AlchemySAFE
A MCP (model context protocol) server that gives the LLM access to and knowledge about relational databases like SQLite, Postgresql, MySQL & MariaDB, Oracle, and MS-SQL.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Status: Actively maintained and in daily use. Tested releases are published to PyPI with git tags, and issues and pull requests are triaged regularly.
Let Claude be your database expert! MCP Alchemy connects Claude Desktop directly to your databases, allowing it to:
- Help you explore and understand your database structure
- Assist in writing and validating SQL queries
- Displays relationships between tables
- Analyze large datasets and create reports
- Claude Desktop Can analyse and create artifacts for very large datasets using claude-local-files.
Works with PostgreSQL, MySQL, MariaDB, SQLite, Oracle, MS SQL Server, CrateDB, Vertica, and a host of other SQLAlchemy-compatible databases.
Installation
Ensure you have uv installed:
# Install uv if you haven't already curl -LsSf https://astral.sh/uv/install.sh | sh
Usage with Claude Desktop
Add to your claude_desktop_config.json. You need to add the appropriate database driver in the `--with` parameter.
Note: After a new version release there might be a period of up to 600 seconds while the cache clears locally cached causing uv to raise a versioning error. Restarting the MCP client once again solves the error.
SQLite (built into Python)
{
"mcpServers": {
"my_sqlite_db": {
"command": "uvx",
"args": ["--from", "mcp-alchemy==2026.9.5.185701",
"--refresh-package", "mcp-alchemy", "mcp-alchemy"],
"env": {
"DB_URL": "sqlite:////absolute/path/to/database.db"
}
}
}
}PostgreSQL
{
"mcpServers": {
"867359897fd3OBSERVED · 2026-10-01Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp-alchemy -- uvx mcp-alchemy
{
"mcpServers": {
"mcp-alchemy": {
"command": "uvx",
"args": [
"mcp-alchemy"
]
}
}
}Exposed tools (3)
3 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
all_table_names | read | with get_connection() as conn: |
filter_table_names | read | with get_connection() as conn: |
schema_definitions | read | def format(inspector, table_name): |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (2 observation(s))
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- found
Findings (3)
"DB_URL": "postgresql://chinook:chinook@localhost:5434/chinook_db"
curl -LsSf https://astral.sh/uv/install.sh | sh
tests/Chinook_Sqlite.sqlite
Gates applied: no_behavioural_pass.
867359897fd3full audit observations/trust-audit/mcp-server/runekaagaard__alchemy.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-01 | 867359897fd3 | SAFE | B | 89 | first audit |
Questions
What is the Alchemy MCP server?
A MCP (model context protocol) server that gives the LLM access to and knowledge about relational databases like SQLite, Postgresql, MySQL & MariaDB, Oracle, and MS-SQL.
What tools does Alchemy expose?
3 in total: 3 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Alchemy safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Alchemy need?
No credential environment variables were found in its source, so it appears to need none.
How does Alchemy run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on PyPI as mcp-alchemy.
How current is this page?
The grade is for one exact copy of the source (867359897fd3), read on 2026-10-01. The repository is watched and re-audited when it changes.