MCP.Market

A2db MCP server

by agentic-eng·io.github.agentic-eng/a2db·v0.2.1·2 stars

Safe, read-only database access for AI agents. 5 databases, batch queries, SQLGlot.

B72/100grade B
What users say
No reviews yet
Be the first
Safety scan
B72/100

full report

Adoption
New

2 stars35 downloads/wk

Reviews

Write one

Nobody has reviewed A2db yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

A2db tools (5, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • executewrite action

    Execute read-only SQL queries.

  • list_connections

    List saved connections. Returns project/env/db and database type (no secrets).

  • login

    Save a database connection. Validates by attempting a real connection.

  • logoutwrite action

    Remove a saved connection.

  • search_objects

    Search database objects.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 medium
  • Code scan15 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 168 days ago8/15
  • Maintainer identityregistry namespace matches repository owner7/10

Findings (1)

  • mediumeval / new Function usedexec.eval
    a2db-0.2.1/pyproject.toml: … # pygrep-hooks — blanket type: ignore, eval(), blanket noqa # ── ENFORCE: deter…
Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How A2db compares

Against every graded Databases MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
72/100
higher than 30% of 802 Databases servers
Tools
5
the typical Databases server has 8
Tools that change things
40%
typical: 10%. Fewer write tools means less an agent can break
GitHub stars
2
more than 60% of 601 Databases servers
Downloads a week
35
more than 22% of 324 Databases servers with a package

What its tools let an agent do: 3 read · 1 change · 1 run or deploy

Install A2db in Claude Code, Cursor or VS Code

claude mcp add a2db -- uvx a2db
Add to Cursor

What the publisher says

From the A2db repository's README, as published. We do not edit it. Read it on GitHub

🗄️ a2db Agent-to-Database Give AI agents safe, read-only access to your databases. One call, multiple queries, clean results. 5 databases · batch queries · pre-configured connections · SQLGlot read-only Quick Start · MCP Tools · Security · Comparison · Setup

Agent: "Show me active users and their recent orders"
  ↓
a2db execute → 2 queries, 1 call, structured results
  ↓
Agent: "Got it — 847 active users, avg order $42.50"

Why a2db?

Most database MCP servers make you run one query at a time, repeat connection details on every call, and return results double-encoded inside JSON strings. a2db fixes all of that:

  • Pre-configured connections — define databases in .mcp.json with --register, agent queries immediately
  • Batch queries — run multiple named queries in a single tool call
  • Default connection — set connection once, use it across all queries in a batch
  • Clean output — structured JSON envelope with compact TSV data and per-query timing (see why TSV?)
  • Read-only enforced — SQLGlot AST parsing blocks all write operations
  • All drivers bundled — pip install a2db and you're done
  • Secrets stay in env — ${DB_PASSWORD} in DSNs, expanded only at connection time

Supported Databases

Quick Start

pip install a2db

As an MCP Server (recommended)

Claude Code (with pre-configured connection):

claude mcp add -s user a2db -- a2db-mcp \
  --register myapp/prod/main 'postgresql://user:${DB_PASSWORD}@host/mydb'

Claude Code (minimal — agent calls login on demand):

claude mcp add -s user a2db -- a2db-mcp

Claude Desktop / Cursor / any MCP client (.mcp.json):

{
  "mcpServers": {
    "a2db": {
      "command": "uvx",
      "args": [
        "a2db-mcp",
        "--register", "myapp/prod/main", "postgresql://user:${DB_PASSWORD}@host/mydb"
      ],
      "env": {
        "DB_PASSWORD": "your-password-here"
      }
    }
  }
}

Multiple databases:

{
  "args": [
    "a2db-mcp",
    "--register", "myapp/prod/main", "postgresql://user:${DB_PASSWORD}@host/maindb",
    "--register", "myapp/prod/analytics", "postgresql://user:${DB_PASSWORD}@host/analytics"
  ]
}

--register pre-registers connections at server startup — the agent can query immediately. Passwords use ${ENV_VAR} syntax and are expanded at connection time, never stored in plaintext.

As a CLI

# Save a connection (validates immediately)
a2db login -p myapp -e prod -d main 'postgresql://user:${DB_PASSWORD}@localhost/mydb'

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

A2db: common questions

Is A2db MCP server safe?
Mostly: it is graded B (72/100). Read the A2db safety report
How do I install A2db?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does A2db need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is A2db maintained?
The last commit was 203 days ago (2026-04-13). The latest release is v0.2.1.
What can I use instead of A2db?
Servers from other publishers that do the same job: Grain SQL MCP server, legacy2mcp MCP server and CogniCore MCP server.
How does A2db compare with other Databases MCP servers?
safety score 72/100 (higher than 30% of 802 Databases servers); tools 5 (the typical Databases server has 8); tools that change things 40% (typical: 10%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to A2db

Same job from other publishers: the closest match first, then the best rated.

  • Grain SQL
    Run SQL queries and inspect database schemas through safe, visible MCP tools.
    B
  • legacy2mcp
    Turn a legacy SOAP/WSDL, database, or REST API into a safe, typed, audit-logged MCP server
    A
  • CogniCore
    Memory, reflection and safety for AI agents. Hosted or local, no vector database.
    A
  • DBHub
    Token-efficient database MCP server for PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, SQLite
    A
  • Neo4j Cypher
    A simple Neo4j MCP server that allows you to run Cypher queries against a Neo4j database.
    A