MCP servers · by job

Databases MCP servers

155 MCP servers that query, inspect and manage databases and vector stores. 46 are SAFE, 33 CAUTION and 76 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Databases MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/databases/page/2

Verdicts · 155 servers

✓SAFE46!CAUTION33✕BLOCK76

Transports

A server can list more than one transport.

Tool risk

47

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 9 tools.

Servers with no destructive tools →

155 databases servers

25–48 of 155 · ranked by trust score, then stars

FalkorDB

falkordb/falkordb-mcpserver

✓SAFE B

FalkorDB-MCPServer is an MCP (Model Context Protocol) server that connects LLMs to FalkorDB

★ 411 destructivestdio

FalkorDB-MCPServer

FalkorDB/FalkorDB-MCPServer

✓SAFE B

FalkorDB-MCPServer is an MCP (Model Context Protocol) server that connects LLMs to FalkorDB

★ 411 destructivestdio

Quicken Mac Data

dweekly/quicken-mac-mcp

✓SAFE B

MCP server providing read-only access to Quicken For Mac financial data via Claude

★ 411 writestdio

IoTDB

apache/iotdb-mcp-server

✓SAFE B

Apache IoTDB MCP Server

★ 396 destructivestdio

Local FAISS

nonatofabio/local_faiss_mcp

✓SAFE B

Local FAISS vector store as an MCP server – Agent Memory, drop-in local semantic search for Claude / Copilot / Agents.

★ 362 readstdio

Local WP

verygoodplugins/mcp-local-wp

!CAUTION B

MCP server for WordPress database access via Local by Flywheel

★ 341 destructivestdio

mcp-local-wp

verygoodplugins/mcp-local-wp

✓SAFE B

MCP server for WordPress database access via Local by Flywheel

★ 341 writestdio

SQL Server

connorbritain/mssql-mcp-server

✓SAFE B

Enterprise MCP server for SQL Server with 20 tools for schema discovery, data operations, and administration.

★ 34Not listed in sourcestdio

Brain.md

mi4uu/brain.md

✓SAFE B

Local-first markdown notes with a first-class MCP server. 16 tools + 2 resources for Claude Code, Claude Desktop, Cursor and any MCP agent. Per-folder permissions, semantic RAG via LanceDB, single Bun binary. AGPL.

★ 331 writestreamable-http

csvql-query

melihbirim/csvql

✓SAFE B

SQL queries for CSV files. The analytical CSV query engine for AI agents cli: csvql.

★ 30Not listed in sourcestdio

Cowork Semantic Search

zhubit/cowork-semantic-search

✓SAFE B
★ 291 read

Bonnard

bonnard-data/bonnard

✓SAFE B

Archived. Earlier Bonnard product. Current: bonnard.dev / @bonnard/mcp-charts

★ 286 readstreamable-http

MongoDB

mongodb-developer/mongodb-mcp-server

✓SAFE B

A Model Context Protocol server providing read-only access to MongoDB databases, letting LLMs inspect collection schemas and run aggregation pipelines.

★ 271 writestdio

Sequel

haxzie/sequel-mcp

✓SAFE B

MCP Database servers for Claude, Cursor and Windsuf

★ 271 writestdio

Line Summary

yung13yubabie/line-summary

✓SAFE B

在 Windows 上用 Claude Code 讀本機 LINE 電腦版聊天記錄、產生每日摘要的 MCP server(wxSQLite3/aes128cbc 解密)

★ 264 readstdio

SpotDB

aliengiraffe/spotdb

✓SAFE B

Give your agents a secure, containerized SQL sandbox with MCP or API access enabled with DuckDB. No infra required, quick spin-up cycle. Push any CSV — query, analyze, and move on.

★ 22Not listed in sourcestdio

mcp-mssql

alyiox/mcp-mssql

✓SAFE B

Read-only-by-default MCP server for one or many SQL Servers: schema discovery, SELECT-only queries, execution-plan analysis, opt-in writes.

★ 9Not listed in sourcestdio

mcp-server-pixeltable-developer

pixeltable/mcp-server-pixeltable-developer

!CAUTION B

A local Model Context Protocol server for building, inspecting, and operating Pixeltable applications.

★ 73 writestdio

patent-mcp-server

deeparchi-ai/patent-mcp-server

!CAUTION B

MCP Server for global patent data retrieval and analysis, powered by Google Patents Public Datasets on BigQuery. MIT.

★ 2Not listed in sourcestdio

cloudscape-docs-mcp

prem676/cloudscape-docs-mcp

!CAUTION B

🌐 Enable seamless semantic search over AWS Cloudscape documentation for AI agents and coding assistants with this efficient MCP server.

★ 12 read

machinegrade-validate

machinegrade/validate

✓SAFE B

Deterministic validation for AI-generated artifacts: JSON Schema, OpenAPI response, SQL. Typed verdicts with fix hints. Metered API + MCP.

★ 12 readstdio

MemAI

Filipe-Soares-de-Almeida/MemAI

!CAUTION B

Long-term memory MCP server for AI agents — one ACID SQLite file, FTS5 BM25 retrieval, nested domains, diagrams and a local curation dashboard

★ 12 read

orrery

chrisfulcher/orrery

✓SAFE B

Free, open source, self-hosted business development intelligence for U.S. federal government contracting.

★ 14 write

postgresql-mcp-js

s2mgtvodois2/postgresql-mcp-js

✓SAFE B

🔌 Simplify PostgreSQL interactions with a secure MCP server for LLMs, enabling efficient access to schemas, tables, and query execution.

★ 11 writestdio

Other jobs

By risk

Questions

How do you decide which servers are databases servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which databases MCP servers rank highest on trust?
Neo4j (neo4j-contrib/mcp-neo4j), Redis (redis/mcp-redis) and apple-health-mcp (neiltron/apple-health-mcp), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many databases servers only read?
39 of the 155 declare tools that all only read; 47 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.