Universal DB MCP Server by Anarkh-Lee: Setup for Claude, Cursor and Other Apps

• Runs a SQL query or database command

  Runs the SQL or database command you give it, with optional parameters. In the default safe mode only SELECT-style reads pass. Other permission modes also allow inserts, updates, deletes or schema changes.

  Try: “Show the top 10 customers by order value this month.”

  Delete · execute_query

• Lists tables, columns, keys and indexes

  Returns the structure of every schema your user can see, including table and column names, data types, primary keys and indexes. Results are cached unless you ask for a refresh.

  Try: “What tables does this database have?”

  Read · get_schema

• Shows one table's columns, indexes and row estimate

  Gives the detailed definition of a single table, such as columns, indexes and estimated row count. You can name a schema as schema.table.

  Try: “Describe the orders table.”

  Read · get_table_info

• Lists the distinct values in a column

  Returns the unique values of a column, up to 100, with optional counts. Useful for columns like status or category before writing a filter.

  Try: “What values does orders.status take, and how often?”

  Read · get_enum_values

• Shows a few example rows, with sensitive data masked

  Returns up to 10 rows (3 by default) from a table so the assistant can see data formats. The description says phone numbers, emails and similar fields are masked automatically.

  Try: “Show me 3 sample rows from the users table.”

  Read · get_sample_data

• Clears the cached database structure

  Throws away the cached schema so the next lookup reads it fresh. Use it after you change tables.

  Try: “I added a table. Refresh the schema.”

  Write · clear_cache

• Connects to a database you name, at any time

  Opens a new connection from the host, user, password and database the assistant passes in, replacing any current one. The call can also set write permissions, including full control.

  Try: “Connect to the analytics PostgreSQL database on db.example.com.”

  Write · connect_database

• Closes the current database connection

  Disconnects and clears the cache. Queries need a new connection afterwards.

  Try: “Disconnect from the database.”

  Network · disconnect_database

• Shows what you are connected to and in which mode

  Reports whether a connection is open, the database type, address, database name and permission mode.

  Try: “Which database am I connected to, and is it read-only?”

  Read · get_connection_status

Watch out for

• The assistant can switch on write access itself

  connect_database accepts allowWrite and a permission mode of full, so a connection opened by the assistant is not bound by the read-only flag in your config. Use a database account that only has read rights. github.com

• Full mode can delete data and change tables

  In full mode execute_query can run DELETE, TRUNCATE, DROP and other schema changes. Never enable it on production data. github.com

• The database password sits in your config file

  The README's setup puts --password in the client's JSON args, and connect_database takes a password in chat. Use a dedicated account and avoid reusing a personal password. github.com

• Query results go to the AI provider

  Rows the assistant reads become part of the conversation. Sample data is masked by the server, but results from execute_query are not described as masked. github.com

• The optional HTTP mode listens on every interface

  If you start the HTTP mode, the default bind address is 0.0.0.0, and authentication is skipped when no API keys are configured. The stdio setup in the install box does not use it. github.com

Security advisories