Database MCP Server

Item: Database MCP Server
Rating: 56
Author: M8ven

Enables AI assistants to interact with relational databases such as MySQL, PostgreSQL, SQLite, SQL Server, and Oracle. Provides tools for querying, data inspection, and schema analysis with optional read-only mode.

→ aike1202/db-mcp-server-npx · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Known vulnerabilities in dependencies: 2 critical, 2 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

// known CVEs in dependencies2 critical2 high3 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalmysql2@3.9.0GHSA-4rch-2fh8-94vw

MySQL2 for Node Arbitrary Code Injection

criticalmysql2@3.9.0GHSA-fpw7-j2hg-69v5

mysql2 Remote Code Execution (RCE) via the readCodeFor function

high@modelcontextprotocol/sdk@0.6.0GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

highmysql2@3.9.0GHSA-pmh2-wpjm-fj45

mysql2 vulnerable to Prototype Pollution

lowmysql2@3.9.0GHSA-49j4-86m8-q2jw

mysql2 vulnerable to Prototype Poisoning

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configDATABASE_URL— "": "mysql://root:password@localhost:3306/testdb",

configMCP_DB_READ_ONLY— "": "false"

configMCP_LOG_PATH— 自定义日志文件路径（绝对路径）。 logs/mcp-audit.jsonl

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/aike1202-db-mcp-server-npx-sa71a8)](https://m8ven.ai/mcp/aike1202-db-mcp-server-npx-sa71a8)

commit: 48e1e893b2c98cd32233a8fd6832af9ff7fed6d5

code hash: 0609e6509da6a754cfdb9e314f13934ef2687e9e409511c5e08ad336681f1e7d

verified: 7/21/2026, 9:29:51 AM

view raw JSON →