← Back to search

db-mcp (SQLite MCP Server)

neverinfamous Scanned 2d ago

SQLite MCP server with OAuth 2.1, HTTP/SSE, 122 tools, and smart tool filtering

MCP Registry ↗
B
82.3 / 100

Versions

1.0.2latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

sqlite_server_config
annotations: verified low

Get or update runtime configuration values for the server. Currently supports updating the log level.

readOnlyHint false openWorldHint false idempotentHint false destructiveHint false
sqlite_audit_list_backups
annotations: verified low

List pre-mutation DDL snapshots captured before destructive operations. Returns metadata for each snapshot including timestamp, tool, target, and size.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
sqlite_audit_get_backup
annotations: verified low

Retrieve a specific pre-mutation DDL snapshot by filename. Returns the full snapshot content including DDL and optional data.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
sqlite_audit_cleanup
annotations: verified low

Apply retention policy to audit backup snapshots. Deletes snapshots exceeding age or count limits.

readOnlyHint false openWorldHint false idempotentHint true destructiveHint true
sqlite_audit_diff_backup
annotations: verified low

Compare a pre-mutation DDL snapshot against the live database schema. Shows objects that have been added, removed, or modified since the snapshot was taken.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
sqlite_audit_restore_backup
annotations: verified low

Restore a pre-mutation DDL snapshot by executing its DDL statements against the live database. Use dryRun=true to preview the DDL without applying changes.

readOnlyHint false openWorldHint false idempotentHint false destructiveHint true
sqlite_audit_search
annotations: verified low

Search and filter structured audit logs from the System Database. Returns recent tool invocations, outcomes, token estimates, and parameters.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false

Permissions 5

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, fs/promises
shell high
Server uses shell capabilities via: child_process, spawn()
database medium
Server uses database capabilities via: better-sqlite3
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 31

info
Tool: sqlite_server_config manifest_parser · 85%
info
Tool 'sqlite_server_config' annotations are consistent annotation_checker · 80%
info
Tool 'sqlite_audit_list_backups' annotations are consistent annotation_checker · 80%
info
Tool 'sqlite_audit_get_backup' annotations are consistent annotation_checker · 80%
info
Tool 'sqlite_audit_cleanup' annotations are consistent annotation_checker · 80%
info
Tool 'sqlite_audit_diff_backup' annotations are consistent annotation_checker · 80%
info
Tool 'sqlite_audit_restore_backup' annotations are consistent annotation_checker · 80%
info
Tool 'sqlite_audit_search' annotations are consistent annotation_checker · 80%
high
Hardcoded OAuth client secret in neverinfamous-db-mcp-bb0dd6f/tests/benchmarks/logger-sanitization.bench.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Buffer.from base64 in neverinfamous-db-mcp-bb0dd6f/src/adapters/sqlite/tools/fts.ts:259 entropy_analyzer · 75%
medium
Buffer.from base64 in neverinfamous-db-mcp-bb0dd6f/src/adapters/sqlite/tools/core/queries.ts:267 entropy_analyzer · 75%
high
Long unicode escape chain in neverinfamous-db-mcp-bb0dd6f/tests/security/security-injection.test.ts:268 entropy_analyzer · 80%
info
package.json metadata manifest_parser · 100%
info
Tool: sqlite_audit_list_backups manifest_parser · 85%
info
Tool: sqlite_audit_get_backup manifest_parser · 85%
info
Tool: sqlite_audit_cleanup manifest_parser · 85%
info
Tool: sqlite_audit_diff_backup manifest_parser · 85%
info
Tool: sqlite_audit_restore_backup manifest_parser · 85%
info
Tool: sqlite_audit_search manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (33) manifest_parser · 80%
high
High-risk OAuth scope: admin oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 29 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%