Search / io.github.nethinwei/sql-mcp-server
SQL MCP Server
L0· runs locallyControlled SQL access gateway with policy, cost limits, tenant isolation, and safe tools.
v0.1.19 · active · repository · website · descriptor JSON · versions
Search / io.github.nethinwei/sql-mcp-server
L0· runs locallyControlled SQL access gateway with policy, cost limits, tenant isolation, and safe tools.
v0.1.19 · active · repository · website · descriptor JSON · versions
{
"mcpServers": {
"sql-mcp-server": {
"command": "docker",
"args": [
"--mount",
"type=bind,src=${config_path},dst=/config/config.yaml,readonly",
"-e",
"DATABASE_DSN",
"ghcr.io/nethinwei/sql-mcp-server:0.1.19",
"serve",
"--config",
"/config/config.yaml",
"--transport",
"stdio"
],
"env": {
"DATABASE_DSN": "${DATABASE_DSN}"
}
}
}
}claude mcp add sql-mcp-server -e "DATABASE_DSN=${DATABASE_DSN}" -- docker --mount "type=bind,src=${config_path},dst=/config/config.yaml,readonly" -e DATABASE_DSN ghcr.io/nethinwei/sql-mcp-server:0.1.19 serve --config /config/config.yaml --transport stdio[mcp_servers.sql-mcp-server]
command = "docker"
args = ["--mount", "type=bind,src=${config_path},dst=/config/config.yaml,readonly", "-e", "DATABASE_DSN", "ghcr.io/nethinwei/sql-mcp-server:0.1.19", "serve", "--config", "/config/config.yaml", "--transport", "stdio"]
env = { "DATABASE_DSN" = "${DATABASE_DSN}" }
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"sql-mcp-server": {
"type": "local",
"command": [
"docker",
"--mount",
"type=bind,src={env:config_path},dst=/config/config.yaml,readonly",
"-e",
"DATABASE_DSN",
"ghcr.io/nethinwei/sql-mcp-server:0.1.19",
"serve",
"--config",
"/config/config.yaml",
"--transport",
"stdio"
],
"enabled": true,
"environment": {
"DATABASE_DSN": "{env:DATABASE_DSN}"
}
}
}
}{
"mcpServers": {
"sql-mcp-server": {
"command": "docker",
"args": [
"--mount",
"type=bind,src=${config_path},dst=/config/config.yaml,readonly",
"-e",
"DATABASE_DSN",
"ghcr.io/nethinwei/sql-mcp-server:0.1.19",
"serve",
"--config",
"/config/config.yaml",
"--transport",
"stdio"
],
"env": {
"DATABASE_DSN": "${DATABASE_DSN}"
}
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=sql-mcp-server&config=eyJjb21tYW5kIjoiZG9ja2VyIiwiYXJncyI6WyItLW1vdW50IiwidHlwZT1iaW5kLHNyYz0ke2NvbmZpZ19wYXRofSxkc3Q9L2NvbmZpZy9jb25maWcueWFtbCxyZWFkb25seSIsIi1lIiwiREFUQUJBU0VfRFNOIiwiZ2hjci5pby9uZXRoaW53ZWkvc3FsLW1jcC1zZXJ2ZXI6MC4xLjE5Iiwic2VydmUiLCItLWNvbmZpZyIsIi9jb25maWcvY29uZmlnLnlhbWwiLCItLXRyYW5zcG9ydCIsInN0ZGlvIl0sImVudiI6eyJEQVRBQkFTRV9EU04iOiIke0RBVEFCQVNFX0RTTn0ifX0%3D"
}{
"servers": {
"sql-mcp-server": {
"type": "stdio",
"command": "docker",
"args": [
"--mount",
"type=bind,src=${config_path},dst=/config/config.yaml,readonly",
"-e",
"DATABASE_DSN",
"ghcr.io/nethinwei/sql-mcp-server:0.1.19",
"serve",
"--config",
"/config/config.yaml",
"--transport",
"stdio"
],
"env": {
"DATABASE_DSN": "${DATABASE_DSN}"
}
}
}
}{
"mcpServers": {
"sql-mcp-server": {
"command": "docker",
"args": [
"--mount",
"type=bind,src=${config_path},dst=/config/config.yaml,readonly",
"-e",
"DATABASE_DSN",
