MCP servers · by job

Databases MCP servers

155 MCP servers that query, inspect and manage databases and vector stores. 46 are SAFE, 33 CAUTION and 76 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Databases MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/databases/page/3

Verdicts · 155 servers

✓SAFE46!CAUTION33✕BLOCK76

Transports

A server can list more than one transport.

Tool risk

47

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 9 tools.

Servers with no destructive tools →

155 databases servers

49–72 of 155 · ranked by trust score, then stars

airlock-rls-mcp

mateuszingano/airlock-rls-mcp

✓SAFE B

MCP server: let Cursor / Claude Code check a Supabase app for an exposed service_role key and broken RLS while it builds it

★ 02 read

etl-pipeline-mcp

SEOSiri-Official/etl-pipeline-mcp

!CAUTION B

A sovereign, local-first MCP-Native ETL System with Hot/Cold tiering, PII scrubbing, ID stitching, Parquet buffers, and data warehouse exports.

★ 09 readstdio

mcp-clickhousex

alyiox/mcp-clickhousex

✓SAFE B

Read-only MCP server for ClickHouse: SELECT queries, EXPLAIN plan/pipeline/syntax analysis, and a snapshot mode that spills large results to a CSV resource. Read-only is enforced by the engine — every client carries readonly=1, so writes, external table functions and query-level SETTINGS are refused

★ 01 readstdio

prest

prest/prest-mcp-adapter

✓SAFE B

Official stdio MCP adapter for pREST: bridge Cursor, Claude, and other MCP clients to pREST’s HTTP /_mcp endpoint for PostgreSQL-backed tools. Tiny Go transport proxy—no SQL or schema logic.

★ 0Not listed in sourcestdio

tax-law-mcp

xqzimgz/tax-law-mcp

✓SAFE B

Provide access to Japanese tax laws, official notices, and rulings with accurate source data from e-Gov API and tax authority websites.

★ 07 readstdio

rag-vault

RobThePCGuy/rag-vault

!CAUTION B

One command. Zero cloud. Your docs stay private.

★ 27 readsse

Dremio

dremio/dremio-mcp

!CAUTION B

Dremio MCP server

★ 534 readstreamable-http

DBJavaGenix

zhaoxingpeng/dbjavagenix

!CAUTION B

面向 Java 后端开发的智能数据库代码生成工具:基于 MCP 解析 MySQL 等数据库结构与关系,生成 Entity、DAO、Service、Controller 等分层代码,并支持模板扩展、规范校验与依赖管理。

★ 352 writestdio

MCP-rag-with-Chromadb

rexnzm/MCP-rag-with-Chromadb

!CAUTION B

🗂️ Build a versatile MCP server with RAG capabilities, supporting multiple document formats using LangChain and ChromaDB for efficient data retrieval.

★ 31 destructivestdio

SQLite Explorer

hannesrudolph/sqlite-explorer-fastmcp-mcp-server

!CAUTION B

An MCP server that provides safe, read-only access to SQLite databases through Model Context Protocol (MCP). This server is built with the FastMCP framework, which enables LLMs to explore and query SQLite databases with built-in safety features and query validation.

★ 1081 write

SmartDB

wenb1n-dev/smartdb_mcp

!CAUTION B

Universal database MCP server connecting to MySQL, PostgreSQL, SQL Server, MariaDB,DM8,Oracle,not only provides basic database connection such as OAuth 2.0 authentication , health checks, SQL optimization, and index health detection

★ 7718 readstdio

zerikai_memory

KikeVen/zerikai_memory

!CAUTION B

A standalone local-only Python MCP server that gives any IDE persistent, workspace-isolated memory. works with any IDE supporting MCP servers

★ 361 destructivestdio

HiveMem

visterion/HiveMem

✓SAFE B

Personal knowledge system — MCP server with PostgreSQL semantic search and temporal knowledge graph

★ 11 read

Dbutils

donghao1393/mcp-dbutils

✓SAFE B

数读 是一件可以让你的大模型安全连接到数据库的MCP工具。| DButils is an all-in-one MCP service that enables your AI to do data analysis by harnessing versatile types of database (sqlite, mysql, postgres, and more) within a unified configuration of multiple connections in a secured way (like SSL and controlled write access).

★ 901 destructivestdio

1C Templates

desko77/1c-templates-mcp

!CAUTION B

MCP-сервер с семантическим поиском по шаблонам кода 1С (BSL). 2200+ шаблонов, CRUD веб-UI с Monaco Editor, ChromaDB + embeddings.

★ 291 destructivestreamable-http

MySQL

guangxiangdebizi/mysql_mcp

!CAUTION B

这是一个功能强大且易用的MySQL数据库MCP(Model Context Protocol)服务器,让你的AI助手可以安全地进行完整的数据库操作,支持多数据库连接管理、增删改查、事务管理和智能回滚功能。

★ 811 destructivestreamable-http

Distillery

norrietaylor/distillery

✓SAFE B

Team knowledge evaporates daily — pairing sessions, debugging context, architectural rationale lost to Slack. Distillery captures it at the point of creation, connects it into a living graph, and surfaces it conversationally. It monitors feeds, tracks what matters to your projects, and alerts you be

★ 25Not listed in sourcestdio

OrionBelt Analytics

ralfbecher/orionbelt-analytics

!CAUTION B

Ontology-based MCP server that analyzes database schemas (PostgreSQL, Snowflake, ClickHouse, Dremio) and generates RDF/OWL ontologies with SQL mappings for fan-trap-free Text-to-SQL.

★ 49Not listed in sourcestdio

OrionBelt

ralforion/orionbelt-analytics

!CAUTION C

Ontology-based MCP server that analyzes database schemas (PostgreSQL, Snowflake, ClickHouse, Dremio) and generates RDF/OWL ontologies with SQL mappings for fan-trap-free Text-to-SQL.

★ 49Not listed in sourcestdio

agent-memory-server

alvseek/agent-memory-server

!CAUTION C

Munnin — an agent identity server: persistent memory for AI agents (identity, reasoning, episodic, knowledge) plus the procedures for tending it, served over MCP. Apache-2.0, runs locally in 5 minutes.

★ 01 destructivestreamable-http

mainframe-mcp

sushiHex/mainframe-mcp

!CAUTION C

100% local knowledge and persistent memory for coding agents. GPU-accelerated hybrid search with source citations and a low VRAM footprint, powered by one shared MCP daemon.

★ 01 destructivestdio

pgtriage

pgtriage/pgtriage

!CAUTION C

Read-only MCP server for evidence-based PostgreSQL performance auditing

★ 01 writestdio

YantrikDB

yantrikos/yantrikdb-server

!CAUTION C

Cognitive memory database for AI agents — consolidates duplicates, detects contradictions, fades stale memories via temporal decay. Rust, Apache-2.0, ships as library / MCP server / HTTP cluster.

★ 1753 writestdio

Anyquery

julien040/anyquery

!CAUTION C

One SQL interface for 60+ tools (e.g., GitHub, Notion, Airtable). Plug into any LLM through MCP.

★ 1,7751 write

Other jobs

By risk

Questions

How do you decide which servers are databases servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which databases MCP servers rank highest on trust?
Neo4j (neo4j-contrib/mcp-neo4j), Redis (redis/mcp-redis) and apple-health-mcp (neiltron/apple-health-mcp), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many databases servers only read?
39 of the 155 declare tools that all only read; 47 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.