rzlco666-sql-rustBLOCK
Token-efficient MCP server for MySQL, PostgreSQL, and SQLite
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Light strut. Extreme load.
Token-efficient MCP server for MySQL, PostgreSQL, and SQLite — written in Rust. Part of the StrutStack ecosystem; usable standalone with any agent client.
[](https://github.com/rzlco666/strut-stack-sql/releases/latest) [](https://github.com/rzlco666/strut-stack-sql/actions) [](LICENSE)
Formerly published as mcp-sql-rust (compat binary alias still ships in v1.0).
Mission
- Token thrift — default 3 tools, columnar
{cols,rows,meta}, row/byte caps - Best-practice Rust — AST SQL guard before pool checkout, lean release binary
- Multi-engine — PostgreSQL + MySQL + SQLite in one binary
- Ship-ready — one-command install, stdio + Streamable HTTP, Cursor-friendly launcher
Install (one command)
curl -fsSL https://raw.githubusercontent.com/rzlco666/strut-stack-sql/main/install.sh | bash strut-stack-sql --version
Installs to ~/.local/bin (also creates mcp-sql-rust alias). Ensure ~/.local/bin is on your PATH.
Other channels (Homebrew, Scoop, winget, Docker, cargo): docs/INSTALL.md.
Quick start (Cursor)
{
"mcpServers": {
"strut-stack-sql": {
"command": "strut-stack-sql",
"args": ["--full-tools"],
"cwd": "${workspaceFolder}"
}
}
}Project .env:
DATABASE_URL=postgresql://user:[email protected]:5432/app
Without credentials the server still starts (ephemeral sqlite::memory:) so MCP initialize succeeds; set DATABASE_URL for real queries.
Official workspace launcher (loads nested apps/api/.env, never blocks start on dead DB):
{
"mcpServers": {8a926bcb7837OBSERVED · 2026-10-12Trust audit
BLOCKgrade D · trust 63/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (3 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- found
Findings (10)
DATABASE_URL: postgresql://demo:demo@postgres:5432/demo
DATABASE_URL=postgresql://demo:demo@localhost:5433/demo
# DATABASE_URL=mysql://demo:demo@localhost:3307/demo
psql "postgresql://demo:demo@localhost:5433/demo" -c "SELECT 1" && break
psql "postgresql://demo:demo@localhost:5433/demo" -f docker/seed/postgres.sql
curl -s http://127.0.0.1:8080/healthz
curl -fsSL https://raw.githubusercontent.com/rzlco666/strut-stack-sql/main/install.sh | bash
curl -fsSL https://raw.githubusercontent.com/rzlco666/strut-stack-sql/main/install.sh | bash
curl -fsSL .../install.sh | bash -s -- --version 1.0.0 --prefix ~/.local
Gates applied: no_behavioural_pass.
8a926bcb7837full audit observations/trust-audit/mcp-server/rzlco666__mcp-sql-rust.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 8a926bcb7837 | BLOCK | D | 63 | first audit |
Questions
What is the rzlco666-sql-rust MCP server?
Token-efficient MCP server for MySQL, PostgreSQL, and SQLite
Is rzlco666-sql-rust safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (63/100) and found 3 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does rzlco666-sql-rust need?
It reads DATABASE_URL from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does rzlco666-sql-rust run?
It speaks stdio and streamable-http, so it runs as a local process your client starts.
How current is this page?
The grade is for one exact copy of the source (8a926bcb7837), read on 2026-10-12. The repository is watched and re-audited when it changes.