MCP servers · by job

Databases MCP servers

155 MCP servers that query, inspect and manage databases and vector stores. 46 are SAFE, 33 CAUTION and 76 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Databases MCP servers”. Retrieved 28 Oct 2026. https://modelsatlas.com/mcp/topic/databases

Verdicts · 155 servers

✓SAFE46!CAUTION33✕BLOCK76

Transports

A server can list more than one transport.

Tool risk

47

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 9 tools.

Servers with no destructive tools →

155 databases servers

1–24 of 155 · ranked by trust score, then stars

Neo4j

neo4j-contrib/mcp-neo4j

✓SAFE B

Neo4j Labs Model Context Protocol servers

★ 986Not listed in sourcesse

Redis

redis/mcp-redis

!CAUTION B

The official Redis MCP Server is a natural language interface designed for agentic applications to manage and search data in Redis efficiently

★ 62910 destructivestdio

apple-health-mcp

neiltron/apple-health-mcp

✓SAFE B

Local-first Apple Health MCP server. Lets AI assistants answer questions about your sleep, workouts, activity and heart data from a local export.

★ 5682 writestdio

MotherDuck

motherduckdb/mcp-server-motherduck

✓SAFE B

Local MCP server for DuckDB and MotherDuck

★ 5253 readstdio

Memento

gannonh/memento-mcp

✓SAFE B

Memento MCP: A Knowledge Graph Memory System for LLMs

★ 4254 destructivestdio

Ragdocs

hannesrudolph/mcp-ragdocs

✓SAFE B

An MCP server implementation that provides tools for retrieving and processing documentation through vector search, enabling AI assistants to augment their responses with relevant documentation context.

★ 2652 destructivestdio

XiYan

xgenerationlab/xiyan_mcp_server

✓SAFE B

A Model Context Protocol (MCP) server that enables natural language queries to databases

★ 2391 readstreamable-http

MongoDB Lens

furey/mongodb-lens

!CAUTION B

🍃🔎 MongoDB Lens: Full Featured MCP Server for MongoDB Databases

★ 2076 destructivestdio

Claude Patent Creator

robthepcguy/claude-patent-creator

!CAUTION B

USPTO patent creation system with MCP server + Claude Code plugin. Hybrid RAG search over MPEP/USC/CFR, BigQuery access to 76M+ patents, automated 35 USC 112 compliance checks, prior art search, diagram generation. GPU-accelerated with skills and autonomous agents.

★ 1969 read

Toolbox Langchain SDK

googleapis/mcp-toolbox-sdk-python

✓SAFE B

Python SDK for interacting with the MCP Toolbox for Databases.

★ 1921 read

DuckDB Server

ktanaka101/mcp-server-duckdb

✓SAFE B

A Model Context Protocol (MCP) server implementation for DuckDB, providing database interaction capabilities

★ 1781 writestdio

Ourmem

ourmem/omem

✓SAFE B

Shared Memory That Never Forgets — persistent memory for AI agents with Space-based sharing across agents and teams. Plugins for OpenCode, Claude Code, OpenClaw, MCP Server.

★ 1743 writestdio

PostgreSQL Operations

call518/mcp-postgresql-ops

✓SAFE B

🐘 Give AI assistants full PostgreSQL DBA superpowers — 30+ tools for performance analysis, bloat detection, lock/deadlock monitoring, autovacuum & schema inspection. No extensions required. PG 12-18.

★ 16038 readstdio

BigQuery

ergut/mcp-bigquery-server

✓SAFE B

A Model Context Protocol (MCP) server that provides secure, read-only access to BigQuery datasets. Enables Large Language Models (LLMs) to safely query and analyze data through a standardized interface.

★ 1481 writestdio

Memory Keeper

mkreyman/mcp-memory-keeper

✓SAFE B

MCP server for persistent context management in AI coding assistants

★ 1361 destructivestdio

BigQuery

lucashild/mcp-server-bigquery

✓SAFE B

A Model Context Protocol server that provides access to BigQuery

★ 1311 writestdio

HubSpot

baryhuang/mcp-hubspot

✓SAFE B

A Model Context Protocol (MCP) server that enables AI assistants to interact with HubSpot CRM data, providing built-in vector storage and caching mechanisms help overcome HubSpot API limitations while improving response times.

★ 1296 writestdio

HubSpot

peakmojo/mcp-hubspot

✓SAFE B

A Model Context Protocol (MCP) server that enables AI assistants to interact with HubSpot CRM data, providing built-in vector storage and caching mechanisms help overcome HubSpot API limitations while improving response times.

★ 1296 writestdio

loci

IvenKooLab/loci

✓SAFE B

A queryable second brain over your scattered notes and docs - hybrid retrieval (vector + BM25), section-level citations, and an MCP server so AI agents can use it. ~300 lines, no LangChain.

★ 100Not listed in sourcestdio

Mem0

pinkpixel-dev/mem0-mcp

!CAUTION B

A memory system using mem0 for AI applications. Enables long-term memory for AI agents as a drop-in MCP server.

★ 972 destructivestdio

Legion Database

theralabs/legion-mcp

✓SAFE B

A server that helps people access and query data in databases using the Legion Query Runner with Model Context Protocol (MCP) in Python.

★ 942 write

MCP Toolbox SDKs for JS

googleapis/mcp-toolbox-sdk-js

✓SAFE B

Javascript SDK for interacting with the MCP Toolbox for Databases.

★ 772 write

DuckDB Knowledge Graph Memory

izumisy/mcp-duckdb-memory-server

✓SAFE B

MCP Memory Server with DuckDB backend

★ 593 destructivestdio

Databricks

rafaelcartenet/mcp-databricks-server

✓SAFE B

Model Context Protocol (MCP) server for Databricks that empowers AI agents to autonomously interact with Unity Catalog metadata. Enables data discovery, lineage analysis, and intelligent SQL execution. Agents explore catalogs/schemas/tables, understand relationships, discover notebooks/jobs, and exe

★ 431 writestdio

Other jobs

By risk

Questions

How do you decide which servers are databases servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which databases MCP servers rank highest on trust?
Neo4j (neo4j-contrib/mcp-neo4j), Redis (redis/mcp-redis) and apple-health-mcp (neiltron/apple-health-mcp), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many databases servers only read?
39 of the 155 declare tools that all only read; 47 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.