MCP servers · by job

Databases MCP servers

155 MCP servers that query, inspect and manage databases and vector stores. 46 are SAFE, 33 CAUTION and 76 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Databases MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/databases/page/6

Verdicts · 155 servers

✓SAFE46!CAUTION33✕BLOCK76

Transports

A server can list more than one transport.

Tool risk

47

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 9 tools.

Servers with no destructive tools →

155 databases servers

121–144 of 155 · ranked by trust score, then stars

Infona Oss

infona-ai/infona-oss

✕BLOCK F

Messy CSV, JSON, or text → one LLM schema pass → deterministic rows into Neo4j → ask in English (Cypher).

★ 63 destructivestdio

hypequery

hypequery/hypequery

✕BLOCK F

hypequery - The TypeScript analytics layer for ClickHouse

★ 1032 writestdio

weave

grunion-ai/weave

✕BLOCK F

Open-source, self-hosted alternative to Airtable, Fibery, Notion databases and ClickUp: a work management database built for AI agents, agent-first (Claude Code, Codex, Cursor, any MCP client). Tables, relations, formulas, rollups, workflows, documents, one SQLite file. REST, CLI, MCP server. Docker

★ 106 destructive

pgEdge Postgres

pgedge/pgedge-postgres-mcp

✕BLOCK F

pgEdge MCP Server. A PostgreSQL MCP server with a Natural Language Agent CLI and Web UI.

★ 2331 read

willow-mcp

willow-memory/willow-mcp

!CAUTION F

Agent-neutral MCP server with persistent memory (SOIL + Postgres KB) and a sandboxed task queue. Manifest-based ACL; works with any stdio MCP client.

★ 35 writestdio

Tabularis

tabularisdb/tabularis

✕BLOCK F

Open-source desktop SQL workspace with 3 built-in database drivers and 16 shipped plugins, including SQL Server, DuckDB, ClickHouse and Redis. Built-in MCP server for Claude, Cursor and Devin, SQL notebooks and visual EXPLAIN.

★ 5,0116 read

board-planner

rafalpodles/board-planner

✕BLOCK F

One board. Your team works it. So do your agents. Kanban, sprints, REST API and MCP server — self-hosted, AGPL, with a PM agent and execution workers that run your tasks under your gates.

★ 19 write

mem0

Pintaro/mem0

✕BLOCK F
★ 13 destructive

graphjin

dosco/graphjin

✕BLOCK F

One governed graph for AI agents — GraphQL + MCP over your databases, files, APIs, and code

★ 3,2063 readstreamable-http

Roampal

roampal-ai/roampal

✕BLOCK F

Memory that learns what works.

★ 1271 destructivestdio

OrionBelt

ralforion/orionbelt-semantic-layer

✕BLOCK F

Source-available semantic and context layer, rule engine, and semantic sidecar for agentic AI and governed analytics. Compiles declarative YAML models into optimized SQL, KPIs, and semantic context across 8 SQL dialects.

★ 9910 destructive

OrionBelt Semantic Layer

ralfbecher/orionbelt-semantic-layer

✕BLOCK F

Source-available semantic and context layer, rule engine, and semantic sidecar for agentic AI and governed analytics. Compiles declarative YAML models into optimized SQL, KPIs, and semantic context across 8 SQL dialects.

★ 9910 destructive

Code-Graph-RAG

vitali87/code-graph-rag

!CAUTION F

The ultimate RAG for your monorepo. Query, understand, and edit multi-language codebases with the power of AI and knowledge graphs

★ 5,169Not listed in sourcestdio

code-graph-rag

vitali87/code-graph-rag

!CAUTION F

The ultimate RAG for your monorepo. Query, understand, and edit multi-language codebases with the power of AI and knowledge graphs

★ 5,157Not listed in sourcestdio

met-museum-mcp-server

ficaviolaodorata520/met-museum-mcp-server

✕BLOCK F

Search the Metropolitan Museum of Art collection and retrieve artwork records and open-access images using an MCP server via STDIO or HTTP.

★ 0Not listed in sourcestdio

PhpMyFAQ

thorsten/phpmyfaq

✕BLOCK F

phpMyFAQ - Open Source FAQ web application for PHP 8.4+ and MySQL, PostgreSQL and other databases

★ 6211 write

PmHub

laigeoffer/pmhub

✕BLOCK F

PmHub,一个基于 SpringCloud & LLM 的智能项目管理系统,该项目旨在帮助小伙伴们快速掌握微服务/分布式项目的架构设计和开发流程。如果你想在校招或者社招中拿到一个满意的 offer,PmHub 将是一个非常 nice 的选择😄。

★ 5787 destructive

menerio

MichaelZelbel/menerio

✕BLOCK F

One brain for all your AI tools. Capture your thoughts once, and every AI can understand, use, and build on them.

★ 21 destructivestreamable-http

wrg-sigma-rules

WRG-11/wrg-sigma-rules

✕BLOCK F

Sigma rules for ransomware, threat actors and vulnerabilities disclosed in AI/LLM apps and MCP servers, with multi-backend conversion and an MCP server for Claude Code, Codex and Cursor. CI-pinned claims.

★ 23 read

MCP Toolbox for Databases

googleapis/genai-toolbox

✕BLOCK F

MCP Toolbox for Databases is an open source MCP server for databases.

★ 16,4602 readstreamable-http

repociv

Grizaceo/repociv

✕BLOCK F

Civilization-style hex dashboard for local AI agent workspaces — agents as units, repos as cities, background processes as buildings.

★ 01 destructivestdio

code-context-mcp

VelimirMueller/code-context-mcp

✕BLOCK F

MCP server that indexes codebases into a SQLite database, exposing file metadata, exports, dependency graphs, and per-file change tracking.

★ 57 destructivestdio

create-nextblock

nextblock-cms/nextblock

✕BLOCK F

The open-source, full-stack CMS for Next.js 16. An AI-native, developer-first alternative to headless platforms built with React Server Components, Supabase, and Tailwind CSS.

★ 181 readstreamable-http

nlqdb

nlqdb/nlqdb

✕BLOCK F

Simplest Natural Langauge Querying DB That scales. Fast.

★ 14 writesse

Other jobs

By risk

Questions

How do you decide which servers are databases servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which databases MCP servers rank highest on trust?
Neo4j (neo4j-contrib/mcp-neo4j), Redis (redis/mcp-redis) and apple-health-mcp (neiltron/apple-health-mcp), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many databases servers only read?
39 of the 155 declare tools that all only read; 47 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.