MCP.Market

Universal DB MCP server

by Fashad-Ahmed·io.github.Fashad-Ahmed/universal-db-mcp·v1.1.2·1 stars
No reviews yet

Security-first MCP server for PostgreSQL, SQLite, MySQL, DuckDB with SQL injection prevention.

B72/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B72/100

full report

Adoption
New

1 stars22 downloads/wk

Reviews

Write one

Nobody has reviewed Universal DB yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Universal DB tools (8, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • explain

    Get query execution plan without running the query.

  • health

    Check database connection health and get server version info.

  • list_databases

    List all configured databases and their connection status.

  • querywrite action

    Execute a SQL query against the database.

  • query_history

    Get recent query execution history (most recent first).

  • schema

    Get database schema information: tables, columns, types, and constraints.

  • schema_diff

    Compare the current schema against the last snapshot taken with snapshot_schema.

  • snapshot_schema

    Take a snapshot of the current database schema for later drift detection.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan12 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 107 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Universal DB compares

Against every graded Databases MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
72/100
higher than 30% of 802 Databases servers
Tools
8
the typical Databases server has 8
Tools that change things
13%
typical: 10%. Fewer write tools means less an agent can break
GitHub stars
1
more than 45% of 602 Databases servers
Downloads a week
22
more than 8% of 328 Databases servers with a package

What its tools let an agent do: 7 read · 1 change

Install Universal DB in Claude Code, Cursor or VS Code

claude mcp add universal-db-mcp -- uvx universal-db-mcp
Add to Cursor

What the publisher says

From the Universal DB repository's README, as published. We do not edit it. Read it on GitHub

Universal Database MCP Server

<!-- mcp-name: io.github.Fashad-Ahmed/universal-db-mcp -->

The security-first, Python-native MCP server for database access from AI agents.

Why This Exists

Most database MCP servers give AI agents raw SQL access and hope for the best. This server assumes the LLM is untrusted input and applies 8 layers of injection prevention before any query reaches your database — including blocking UNION attacks, stacked statements, time-based injection, and comment bypasses.

Supports: PostgreSQL · SQLite · MySQL · DuckDB (columnar analytics)

Zero Setup: Works on Your Laptop Right Now

No Docker. No cloud account. No database server to install. DuckDB and SQLite run in-process:

# Query a local SQLite database — one command, zero infra
SQLITE_PATH=./myapp.db uvx universal-db-mcp

# Query a local DuckDB file or parquet files
DUCKDB_PATH=./analytics.duckdb uvx universal-db-mcp

# In-memory DuckDB for throwaway analysis
DUCKDB_PATH=:memory: uvx universal-db-mcp

Add to Claude Code in ~/.claude/mcpservers.json, or to Claude Desktop in ~/Library/Application Support/Claude/claudedesktopconfig.json (macOS) / %APPDATA%\Claude\claudedesktop_config.json (Windows):

{
  "mcpServers": {
    "mydb": {
      "command": "uvx",
      "args": ["universal-db-mcp"],
      "env": {
        "SQLITE_PATH": "/Users/you/projects/myapp/db.sqlite3",
        "ALLOW_DESTRUCTIVE": "false"
      }
    }
  }
}

Restart Claude Desktop / Claude Code after saving — that's it.

That's it. Claude Code discovers the tools automatically.

More client configs (Claude Desktop, Cursor, Windsurf, Docker) in examples/.

Security Model: 8 Layers

Read-only by default. Defense-in-depth. Every query validated before it

touches the driver.

Full threat model: docs/SECURITY.md

DuckDB: Analytics Without Infrastructure

DuckDB runs in-process (no server) and reads Parquet, CSV, JSON natively. Connect AI agents to your analytics data without spinning up a warehouse:

# Query parquet files directly
DUCKDB_PATH=:memory: uvx universal-db-mcp

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Universal DB: common questions

Is Universal DB MCP server safe?
Mostly: it is graded B (72/100). Read the Universal DB safety report
How do I install Universal DB?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Universal DB need an API key?
Yes. The registry entry asks for POSTGRES_URI, MYSQL_URI.
Is Universal DB maintained?
The last commit was 145 days ago (2026-06-11). The latest release is v1.1.2.
What can I use instead of Universal DB?
Servers from other publishers that do the same job: DBHub MCP server, Faucet MCP server and NeoSQL MCP server.
How does Universal DB compare with other Databases MCP servers?
safety score 72/100 (higher than 30% of 802 Databases servers); tools 8 (the typical Databases server has 8); tools that change things 13% (typical: 10%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Universal DB

Same job from other publishers: the closest match first, then the best rated.

  • DBHub
    Token-efficient database MCP server for PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, SQLite
    A
  • Faucet
    SQL database to MCP tools and REST API: PostgreSQL, MySQL, SQL Server, Oracle, SQLite, Snowflake.
    A
  • NeoSQL MCP
    Schemas, SQL, ERDs, and codegen for PostgreSQL, MySQL, Oracle, SQLite, and more via NeoSQL Desktop.
    A
  • DB Explorer
    Read-only SQL for PostgreSQL, MySQL and SQLite: schema, safe SELECTs, EXPLAIN, index advice
    B
  • Remem
    Local-first automatic memory for Claude Code and Codex: capture, distill, recall from SQLite.
    B