Security-first MCP server for PostgreSQL, SQLite, MySQL, DuckDB with SQL injection prevention.
Security-first MCP server for PostgreSQL, SQLite, MySQL, DuckDB with SQL injection prevention.
Most database MCP servers give AI agents raw SQL access and hope for the best. This server assumes the LLM is untrusted input and applies 8 layers of injection prevention before any query reaches your database — including blocking UNION attacks, stacked statements, time-based injection, and comment bypasses.
Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| query | Execute SQL — read-only by default, all 8 security layers apply |
| schema | Inspect tables and columns — no config needed |
| explain | Get query execution plan without running the query |
| health | Check connection status, DB version, and pool metrics |
| list_databases | Show all configured databases and connection state |
| query_history | Inspect the last 100 executed queries |
| snapshot_schema | Capture current schema for drift detection |
| schema_diff | Compare current schema against the last snapshot |
{
"mcpServers": {
"universal-db": {
"command": "uvx",
"args": ["universal-db-mcp"],
"env": {
"SQLITE_PATH": "your-value",
"ALLOW_DESTRUCTIVE": "your-value",
"DUCKDB_PATH": "your-value"
}
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
| Variable | Description | Required |
|---|---|---|
| SQLITE_PATH | Filesystem location the server is allowed to use. | Optional |
| ALLOW_DESTRUCTIVE | Configuration value read at startup. | Optional |
| DUCKDB_PATH | Filesystem location the server is allowed to use. | Optional |
Inspect PostgreSQL schemas and run read-only queries with the archived MCP reference server. Review its maintenance status before choosing it.
Connect the Notion MCP server to search workspace content and work with pages and databases through Notion’s hosted OAuth service.
Use the Supabase MCP server to inspect database schemas, query project data and retrieve docs through a project-scoped connection.
Query, modify and analyse local SQLite databases in conversation — the fastest way to chat with a data file.
Metabase ships its own MCP endpoint — search your BI content, build and run queries, and save questions and dashboards without leaving the chat.
Official MongoDB server covering data, schemas and Atlas management — from find queries to spinning up clusters.