MCP servers · by job

Databases MCP servers

155 MCP servers that query, inspect and manage databases and vector stores. 46 are SAFE, 33 CAUTION and 76 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Databases MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/databases/page/5

Verdicts · 155 servers

✓SAFE46!CAUTION33✕BLOCK76

Transports

A server can list more than one transport.

Tool risk

47

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 9 tools.

Servers with no destructive tools →

155 databases servers

97–120 of 155 · ranked by trust score, then stars

mcp-server

m8louist12-boop/mcp-server

✕BLOCK D

Verify AI outputs in real-time to ensure code and data accuracy before execution with this Model Context Protocol server.

★ 0Not listed in sourcestdio

AutoMem

verygoodplugins/mcp-automem

✕BLOCK D

MCP client for AutoMem — give Claude, Cursor, Codex, and other MCP tools durable graph+vector memory across conversations.

★ 652 destructivesse

mcp-postgres-server

antonorlov/mcp-postgres-server

✕BLOCK D

MCP server for PostgreSQL. Works with VS Code, Cursor, Claude Code, Codex, and Windsurf.

★ 231 writestdio

nlp2sql

luiscarbonel1991/nlp2sql

✕BLOCK D

Enterprise-ready Natural Language to SQL converter with multi-provider AI support (OpenAI, Anthropic, Gemini). Built for production scale databases (1000+ tables) with Clean Architecture.

★ 81 write

Database

executeautomation/mcp-database-server

✕BLOCK D

MCP Database Server is a new MCP Server which helps connect with Sqlite, SqlServer and Posgresql Databases

★ 3862 destructivestdio

Eion

eiondb/eion

✕BLOCK D

Shared Memory Storage for Multi-Agent Systems

★ 1592 destructivestdio

agent-memory

Masikomoore/agent-memory

✕BLOCK D

One memory for every AI agent — self-hosted long-term memory over MCP/REST for Claude Code, Codex, Cursor, Gemini CLI, VS Code, OpenClaw, and more.

★ 33 destructivestreamable-http

samyama-graph

samyama-ai/samyama-graph

✕BLOCK D

Rust graph-vector database: OpenCypher (99.9% of evaluated TCK scenarios pass), vector search, graph algorithms, RESP + HTTP. LDBC SNB Interactive and BI complete; 1B edges on one machine.

★ 1762 write

MapSmith

mapsmith-ai/MapSmith

✕BLOCK D

Professional-grade GIS geoprocessing over MCP, with a verifiable provenance manifest on every output

★ 26 writestdio

schemagate

ashishsinha1602/schemagate

✕BLOCK D

Text-to-SQL access control: schema selection that gives the LLM only the tables the caller is allowed to read. Row-level-security-aware table pruning for LangChain, MCP and any SQL agent. Postgres, Oracle, MySQL, SQL Server. 75% fewer prompt tokens.

★ 102Not listed in sourcestdio

dynoxide

nubo-db/dynoxide

✕BLOCK D

A DynamoDB emulator in Rust, backed by SQLite. Starts in milliseconds as a single static binary, and is verified against real AWS by a public conformance suite. Runs as an HTTP server, an MCP server for coding agents, an embeddable library, or in the browser via WebAssembly.

★ 100Not listed in sourcestdio

MCPg

devopam/MCPg

!CAUTION D

Postgres MCP Server

★ 131 readstdio

QueryWeaver

falkordb/queryweaver

✕BLOCK D

An open-source Text2SQL tool that transforms natural language into SQL using graph-powered schema understanding. Ask your database questions in plain English, QueryWeaver handles the weaving.

★ 1,080Not listed in sourcestreamable-http

Synaptic Memory

plateerlab/synaptic-memory

!CAUTION D

Knowledge graph + MCP tool server for LLM agents with hybrid retrieval, live DB sync, Korean FTS, and memory feedback.

★ 333 destructive

U.S. Census Bureau Data API

uscensusbureau/us-census-bureau-data-api-mcp

✕BLOCK D

The U.S. Census Bureau Data API MCP connects AI Assistants with official Census Bureau statistics.

★ 9811 readstdio

bagel

Extelligence-ai/bagel

✕BLOCK F

Query robotics, drone, and IoT data in plain English through an MCP server, with an intelligent edge data reduction pipeline that keeps only the data that matters.

★ 3971 readsse

nethinwei-sql-gateway

nethinwei/sql-mcp-server

✕BLOCK F

Governed SQL gateway for untrusted AI agents. No arbitrary SQL. Policy-enforced, cost-bounded access to relational data.

★ 0Not listed in sourcestdio

MongoDB

mongodb-js/mongodb-mcp-server

✕BLOCK F

A Model Context Protocol server to connect to MongoDB databases and MongoDB Atlas Clusters.

★ 1,1374 destructivestdio

Dbmcp

haymon-ai/dbmcp

✕BLOCK F

Database MCP server for MySQL, MariaDB, PostgreSQL, and SQLite - with builtin PII redaction and write-prevention

★ 32Not listed in sourcestdio

Dbhub

bytebase/dbhub

✕BLOCK F

Token conscious database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite.

★ 3,5491 writestdio

RESTHeart

softinstigate/restheart

✕BLOCK F

The Agent-native Backend for MongoDB

★ 8892 write

serverkit

gusnips/serverkit

✕BLOCK F

The shared base of a TypeScript backend on Postgres: plain SQL migrations first.

★ 01 writestreamable-http

NeuronDB

neurondb/neurondb

✕BLOCK F

NeuronDB PostgreSQL extension: vector similarity search (HNSW, IVFFlat), embeddings, kNN, ML in SQL, and hybrid full-text + vector retrieval.

★ 511 read

Cuba-Memorys

leandropg19/cuba-memorys

✕BLOCK F

Persistent memory MCP server for AI agents — Rust, 19 tools, knowledge graph, Hebbian learning, episodic memory, contradiction detection, prospective triggers, Bayesian calibration, zero-config Docker setup.

★ 29Not listed in sourcestdio

Other jobs

By risk

Questions

How do you decide which servers are databases servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which databases MCP servers rank highest on trust?
Neo4j (neo4j-contrib/mcp-neo4j), Redis (redis/mcp-redis) and apple-health-mcp (neiltron/apple-health-mcp), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many databases servers only read?
39 of the 155 declare tools that all only read; 47 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.