Back to MCP Trust Indexm8ven
69
/ 100
1 month ago
glama

sql-safety-executor

Enables LLMs to safely execute database queries via MCP tools, with security features including query restrictions, truncation, and timeout.

→ Firstmeridian/llm-sql-safety-executor-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
7 tools verified — handlers match their declared behaviour
7 read-only tools verified — handlers contain no write/delete/exec
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 3 credentials: GEMINI_API_KEY, OPENAI_API_KEY, DB_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretGEMINI_API_KEY— Requires: , OPENAI_API_KEY, or USE_OLLAMA=true
🔐 secretOPENAI_API_KEY— Requires: GEMINI_API_KEY, , or USE_OLLAMA=true
configOLLAMA_BASE_URL
configOLLAMA_MODEL
configUSE_OLLAMA— Requires: GEMINI_API_KEY, OPENAI_API_KEY, or =true
configDB_TYPE— ## MySQL Configuration (used when =mysql)
configQUERY_TIMEOUT_SECONDS— Query Timeout: to prevent slow queries.
configCONNECT_TIMEOUT_SECONDS— 10 # Connection timeout in seconds
configSQLITE_DATABASE_PATH— ./sample_data/demo.db
configDB_USER— your_database_user
🔐 secretDB_PASSWORD— your_database_password
configDB_HOST— your_database_host
configDB_NAME— your_database_name
configSQLITE_PROGRESS_HANDLER_INTERVAL— Timeout check frequency
configENABLE_SCHEMA_TOOLS— 1 # Controls sample() tool
configENABLE_TABLE_SUMMARY— If an exact count is needed, please use SELECT COUNT() ..., or enable =1 and use get_table_summary(exact_count=True) (note that large tables may be slow).
configLARGE_TABLE_THRESHOLD— 1000 - Threshold for is_large flag.
configMAX_RESULT_ROWS— Prevent Token Explosion: Result truncation () + Table count limits (MAX_OVERVIEW_TABLES).
configMAX_RESULT_CHARS— Result Truncation: MAX_RESULT_ROWS / to prevent Token overflow.
configMAX_SCHEMA_TABLES— 50 # Max tables returned by get_full_schema (0=unlimited)
configMAX_OVERVIEW_TABLES— Prevent Token Explosion: Result truncation (MAX_RESULT_ROWS) + Table count limits ().
configALLOW_UNION— Supports configuration-based policy/prompt injection (e.g., , ALLOWED_TABLES, truncation thresholds), using shorter, more relevant guidance to reduce invalid tool calls.
configALLOWED_TABLES— Supports configuration-based policy/prompt injection (e.g., ALLOW_UNION, , truncation thresholds), using shorter, more relevant guidance to reduce invalid tool calls.
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/firstmeridian-llm-sql-safety-executor-mcp-1pon15)](https://m8ven.ai/mcp/firstmeridian-llm-sql-safety-executor-mcp-1pon15)
commit: a3e6926c139f03dbb077ac5125e175f50743ac28
code hash: 40c9afac30c6e53807e3b3e662cbf42cd62c0a3c4c8510a08158f88fa2343dea
verified: 6/23/2026, 10:18:32 AM
view raw JSON →