A2db MCP server
io.github.agentic-eng/a2db·v0.2.1·2 starsSafe, read-only database access for AI agents. 5 databases, batch queries, SQLGlot.
2 stars35 downloads/wk
Reviews
Write oneNobody has reviewed A2db yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
A2db tools (5, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
executewrite actionExecute read-only SQL queries.
list_connectionsList saved connections. Returns project/env/db and database type (no secrets).
loginSave a database connection. Validates by attempting a real connection.
logoutwrite actionRemove a saved connection.
search_objectsSearch database objects.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan15 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 168 days ago8/15
- Maintainer identityregistry namespace matches repository owner7/10
Findings (1)
- mediumeval / new Function used
exec.evala2db-0.2.1/pyproject.toml: … # pygrep-hooks — blanket type: ignore, eval(), blanket noqa # ── ENFORCE: deter…
How A2db compares
Against every graded Databases MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 72/100
- higher than 30% of 802 Databases servers
- Tools
- 5
- the typical Databases server has 8
- Tools that change things
- 40%
- typical: 10%. Fewer write tools means less an agent can break
- GitHub stars
- 2
- more than 60% of 601 Databases servers
- Downloads a week
- 35
- more than 22% of 324 Databases servers with a package
What its tools let an agent do: 3 read · 1 change · 1 run or deploy
Install A2db in Claude Code, Cursor or VS Code
claude mcp add a2db -- uvx a2db
What the publisher says
From the A2db repository's README, as published. We do not edit it. Read it on GitHub
🗄️ a2db Agent-to-Database Give AI agents safe, read-only access to your databases. One call, multiple queries, clean results. 5 databases · batch queries · pre-configured connections · SQLGlot read-only Quick Start · MCP Tools · Security · Comparison · Setup
Agent: "Show me active users and their recent orders"
↓
a2db execute → 2 queries, 1 call, structured results
↓
Agent: "Got it — 847 active users, avg order $42.50"Why a2db?
Most database MCP servers make you run one query at a time, repeat connection details on every call, and return results double-encoded inside JSON strings. a2db fixes all of that:
- Pre-configured connections — define databases in .mcp.json with --register, agent queries immediately
- Batch queries — run multiple named queries in a single tool call
- Default connection — set connection once, use it across all queries in a batch
- Clean output — structured JSON envelope with compact TSV data and per-query timing (see why TSV?)
- Read-only enforced — SQLGlot AST parsing blocks all write operations
- All drivers bundled — pip install a2db and you're done
- Secrets stay in env — ${DB_PASSWORD} in DSNs, expanded only at connection time
Supported Databases
Quick Start
pip install a2dbAs an MCP Server (recommended)
Claude Code (with pre-configured connection):
claude mcp add -s user a2db -- a2db-mcp \
--register myapp/prod/main 'postgresql://user:${DB_PASSWORD}@host/mydb'Claude Code (minimal — agent calls login on demand):
claude mcp add -s user a2db -- a2db-mcpClaude Desktop / Cursor / any MCP client (.mcp.json):
{
"mcpServers": {
"a2db": {
"command": "uvx",
"args": [
"a2db-mcp",
"--register", "myapp/prod/main", "postgresql://user:${DB_PASSWORD}@host/mydb"
],
"env": {
"DB_PASSWORD": "your-password-here"
}
}
}
}Multiple databases:
{
"args": [
"a2db-mcp",
"--register", "myapp/prod/main", "postgresql://user:${DB_PASSWORD}@host/maindb",
"--register", "myapp/prod/analytics", "postgresql://user:${DB_PASSWORD}@host/analytics"
]
}--register pre-registers connections at server startup — the agent can query immediately. Passwords use ${ENV_VAR} syntax and are expanded at connection time, never stored in plaintext.
As a CLI
# Save a connection (validates immediately)
a2db login -p myapp -e prod -d main 'postgresql://user:${DB_PASSWORD}@localhost/mydb'Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
A2db: common questions
- Is A2db MCP server safe?
- Mostly: it is graded B (72/100). Read the A2db safety report
- How do I install A2db?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does A2db need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is A2db maintained?
- The last commit was 203 days ago (2026-04-13). The latest release is v0.2.1.
- What can I use instead of A2db?
- Servers from other publishers that do the same job: Grain SQL MCP server, legacy2mcp MCP server and CogniCore MCP server.
- How does A2db compare with other Databases MCP servers?
- safety score 72/100 (higher than 30% of 802 Databases servers); tools 5 (the typical Databases server has 8); tools that change things 40% (typical: 10%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to A2db
Same job from other publishers: the closest match first, then the best rated.
Grain SQLRun SQL queries and inspect database schemas through safe, visible MCP tools.not reviewedGrowingB- legacy2mcpTurn a legacy SOAP/WSDL, database, or REST API into a safe, typed, audit-logged MCP servernot reviewedGrowingA
- CogniCoreMemory, reflection and safety for AI agents. Hosted or local, no vector database.5.0(1)GrowingA
- DBHubToken-efficient database MCP server for PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, SQLitenot reviewedWidely usedA
- Neo4j CypherA simple Neo4j MCP server that allows you to run Cypher queries against a Neo4j database.not reviewedEstablishedA