safe, read-only access to SQLite databases through Model Context Protocol (MCP). This server is built with the FastMCP framework, which enables LLMs to explore and query SQLite databases with built-in safety features and query validation.
📋 System Requirements
- Python 3.6+
- SQLite database file (path specified via environment variable)
📦 Dependencies
Install all required dependencies:
# Using pip pip install -r requirements.txt
Required Packages
- fastmcp: Framework for building Model Context Protocol servers
All dependencies are specified in requirements.txt for easy installation.
📑 Table of Contents
- System Requirements
- Dependencies
- MCP Tools
- Getting Started
- Installation Options
- Claude Desktop
- Cline VSCode Plugin
- Safety Features
- Development Documentation
- Environment Variables
🛠️ MCP Tools
The server exposes the following tools to LLMs:
read_query
Execute a SELECT query on the database with built-in safety validations. Features:
- Query validation and sanitization
- Parameter binding support
- Row limit enforcement
- Results formatted as dictionaries
list_tables
List all available tables in the database with their names.
describe_table
Get detailed schema information for a specific table, including:
- Column names and types
- NULL constraints
- Default values
- Primary key information
🚀 Getting Started
Clone the repository:
git clone https:
d460e65add58OBSERVED · 2026-10-07Exposed tools (3)
2 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
describe_table | read | Get detailed information about a table |
list_tables | read | List all tables in the Messages database. |
read_query | write | Execute a query on the Messages database. |
Trust audit
CAUTIONgrade B · trust 86/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- found
Findings (9)
DB_DSN = "postgresql://postgres:postgres@localhost:54320/memory_db"
"postgresql://postgres:postgres@localhost:54320/postgres"
# Or load from a .env file
help="Load environment variables from a .env file",
# Load from .env file if specified
logger.error(f"Failed to load .env file: {e}")load_dotenv() # load environment variables from .env
curl -LsSf https://astral.sh/uv/install.sh | sh
Gates applied: no_behavioural_pass, no_license.
d460e65add58full audit observations/trust-audit/mcp-server/hannesrudolph__sqlite-explorer.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | d460e65add58 | CAUTION | B | 86 | first audit |
Questions
What is the SQLite Explorer MCP server?
An MCP server that provides safe, read-only access to SQLite databases through Model Context Protocol (MCP). This server is built with the FastMCP framework, which enables LLMs to explore and query SQLite databases with built-in safety features and query validation.
What tools does SQLite Explorer expose?
3 in total: 2 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is SQLite Explorer safe to connect to an agent?
With care. The audit graded it B (86/100) and found 9 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does SQLite Explorer need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (d460e65add58), read on 2026-10-07. The repository is watched and re-audited when it changes.