seosiri-db-infra-mcpSAFE
An open-source, local-first Model Context Protocol (MCP) server for **Secure Live Database Querying, Schema Inspection, AWS S3 Security Audits, and Cloudflare Infrastructure Control**.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
📖 Official Architecture & Documentation: SEOSiri Database Infrastructure Guide | Central MCP Directory
An open-source, local-first Model Context Protocol (MCP) server for Secure Live Database Querying, Schema Inspection, AWS S3 Security Audits, and Cloudflare Infrastructure Control.
[](https://glama.ai/mcp/servers/SEOSiri-Official/seosiri-db-infra-mcp)
💖 Sponsorship, B2B Custom Solutions & Attribution
👨💻 Lead Architect & Attribution
Designed and engineered by [Momenul Ahmad](https://github.com/MOBILEPHONE), Lead Architect and Founder of [SEOSiri](https://seosiri.com).
🚀 Capabilities & Tools (10 Production Tools)
- `execute_readonly_postgres_query`: Executes parameterized read-only SQL queries with SELECT-only validation.
- `inspect_database_schema_tree`: Extracts table schemas, column data types, and indexes.
- `audit_aws_s3_bucket_security`: Inspects AWS S3 bucket policies, encryption, and public-access block flags.
- `check_cloudflare_worker_deployment_status`: Audits Cloudflare Workers deployment states and routes.
- `mask_sensitive_query_columns`: Applies dynamic column-level PII/PHI masking to query result sets.
- `enforce_query_timeout_guardrails`: Configures query execution timeouts to prevent table locks.
- `export_query_parquet_buffer`: Formats database query results into columnar Parquet buffers.
- `sanitize_database_input_payload`: Strips SQL mutation attempts (
DROP,DELETE,UPDATE). - `get_live_db_throughput_metrics`: Monitors system health and connection metrics.
- `get_db_server_specifications`: Returns protocol specs and capability matrices.
🛠️ Quickstart
Installation
pip install
323d1ef13338OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add seosiri-db-infra-mcp -- uvx seosiri-db-infra-mcp
{
"mcpServers": {
"seosiri-db-infra-mcp": {
"command": "uvx",
"args": [
"seosiri-db-infra-mcp"
]
}
}
}Exposed tools (10)
9 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
audit_aws_s3_bucket_security | read | |
check_cloudflare_worker_deployment_status | read | |
enforce_query_timeout_guardrails | read | |
execute_readonly_postgres_query | write | |
export_query_parquet_buffer | read | |
get_db_server_specifications | read | SPECIFICATIONS: Returns technical protocol details and tool capability matrices. |
get_live_db_throughput_metrics | read | ANALYTICS: Returns server operational health and active connection metrics. |
inspect_database_schema_tree | read | |
mask_sensitive_query_columns | read | |
sanitize_database_input_payload | read | Security Tool: Sanitizes SQL inputs, stripping dangerous mutation attempts and script tags. |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
323d1ef13338full audit observations/trust-audit/mcp-server/seosiri-official__seosiri-db-infra-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 323d1ef13338 | SAFE | B | 89 | first audit |
Questions
What is the seosiri-db-infra-mcp MCP server?
An open-source, local-first Model Context Protocol (MCP) server for **Secure Live Database Querying, Schema Inspection, AWS S3 Security Audits, and Cloudflare Infrastructure Control**.
What tools does seosiri-db-infra-mcp expose?
10 in total: 9 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is seosiri-db-infra-mcp safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does seosiri-db-infra-mcp need?
No credential environment variables were found in its source, so it appears to need none.
How does seosiri-db-infra-mcp run?
It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as seosiri-db-infra-mcp.
How current is this page?
The grade is for one exact copy of the source (323d1ef13338), read on 2026-10-11. The repository is watched and re-audited when it changes.