mcp-database-server

PostgreSQL: postgresql://username:password@host:5432/database MySQL: mysql://username:password@host:3306/database SQL Server: Server=host,1433;Database=dbname;User Id=user;Password=pass SQLite: (use path property instead) Oracle: username/password@host:1521/servicename

Thepoolobject controls connection pooling behavior. Improves performance by reusing database connections.

Theintrospectionobject controls schema discovery behavior. Determines what database objects are analyzed.

Controls schema metadata caching to improve startup performance and reduce database load.

// Read-only access (default - safest) { "allowWrite": false } // Allow INSERT and UPDATE only (no deletes) { "allowWrite": true, "allowedWriteOperations": ["INSERT", "UPDATE"], "disableDangerousOperations": true } // Full write access (development only - dangerous!) { "allowWrite": true, "disableDangerousOperations": false }

Controls log output verbosity and formatting.

{ "databases": [ { "id": "postgres-production", "type": "postgres", "url": "${DATABASE_URL}", "readOnly": true, "pool": { "min": 5, "max": 20, "idleTimeoutMillis": 60000, "connectionTimeoutMillis": 5000 }, "introspection": { "includeViews": true, "includeRoutines": false, "excludeSchemas": ["pg_catalog", "information_schema"] }, "eagerConnect": true }, { "id": "mysql-analytics", "type": "mysql", "url": "${MYSQL_URL}", "readOnly": true, "pool": { "min": 2, "max": 10 }, "introspection": { "includeViews": true, "maxTables": 100 } }, { "id": "sqlite-local", "type": "sqlite", "path": "./data/app.db", "readOnly": true } ], "cache": { "directory": ".sql-mcp-cache", "ttlMinutes": 60 }, "security": { "allowWrite": false, "allowedWriteOperations": ["INSERT", "UPDATE"], "disableDangerousOperations": true, "redactSecrets": true }, "logging": { "level": "info", "pretty": false } }

Keep secrets out of the MCP client config and out of the server config values themselves.

{ "databases": [ { "id": "production-db", "type": "postgres", "secretRef": "DATABASE_URL" } ] }

The server resolvessecretReffrom the process environment first, and then from a.envfile next to.mcp-database-server.config.

DATABASE_URL=postgresql://user:password@localhost:5432/dbname DB_URL_MYSQL=mysql://user:password@localhost:3306/dbname DB_URL_MARIADB=mysql://report_user:password@mariadb.local:3306/reporting DB_URL_MSSQL=Server=host,1433;Database=db;User Id=sa;Password=pass

{ "databases": [ { "id": "analytics-db", "type": "mysql", "credentialCommand": "op read op://analytics/mysql/url" } ] }

The command must print only the connection string to stdout. For safety,credentialCommandis only allowed when the server is launched with an explicit--configpath. Auto-discovered configs cannot execute credential commands.

You can still write"url": "${DATABASE_URL}", butsecretRefis the cleaner option because it makes the secret source explicit.

- ✅ Store.envfile outside version control (add to.gitignore)
- ✅ Use different.envfiles for each environment (dev, staging, prod)
- ✅ Never commit credentials to git repositories
- ✅ Use secret management services (AWS Secrets Manager, HashiCorp Vault) in production

postgresql://user:pass@host:5432/db?sslmode=require&connect_timeout=10

mysql://user:pass@host:3306/db?charset=utf8mb4&timezone=Z

mysql://user:pass@host:3306/db?charset=utf8mb4

Server=host;Database=db;User Id=user;Password=pass;Encrypt=true;TrustServerCertificate=false

{ "mcpServers": { "database": { "command": "mcp-database-server", "args": ["--config", "/absolute/path/to/.mcp-database-server.config"] } } }

{ "mcpServers": { "database": { "command": "node", "args": [ "/absolute/path/to/mcp-database-server/dist/index.js", "--config", "/absolute/path/to/.mcp-database-server.config" ] } } }

# macOS/Linux cd /path/to/mcp-database-server pwd # prints: /Users/username/projects/mcp-database-server # Windows (PowerShell) cd C:\path\to\mcp-database-server $PWD.Path # prints: C:\Users\username\projects\mcp-database-server

This server provides 15 tools for comprehensive database interaction and optimization.