"ghcr.io/nethinwei/sql-mcp-server:0.1.19",
"serve",
"--config",
"/config/config.yaml",
"--transport",
"stdio"
],
"env": {
"DATABASE_DSN": "${DATABASE_DSN}"
}
}
}
}extensions:
"sql-mcp-server":
enabled: true
name: "sql-mcp-server"
type: stdio
cmd: "docker"
args:
- "--mount"
- "type=bind,src=${config_path},dst=/config/config.yaml,readonly"
- "-e"
- "DATABASE_DSN"
- "ghcr.io/nethinwei/sql-mcp-server:0.1.19"
- "serve"
- "--config"
- "/config/config.yaml"
- "--transport"
- "stdio"
envs:
"DATABASE_DSN": "${DATABASE_DSN}"
timeout: 300
Placeholders to fill from your own secret store: ${DATABASE_DSN}. The registry never accepts secret values.
This is a local package: the command runs on your machine.
Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)stability.changes, stability.rug_pulltool list unknowndeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo +website ~liveness-unmeasured +updated-2d-ago -unpinned-packages(1)
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
ghcr.io/nethinwei/sql-mcp-server:0.1.19 | oci | unpinned | docker | DATABASE_DSN |
No tools observed. Local packages are never executed by the registry.
Schemas: list_tools.
{
"name": "io.github.nethinwei/sql-mcp-server",
"_meta": {
"io.modelcontextprotocol.registry/publisher-provided": {
"capabilities": {
"security": [
"generated-parameterized-sql",
"RBAC-and-row-policies",
"field-masking",
"fail-closed-cost-gates"
],
"providers": [
"postgres",
"mysql",
"oceanbase"
],
"transports": [
"stdio",
"streamable-http"
],
"authentication": [
"shared-bearer-token",
"mTLS",
"trusted-proxy-identity"
]
},
"documentation": {
"security": "https://github.com/nethinwei/sql-mcp-server/blob/main/docs/security.md",
"providers": "https://github.com/nethinwei/sql-mcp-server/blob/main/docs/provider-compatibility.md",
"quickstart": "https://github.com/nethinwei/sql-mcp-server/blob/main/docs/quickstart.md"
}
}
},
"title": "SQL MCP Server",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.1.19",
"packages": [
{
"transport": {
"type": "stdio"
},
"identifier": "ghcr.io/nethinwei/sql-mcp-server:0.1.19",
"runtimeHint": "docker",
"registryType": "oci",
"packageArguments": [
{
"type": "positional",
"value": "serve"
},
{
"name": "--config",
"type": "named",
"value": "/config/config.yaml"
},
{
"name": "--transport",
"type": "named",
"value": "stdio"
}
],
"runtimeArguments": [
{
"name": "--mount",
"type": "named",
"value": "type=bind,src={config_path},dst=/config/config.yaml,readonly",
"variables": {
"config_path": {
"format": "filepath",
"isRequired": true,
"description": "Absolute path to the SQL MCP Server YAML configuration"
}
},
"isRequired": true
}
],
"environmentVariables": [
{
"name": "DATABASE_DSN",
"isSecret": true,
"description": "Database DSN referenced by ${DATABASE_DSN} in config.yaml"
}
]
}
],
"repository": {
"url": "https://github.com/nethinwei/sql-mcp-server",
"source": "github"
},
"websiteUrl": "https://github.com/nethinwei/sql-mcp-server",
"description": "Controlled SQL access gateway with policy, cost limits, tenant isolation, and safe tools."
}