← Back to search

mcp-db-connect

phatngoit Scanned 3h ago

Universal MCP server for readonly-first Oracle, Microsoft SQL Server, and MongoDB access.

npm ↗
D
40 / 100

Versions

0.1.17latest
Jul 26, 2026
0.1.16
May 18, 2026
0.1.15
May 18, 2026
0.1.14
May 15, 2026
0.1.13
May 15, 2026
+ show 9 moreshow less
0.1.12
May 14, 2026
0.1.11
May 14, 2026
0.1.9
May 14, 2026
0.1.8
May 14, 2026
0.1.7
May 14, 2026
0.1.6
May 14, 2026
0.1.5
May 13, 2026
0.1.4
May 13, 2026
0.1.2
May 13, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 20

db_list_connections
annotations: none low

List configured database connections.

db_test_connection
annotations: none low

Test one configured database connection.

connection string
db_list_schemas
annotations: none low

List schemas or databases for a connection.

connection string
db_list_tables
annotations: none low

List SQL tables or MongoDB collections.

schema string connection string
db_describe_table
annotations: none low

Describe SQL table columns or sample MongoDB collection fields.

table string schema string connection string
db_query
annotations: none low

Run a readonly SQL query against Oracle, Microsoft SQL Server, PostgreSQL, MySQL/MariaDB, or SQLite.

query string maxRows number connection string
db_explain_query
annotations: none low

Return an execution plan for a readonly SQL query without returning result rows.

query string connection string
db_count
annotations: none low

Count rows in a SQL table (Oracle, MSSQL, PostgreSQL, MySQL/MariaDB, or SQLite). For MongoDB use db_mongo_count.

table string where string schema string connection string
db_mongo_find
annotations: none low

Run a readonly MongoDB find operation.

skip number maxRows number collection string connection string
db_mongo_aggregate
annotations: none low

Run a readonly MongoDB aggregate pipeline. $out and $merge are blocked in readonly mode.

maxRows number collection string connection string
db_mongo_count
annotations: none low

Count documents in a MongoDB collection.

collection string connection string
db_mongo_get_indexes
annotations: none low

List indexes for a MongoDB collection.

collection string connection string
db_mongo_explain_find
annotations: none low

Return an execution plan for a MongoDB find operation.

collection string connection string
db_mongo_explain_aggregate
annotations: none low

Return an execution plan for a MongoDB aggregate pipeline.

collection string connection string
db_mongo_insert
annotations: none low

Insert one or more documents into a MongoDB collection. Requires mode: readwrite and security.allowWriteOperations: true.

collection string connection string
db_mongo_update
annotations: none low

Update documents in a MongoDB collection matching a filter. Requires mode: readwrite and security.allowWriteOperations: true.

collection string connection string
db_mongo_delete
annotations: none low

Delete documents from a MongoDB collection matching a filter. Requires mode: readwrite and security.allowWriteOperations: true.

collection string connection string
db_qdrant_search
annotations: none low

Run a vector similarity search against a Qdrant collection.

limit number collection string connection string scoreThreshold number
db_qdrant_scroll
annotations: none low

Browse or filter points in a Qdrant collection without a vector search.

limit number collection string connection string withVector boolean
db_qdrant_count
annotations: none low

Count points in a Qdrant collection with an optional filter.

collection string connection string

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 60

low
Tool 'db_list_connections' has no annotations annotation_checker · 100%
low
Tool 'db_test_connection' has no annotations annotation_checker · 100%
low
Tool 'db_list_schemas' has no annotations annotation_checker · 100%
low
Tool 'db_list_tables' has no annotations annotation_checker · 100%
low
Tool 'db_describe_table' has no annotations annotation_checker · 100%
low
Tool 'db_query' has no annotations annotation_checker · 100%
low
Tool 'db_explain_query' has no annotations annotation_checker · 100%
low
Tool 'db_count' has no annotations annotation_checker · 100%
low
Tool 'db_mongo_find' has no annotations annotation_checker · 100%
low
Tool 'db_mongo_aggregate' has no annotations annotation_checker · 100%
low
Tool 'db_mongo_count' has no annotations annotation_checker · 100%
low
Tool 'db_mongo_get_indexes' has no annotations annotation_checker · 100%
low
Tool 'db_mongo_explain_find' has no annotations annotation_checker · 100%
low
Tool 'db_mongo_explain_aggregate' has no annotations annotation_checker · 100%
low
Tool 'db_mongo_insert' has no annotations annotation_checker · 100%
low
Tool 'db_mongo_update' has no annotations annotation_checker · 100%
low
Tool 'db_mongo_delete' has no annotations annotation_checker · 100%
low
Tool 'db_qdrant_search' has no annotations annotation_checker · 100%
low
Tool 'db_qdrant_scroll' has no annotations annotation_checker · 100%
low
Tool 'db_qdrant_count' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: yaml@2.6.1 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.1.6 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: db_list_connections manifest_parser · 70%
info
Tool: db_test_connection manifest_parser · 70%
info
Tool: db_list_schemas manifest_parser · 70%
info
Tool: db_list_tables manifest_parser · 70%
info
Tool: db_describe_table manifest_parser · 70%
info
Tool: db_query manifest_parser · 70%
info
Tool: db_explain_query manifest_parser · 70%
info
Tool: db_count manifest_parser · 70%
info
Tool: db_mongo_find manifest_parser · 70%
info
Tool: db_mongo_aggregate manifest_parser · 70%
info
Tool: db_mongo_count manifest_parser · 70%
info
Tool: db_mongo_get_indexes manifest_parser · 70%
info
Tool: db_mongo_explain_find manifest_parser · 70%
info
Tool: db_mongo_explain_aggregate manifest_parser · 70%
info
Tool: db_mongo_insert manifest_parser · 70%
info
Tool: db_mongo_update manifest_parser · 70%
info
Tool: db_mongo_delete manifest_parser · 70%
info
Tool: db_qdrant_search manifest_parser · 70%
info
Tool: db_qdrant_scroll manifest_parser · 70%
info
Tool: db_qdrant_count manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 417 components sbom_generator · 100%
critical
Database URL with Password found in phatngoit-MCP-DB-6d041fc/README.md secret_scanner · 85%
critical
Database URL with Password found in phatngoit-MCP-DB-6d041fc/CHANGELOG.md secret_scanner · 85%
critical
Database URL with Password found in phatngoit-MCP-DB-6d041fc/docs/dotnet-ai-clients.md secret_scanner · 85%
high
Hardcoded Password found in phatngoit-MCP-DB-6d041fc/examples/docker-compose.yml secret_scanner · 65%
critical
Database URL with Password found in phatngoit-MCP-DB-6d041fc/docs/superpowers/plans/2026-07-26-connection-string-setup.md secret_scanner · 85%
high
Hardcoded Password found in phatngoit-MCP-DB-6d041fc/docs/superpowers/plans/2026-07-26-connection-string-setup.md secret_scanner · 65%
critical
Database URL with Password found in phatngoit-MCP-DB-6d041fc/src/setup/wizard.ts secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%