MCP servers · by job

Databases MCP servers

155 MCP servers that query, inspect and manage databases and vector stores. 46 are SAFE, 33 CAUTION and 76 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Databases MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/databases/page/7

Verdicts · 155 servers

✓SAFE46!CAUTION33✕BLOCK76

Transports

A server can list more than one transport.

Tool risk

47

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 9 tools.

Servers with no destructive tools →

155 databases servers

145–155 of 155 · ranked by trust score, then stars

gina

gina-io/gina

✕BLOCK F

MVC framework for Node.js and Bun with built-in HTTP/2, multi-bundle architecture, and scope-based data isolation — no Express dependency

★ 114 read

ghost

wcatz/ghost

✕BLOCK F

GhostMem — a local-first MCP memory server for Claude Code, opencode, Cursor, and other MCP clients.

★ 21 writestdio

Flexible GraphRAG

stevereiner/flexible-graphrag

✕BLOCK F

Python, LlamaIndex, LangChain, 15 Property Graph, 4 RDF , 10 Vector, OpenSearch, Elasticsearch DBs. 14 data sources, 10 auto sync: Alfresco, Nuxeo, etc. KG auto-building, Ontologies, LLMs, Docling, LlamaParse, LiteParse, GraphRAG, RAG, Hybrid Search, AI Chat. TypeScript React, Vue, Angular frontends

★ 1889 read

Kappa Graph

aaronsb/knowledge-graph-system

✕BLOCK F

Kappa Graph — κ(G). A semantic knowledge graph where knowledge has weight. Extracts concepts, measures grounding strength, preserves disagreement, traces everything to source.

★ 1282 destructivestdio

trackyourtime

trebeljahr/trackyourtime

✕BLOCK F

Self-hostable time tracker for freelancers. Track time from the web app, your browser or Raycast, then turn the hours into reports and invoices.

★ 28 writestdio

Genkit

genkit-ai/genkit

✕BLOCK F

Open-source framework for building agentic apps in JavaScript, Go, Dart, and Python, built and used in production by Google

★ 6,5091 destructivesse

Genkit

firebase/genkit

✕BLOCK F

Open-source framework for building agentic apps in JavaScript, Go, Dart, and Python, built and used in production by Google

★ 6,4521 destructivesse

FlAPI

datazoode/flapi

✕BLOCK F

API Framework heavily relying on the power of DuckDB and DuckDB extensions. Ready to build performant and cost-efficient APIs on top of BigQuery or Snowflake for AI Agents and Data Apps

★ 744 readstreamable-http

run402-mcp

kychee-com/run402

✕BLOCK F

Full-stack backend infrastructure for AI agents: Postgres, auth, storage, serverless functions and atomic deploys. TypeScript SDK, CLI and MCP server. Paid with x402/MPP. Open source.

★ 242 writestdio

CloudBase AI ToolKit

tencentcloudbase/cloudbase-ai-toolkit

✕BLOCK F

Backend for AI coding agents on CloudBase — database, auth, functions via Plugin, Skills & MCP.

★ 1,1251 writestdio

knowledge-graph-system

aaronsb/knowledge-graph-system

✕BLOCK F

Kappa Graph — κ(G). A semantic knowledge graph where knowledge has weight. Extracts concepts, measures grounding strength, preserves disagreement, traces everything to source.

★ 1282 destructivestdio

Other jobs

By risk

Questions

How do you decide which servers are databases servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which databases MCP servers rank highest on trust?
Neo4j (neo4j-contrib/mcp-neo4j), Redis (redis/mcp-redis) and apple-health-mcp (neiltron/apple-health-mcp), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many databases servers only read?
39 of the 155 declare tools that all only read; 47 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.