67
/ 100
22 hours ago
glama

Universal Database MCP Server

Enables AI agents to securely query databases (PostgreSQL, SQLite, MySQL, DuckDB) with read-only defaults and multi-layer SQL injection prevention.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 2 credentials: POSTGRES_PASSWORD, MYSQL_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configMCP_SERVER_NAME
configALLOW_DESTRUCTIVE"": "false"
configMAX_RESULT_ROWS6 Result size limits — truncated at (default 1000) to prevent memory exhaustion
configENABLE_LOGGINGtrue # log queries to stderr
configWHITELISTED_TABLESv1.1.0: dry-run mode (DRYRUN=true), table allowlists (), query
configRATE_LIMIT_RPM60 # requests per minute
configRATE_LIMIT_BURST
configDRYRUNPair with dry_run: true (=true) while prototyping — Claude gets the
configMAX_JOINS
configWARN_SELECT_STAR_NO_LIMIT
configPOSTGRES_URIe =postgresql://readonly:pass@host.docker.internal:5432/mydb \
configPOSTGRES_HOST
configPOSTGRES_PORT
configPOSTGRES_DB
configPOSTGRES_USER
🔐 secretPOSTGRES_PASSWORD
configPOSTGRES_SSL
configPOSTGRES_READONLYtrue # default: true
configPOSTGRES_MAX_CONN
configQUERY_TIMEOUT30 # seconds
configSQLITE_PATH./myapp.db uvx universal-db-mcp
configSQLITE_READONLYtrue # default: true
configMYSQL_URImysql://readonly:pass@localhost/mydb uvx universal-db-mcp
configMYSQL_HOST
configMYSQL_PORT
configMYSQL_DB
configMYSQL_USER
🔐 secretMYSQL_PASSWORD
configMYSQL_SSL
configMYSQL_READONLYtrue # default: true
configMYSQL_MAX_CONN
configDUCKDB_PATH./analytics.duckdb uvx universal-db-mcp
configDUCKDB_READONLYtrue # default: true
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/fashad-ahmed-universal-db-mcp-1bvp4p)](https://m8ven.ai/mcp/fashad-ahmed-universal-db-mcp-1bvp4p)
commit: 75813473d19b4f7e31ab33872c3881035ce057ee
code hash: 1af46cb6bc394d731e64357041f479fd226dcf8091bc02d8f56c03be8fddc99e
verified: 7/30/2026, 8:07:26 PM
view raw JSON →
Universal Database MCP Server · M8ven Trust Score | M8ven