gong-yeongbin/mcp-database (gong-yeongbin/mcp-database) is an MCP server listed on the M8ven Trust Index. It scores 86 out of 100, grade B. It declares 6 tools. The publisher has proved control of what we score (Verified Publisher). It is connected through the M8ven GitHub App, so the listing is re-checked on every push.

Back to MCP Trust IndexM8ven
B
Emerging
86/100
13 days ago

gong-yeongbin/mcp-database

MCP server for Microsoft SQL Server that lets LLMs explore schema and execute read-only SELECT queries, with optional stored procedure execution when explicitly enabled.

→ gong-yeongbin/mcp-database· npm: @dudqls816/database-mcp· listed on glama

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored

Monitored 24 days · every push re-verified

Who stands behind it

gmail.com (@gong-yeongbin) · Verified Publisher

Source: Glama

Maintenance & responsiveness
as of 2026-08-20
Issues closed (90d): 0 · 0 open
Releases (90d): none
Active contributors (6mo): 3

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
6 tools verified — handlers match their declared behaviour
5 read-only tools verified — handlers contain no write/delete/exec
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
Are you the publisher? Confirm or correct these findings.
// quality suggestions

All four hints declared on every tool

6/6 tools missing one or more hints — list_tables (missing: destructiveHint, idempotentHint, openWorldHint); describe_table (missing: destructiveHint, idempotentHint, openWorldHint); query (missing: destructiveHint, idempotentHint, openWorldHint), +3 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool inputs are validated

4/6 tool handlers declare input schemas (67%)

Declare an inputSchema with zod/joi/yup on every tool definition.

Domain consistency

npm scope @dudqls816 doesn't match GitHub owner gong-yeongbin

Use the same org name across GitHub, npm, and your homepage so users can verify the publisher.

// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/gong-yeongbin/mcp-database)](https://m8ven.ai/mcp/gong-yeongbin/mcp-database)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: ff69c9d77ac9c734ee836ced76b973e0a07aa8b9
code hash: 062fcfc522f6281ea75686b7c503cc61914b7949745793b3a4b0a94f34c55145
verified: 8/27/2026, 7:01:26 PM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client