← Back to search

DB Connect MCP

yugui923 Scanned 9d ago

Multi-database MCP server for PostgreSQL, MySQL, and ClickHouse

MCP Registry ↗
? Not scanned yet

Versions

0.3.1latest
first seen Jun 5, 2026

Tools 0

No tools indexed yet.

Permissions 5

network medium
Server uses network capabilities via: httpx, socket, urllib
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: subprocess
database medium
Server uses database capabilities via: sqlalchemy
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv()

Scan Findings 50

high
Hardcoded OAuth client secret in yugui923-db-connect-mcp-41f1a60/src/db_connect_mcp/auth/jwt_verifier.py auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@2.0.0,<3.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@2.0.0,<3.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@2.0.0,<3.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@2.0.0,<3.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@2.0.0,<3.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@2.0.0,<3.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@2.0.0,<3.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@2.0.0,<3.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@2.0.0,<3.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@2.0.0,<3.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.13.4,<3.0.0 (GHSA-5jqp-qgf6-3pvh) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.13.4,<3.0.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.13.4,<3.0.0 (PYSEC-2021-47) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.13.4,<3.0.0 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Vulnerable dependency: paramiko@5.0.0,<6.0.0 (GHSA-232r-66cg-79px) dependency_analyzer · 95%
medium
Vulnerable dependency: paramiko@5.0.0,<6.0.0 (GHSA-r374-rxx8-8654) dependency_analyzer · 95%
medium
Vulnerable dependency: paramiko@5.0.0,<6.0.0 (GHSA-wqmm-q65g-2hqr) dependency_analyzer · 95%
medium
Vulnerable dependency: paramiko@5.0.0,<6.0.0 (PYSEC-2008-8) dependency_analyzer · 95%
medium
Vulnerable dependency: paramiko@5.0.0,<6.0.0 (PYSEC-2018-19) dependency_analyzer · 95%
medium
Vulnerable dependency: paramiko@5.0.0,<6.0.0 (PYSEC-2022-166) dependency_analyzer · 95%
medium
Vulnerable dependency: paramiko@5.0.0,<6.0.0 (PYSEC-2026-2858) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@49.0.0 (GHSA-g6cj-pr64-35w5) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@49.0.0 (PYSEC-2026-3552) dependency_analyzer · 95%
high
Long hex escape sequence in yugui923-db-connect-mcp-41f1a60/tests/unit/test_tunnel.py:1119 entropy_analyzer · 85%
info
pyproject.toml metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (31) manifest_parser · 80%
high
High-risk OAuth scope: admin oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
critical
Database URL with Password found in yugui923-db-connect-mcp-41f1a60/CLAUDE.md secret_scanner · 85%
critical
Database URL with Password found in yugui923-db-connect-mcp-41f1a60/claude_desktop_config.example.json secret_scanner · 85%
critical
Database URL with Password found in yugui923-db-connect-mcp-41f1a60/README.md secret_scanner · 85%
critical
Database URL with Password found in yugui923-db-connect-mcp-41f1a60/.devcontainer/devcontainer.json secret_scanner · 85%
critical
Database URL with Password found in yugui923-db-connect-mcp-41f1a60/src/db_connect_mcp/models/config.py secret_scanner · 85%
high
Hardcoded Password found in yugui923-db-connect-mcp-41f1a60/src/db_connect_mcp/models/config.py secret_scanner · 65%
critical
RSA Private Key found in yugui923-db-connect-mcp-41f1a60/src/db_connect_mcp/core/tunnel.py secret_scanner · 95%
critical
EC Private Key found in yugui923-db-connect-mcp-41f1a60/src/db_connect_mcp/core/tunnel.py secret_scanner · 95%
critical
Database URL with Password found in yugui923-db-connect-mcp-41f1a60/.github/workflows/ci.yml secret_scanner · 85%
critical
Database URL with Password found in yugui923-db-connect-mcp-41f1a60/docs/guides/DEVELOPMENT.md secret_scanner · 85%
critical
Database URL with Password found in yugui923-db-connect-mcp-41f1a60/docs/guides/DOCKER.md secret_scanner · 85%
critical
Database URL with Password found in yugui923-db-connect-mcp-41f1a60/docs/guides/SSH_TUNNEL.md secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%