MCP.Market

SQL Safe MCP server

by proprock·io.github.proprock/sql-safe-mcp·v1.5.2
No reviews yet

Minimal, read-only, PII-safe MCP server for SQL databases.

A92/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

0 stars80 downloads/wk

Reviews

Write one

Nobody has reviewed SQL Safe MCP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

SQL Safe MCP tools (7, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • execute_sqlwrite action

    Run one restricted SELECT on an all_pii_safe server; protected columns return tokens.

  • get_stored_procedure

    Get the original definition of one stored procedure when visible.

  • get_table_definition

    Get columns, keys, constraints, and indexes for one table.

  • list_databases

    List databases visible to the configured credentials.

  • list_servers

    List explicitly configured database server aliases.

  • list_stored_procedures

    List stored procedures without expanding their definitions.

  • list_tables

    List base tables, optionally filtering by schema and a name substring.

Public scan report

scanner v0.1.10 · 2026-10-30 · same rubric, same numbers if you re-run it

no findings
  • Code scan30 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 25 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How SQL Safe MCP compares

Against every graded Databases MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 90% of 802 Databases servers
Tools
7
the typical Databases server has 8
Tools that change things
14%
typical: 9%. Fewer write tools means less an agent can break
Downloads a week
80
more than 50% of 330 Databases servers with a package

What its tools let an agent do: 6 read · 1 run or deploy

Release history: 6 versions in the registry since 2026-09-20, latest 2026-10-06, typically one every 1 day.

Install SQL Safe MCP in Claude Code, Cursor or VS Code

claude mcp add sql-safe-mcp -- uvx sql-safe-mcp
Add to Cursor

What the publisher says

From the SQL Safe MCP repository's README, as published. We do not edit it. Read it on GitHub

sql-safe-mcp

A PII-safe, read-only MCP server for coding agents working with SQL Server, MySQL and MariaDB: schema knowledge and safe queries without write-capable tools or plaintext exposure of configured PII columns.

Read the data. Protect the identity.

<!-- mcp-name: io.github.proprock/sql-safe-mcp -->

Give a coding agent the schema knowledge it needs to write correct code - servers, databases, tables, columns, keys, indexes, and stored procedures. On aliases you mark allpiisafe, it can also query real rows while configured personal data stays hidden behind authenticated tokens.

PII-safe by default. Read-only by design.

alias-bound, authenticated tokens (pii:v1:...), never as plaintext. An agent can still project, count, and filter on them with = and IN using tokens it was given, so it can follow a record without reading it. Tokens do not work on another server alias or with another key.

  • PII-safe by default - on an allpiisafe server, the columns you configure come back as

the server never executes SQL an agent wrote: metadata comes from SQLAlchemy Inspector and fixed catalog queries, and execute_sql runs only a validated, regenerated SELECT.

  • Read-only by construction - seven tools, all annotated read-only. No tool writes data, and

MySQL, and MariaDB instances. Each alias has its own connection, access level, and, when enabled, PII key and protection rules. Every database operation targets an explicit alias; there is no network discovery.

  • Multiple servers, isolated policies - one MCP process can expose multiple named SQL Server,

Operational safeguards

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

SQL Safe MCP: common questions

Is SQL Safe MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the SQL Safe MCP safety report
How do I install SQL Safe MCP?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does SQL Safe MCP need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is SQL Safe MCP maintained?
The last commit was 31 days ago (2026-10-05). The latest release is v1.5.2.
What can I use instead of SQL Safe MCP?
Servers from other publishers that do the same job: Grain SQL MCP server, DBHub MCP server and Faucet MCP server. Compare all SQL Safe MCP alternatives.
How does SQL Safe MCP compare with other Databases MCP servers?
safety score 92/100 (higher than 90% of 802 Databases servers); tools 7 (the typical Databases server has 8); tools that change things 14% (typical: 9%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to SQL Safe MCP

Same job from other publishers: the closest match first, then the best rated.

All SQL Safe MCP alternatives →
  • Grain SQL
    Run SQL queries and inspect database schemas through safe, visible MCP tools.
    B
  • DBHub
    Token-efficient database MCP server for PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, SQLite
    A
  • Faucet
    SQL database to MCP tools and REST API: PostgreSQL, MySQL, SQL Server, Oracle, SQLite, Snowflake.
    A
  • LINQ to DB
    Inspect database schemas and execute SQL queries across multiple database providers with LINQ to DB.
    A
  • Magic Cloud
    Generate secured CRUD APIs over your database, run SQL, manage files, tasks and a headless browser
    A