MCP servers · by job

Databases MCP servers

155 MCP servers that query, inspect and manage databases and vector stores. 46 are SAFE, 33 CAUTION and 76 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Databases MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/databases/page/4

Verdicts · 155 servers

✓SAFE46!CAUTION33✕BLOCK76

Transports

A server can list more than one transport.

Tool risk

47

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 9 tools.

Servers with no destructive tools →

155 databases servers

73–96 of 155 · ranked by trust score, then stars

mnemiq

agenticfabriq/mnemiq

!CAUTION C

Open-source text-to-SQL engine you tune and measure on your own database

★ 471 destructivestdio

hkex-filing-scraper

simonmak-ascent/hkex-filing-scraper

!CAUTION D

HKEx regulatory filings scraper — 25+ years of filings into nine databases, with full-text extraction, graph linking, and a hosted MCP server for AI agents

★ 16Not listed in sourcestdio

Xata Agent

xataio/agent

✕BLOCK D

AI agent expert in PostgreSQL

★ 1,0933 write

SSH Manager

bvisible/mcp-ssh-manager

✕BLOCK D

MCP SSH Server: 37 tools for remote SSH management | Claude Code & OpenAI Codex | DevOps automation, backups, database operations, health monitoring

★ 4951 readstdio

SqlServer.Rules

erikej/sqlserver.rules

✕BLOCK D

140+ T-SQL static code analysis rules for SQL Database Projects and ad-hoc scripts

★ 241Not listed in sourcestdio

Django ORM Lens

frowningdev/django-orm-lens

✕BLOCK D

Django ER diagrams, N+1 detection, schema drift & migration-risk linting — in VS Code, a CLI and an MCP server. Static analysis: no database, no django.setup(). Free & MIT.

★ 8413 readstdio

DBeaver

srthkdev/dbeaver-mcp-server

✕BLOCK D

omnisql-mcp

★ 822 destructivestdio

AskDB

mgorabbani/askdb

✕BLOCK D

Give AI agents safe access to your database.

★ 732 writestreamable-http

Roampal

roampal-ai/roampal-core

✕BLOCK D

Outcome-based persistent memory MCP server for Claude Code and OpenCode. Good advice promoted, bad advice demoted. pip install roampal.

★ 541 destructivestdio

@putervision/state-memory-mcp

putervision/state-memory-mcp

✕BLOCK D

Persistent, branch-aware workflow state memory MCP server for AI coding assistants. Tracks tasks, accepted decisions, and active blockers to prevent session context bloat and speed up development.

★ 491 readstdio

Widemem

remete618/widemem-ai

✕BLOCK D

Local-first memory layer for LLM apps and agents. Runs offline on Ollama, sentence-transformers and FAISS; OpenAI and Anthropic optional. Importance scoring, contradiction resolution, confidence-aware retrieval.

★ 491 destructivestdio

Snowflake AI Kit

snowflake-labs/snowflake-ai-kit

✕BLOCK D

Snowflake AI Kit: Cortex Code plugin for automatic Snowflake routing, envelope-based permission policy, and one-command installers for Snowflake CLI + Cortex Code CLI.

★ 394 writestdio

Couchbase

couchbase-ecosystem/mcp-server-couchbase

✕BLOCK D

Model Context Protocol server for Couchbase - connect AI agents and LLMs like Claude, Cursor, and Copilot to Couchbase/Capella

★ 35Not listed in sourcestdio

cubrid-mcp-server

cubrid-lab/cubrid-mcp-server

✕BLOCK D

A Model Context Protocol (MCP) server for CUBRID database — enabling LLMs to inspect schemas and execute read-only queries via pycubrid.

★ 32Not listed in sourcestdio

CodeRAG

jonnoc/coderag

✕BLOCK D

Advanced graph-based code analysis for AI-assisted software development

★ 283 destructivesse

KnowledgeGraph

n-r-w/knowledgegraph-mcp

✕BLOCK D

MCP server for enabling persistent knowledge storage for Claude through a knowledge graph with multiple storage backends and fuzzy search

★ 264 destructivestdio

Data Agents

hottechstack/dataagents

✕BLOCK D

Data Agents are intelligent assistants built by data engineers to help non-data professionals navigate the organization’s data infrastructu

★ 241 read

memoria

Kitzkatz/memoria

✕BLOCK D

Local-first, LLM-agnostic memory system — hybrid retrieval (vector + lexical + graph), multi-signal ranking. Runs on 4GB RAM, CPU-only, no cloud.

★ 141 destructive

@yawlabs/postgres-mcp

YawLabs/postgres-mcp

✕BLOCK D

Read-only-by-default MCP server for PostgreSQL. Query, introspect schemas, explain plans, health checks.

★ 72 destructivestdio

agent-discover

keshrath/agent-discover

✕BLOCK D

MCP server registry and marketplace — discover, install, activate, and manage MCP tools on demand

★ 79 writestdio

cal

Dvorinka/cal

✕BLOCK D

Self-hosted daily toolkit — calendar, tasks, notes, links, files, kanban boards, time tracking, GitHub inbox. One Docker container.

★ 31 read

project-mcp

1999AZZAR/project-mcp

✕BLOCK D

An MCP server that acts as a central memory system and workflow guardian for AI agents, featuring knowledge graph capabilities and autonomous guidance prompts.

★ 35 destructivestdio

wso2-docs-mcp-server

iamvirul/wso2-docs-mcp-server

✕BLOCK D

Production-ready MCP server providing RAG-based semantic search over WSO2 documentation (API Manager, Micro Integrator, Choreo, Ballerina, BI , IS).

★ 34 readstdio

redis-mcp

YawLabs/redis-mcp

✕BLOCK D

Redis MCP server -- SCAN-based key exploration, TTL/memory/keyspace introspection, slowlog + INFO health, and a DBA advisor for AI assistants

★ 21 writestdio

Other jobs

By risk

Questions

How do you decide which servers are databases servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which databases MCP servers rank highest on trust?
Neo4j (neo4j-contrib/mcp-neo4j), Redis (redis/mcp-redis) and apple-health-mcp (neiltron/apple-health-mcp), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many databases servers only read?
39 of the 155 declare tools that all only read; 47 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.