/ 100

10 days ago

glama

SQL Server MCP Server

Item: SQL Server MCP Server
Rating: 67
Author: M8ven

Enables AI agents to inspect schemas, analyze performance, check security, and troubleshoot SQL Server 2019+ databases through a safe, controlled interface.

→ Claritas-LLC/mcp-cla-sqlserver2019 · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

🔐

You'll be asked for 9 credentials: FASTMCP_OIDC_CLIENT_SECRET, FASTMCP_AZURE_AD_CLIENT_SECRET, FASTMCP_GITHUB_CLIENT_SECRET, FASTMCP_GOOGLE_CLIENT_SECRET, FASTMCP_OAUTH_CLIENT_SECRET, FASTMCP_API_KEY, SQL_PASSWORD, SSH_PASSWORD, MCP_SSL_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configMCP_SKIP_CONFIRMATION— Set to "true" to skip startup confirmation dialog (Windows) false

configMCP_LOG_LEVEL— Logging level (DEBUG, INFO, WARNING, ERROR) INFO

configMCP_LOG_FILE— Optional path to write logs to a file None

configFASTMCP_AUTH_TYPE— e =azure-ad \

configFASTMCP_OIDC_CONFIG_URL— OIDC well-known configuration URL

configFASTMCP_OIDC_CLIENT_ID— OIDC Client ID

🔐 secretFASTMCP_OIDC_CLIENT_SECRET— OIDC Client Secret

configFASTMCP_OIDC_BASE_URL— Public URL of this MCP server

configFASTMCP_OIDC_AUDIENCE

configFASTMCP_JWT_JWKS_URI— Provider's JWKS endpoint

configFASTMCP_JWT_ISSUER— Expected token issuer

configFASTMCP_JWT_AUDIENCE— (Optional) Expected token audience

configFASTMCP_AZURE_AD_TENANT_ID— Your Azure Tenant ID

configFASTMCP_AZURE_AD_CLIENT_ID— Your Azure Client ID

🔐 secretFASTMCP_AZURE_AD_CLIENT_SECRET— (Optional) Client secret for OIDC Proxy mode

configFASTMCP_AZURE_AD_BASE_URL— (Optional) Base URL for OIDC Proxy mode

configFASTMCP_AZURE_AD_AUDIENCE

configFASTMCP_GITHUB_CLIENT_ID— GitHub App/OAuth Client ID

🔐 secretFASTMCP_GITHUB_CLIENT_SECRET— GitHub Client Secret

configFASTMCP_GITHUB_BASE_URL— Public URL of this MCP server

configFASTMCP_GOOGLE_CLIENT_ID— Google OAuth Client ID

🔐 secretFASTMCP_GOOGLE_CLIENT_SECRET— Google Client Secret

configFASTMCP_GOOGLE_BASE_URL— Public URL of this MCP server

configFASTMCP_OAUTH_AUTHORIZE_URL— Provider's authorization endpoint

configFASTMCP_OAUTH_TOKEN_URL— Provider's token endpoint

configFASTMCP_OAUTH_CLIENT_ID— Your registered client ID

🔐 secretFASTMCP_OAUTH_CLIENT_SECRET— Your registered client secret

configFASTMCP_OAUTH_BASE_URL— Public URL of this MCP server

configFASTMCP_OAUTH_JWKS_URI— Provider's JWKS endpoint (for token verification)

configFASTMCP_OAUTH_ISSUER— Expected token issuer

configFASTMCP_OAUTH_AUDIENCE— (Optional) Expected token audience

configMCP_SERVER_NAME

🔐 secretFASTMCP_API_KEY— The secret key clients must provide in the Authorization: Bearer <key> header.

configSQL_SERVER— "-e", "=host.docker.internal",

configSQL_PORT— SQL Server port 1433

configSQL_USER— "-e", "=sa",

🔐 secretSQL_PASSWORD— "-e", "=YourPassword123",

configSQL_DATABASE— "-e", "=master",

configSQL_DRIVER— ODBC Driver name ODBC Driver 17 for SQL Server

configSQL_CONNECTION_STRING

configMCP_ALLOW_WRITE— e =false \

configMCP_TRANSPORT— This method ensures you have all dependencies pre-installed. Note the -i flag (interactive) and =stdio.

configMCP_POOL_TIMEOUT

configSSH_HOST— e =bastion.example.com \

configSSH_USER— e =ec2-user \

🔐 secretSSH_PASSWORD— SSH password (optional) None

configSSH_PKEY— e ="/root/.ssh/id_rsa" \

configALLOW_SSH_AGENT— Enable SSH agent forwarding (true, 1, yes, on) false

configMCP_PORT— Port to listen on (8000 for Docker, 8085 for local) 8085

configMCP_HOST— Host to bind the server to 0.0.0.0

configSSL_CERT_FILE

configMCP_SSL_CERT— Path to SSL certificate file (.crt or .pem)

🔐 secretMCP_SSL_KEY— Path to SSL private key file (.key)

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/claritas-llc-mcp-cla-sqlserver2019-1jdui4)](https://m8ven.ai/mcp/claritas-llc-mcp-cla-sqlserver2019-1jdui4)

commit: 554b4f2f0b8e945440b388cc56900923e832cb25

code hash: 58be0fa05b6dfcf2cdedc3d05fa7000fb82e398bcb6c740269562043cdfe8b18

verified: 7/21/2026, 9:32:52 AM

view raw JSON →