Database MCP Server (roilanrodriguez55/database-mcp) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 53 tools. No publisher has claimed this listing.

C
Caution
74/100

Database MCP Server

An extensible MCP server for database operations that supports PostgreSQL for managing schemas, tables, data, and user permissions. It features automatic migration recording for DDL changes and integrates with various AI-powered editors like Cursor, Zed, and Claude Code.

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

roilanrodriguez55

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
⚠️
Tests do not pass
Either the test suite is broken or the code regressed. Either way the published behaviour can’t be verified by the publisher’s own tests.
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
// tools this server exposes53 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

db_list_roles

List all database roles

db_create_role

Create a database role

db_create_user

Create a database user (role with LOGIN)

db_alter_role

Alter a role

db_drop_role

Drop a role

db_grant_role_membership

Grant a role to another role (membership)

db_revoke_role_membership

Revoke role membership

db_grant_schema

Grant schema privileges (USAGE, CREATE) to a role

db_revoke_schema

Revoke schema privileges from a role

db_grant_table

Grant table privileges to a role

db_revoke_table

Revoke table privileges from a role

db_grant_all_tables_in_schema

Grant privileges on all tables in a schema to a role

db_revoke_all_tables_in_schema

Revoke privileges on all tables in a schema from a role

db_list_grants

List all grants for a role (table privileges)

db_query

Execute a SELECT query

db_insert

Insert rows into a table

db_update

Update rows in a table

db_delete

Delete rows from a table

db_execute_sql

Execute arbitrary SQL (DDL/DML). Use for advanced operations. Prefer specific tools when possible.

db_list_databases

List all configured databases

db_get_database

Get details of a specific database

db_list_extensions

List installed extensions

db_create_extension

Install an extension

db_drop_extension

Remove an extension

db_list_functions

List functions

db_create_function

Create a function

db_drop_function

Drop a function

db_list_indexes

List indexes

db_create_index

Create an index

db_drop_index

Drop an index

db_list_migrations

List migrations: applied (in DB) and pending (files not yet applied). Use to sync database.

db_apply_migration

Apply a single migration by filename

db_apply_all_migrations

Apply all pending migrations to sync the database. Runs migrations in order.

db_list_schemas

List all database schemas

db_create_schema

Create a new schema

db_get_schema

Get schema details

db_alter_schema

Rename a schema

db_drop_schema

Drop a schema

db_list_sequences

List sequences

db_create_sequence

Create a sequence

db_drop_sequence

Drop a sequence

db_list_tables

List tables in a schema

db_create_table

Create a new table

db_get_table

Get table details (columns, PK, FK)

db_alter_table

Alter table (add/drop columns, rename)

db_drop_table

Drop a table

db_list_triggers

List triggers

db_create_trigger

Create a trigger

db_drop_trigger

Drop a trigger

db_list_views

List views

db_create_view

Create a view

db_get_view

Get view definition

db_drop_view

Drop a view

// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configMIGRATIONS_DIRMigrations directory (default: ./migrations)
configMIGRATIONS_ENABLEDAuto-record DDL changes to migration files (default: true)
configTEST_DATABASE_URL
configTEST_MYSQL_URL
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

53/53 tools missing one or more hints — db_list_roles (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); db_create_role (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); db_create_user (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +50 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

License file

No license file

Add a LICENSE file (MIT, Apache-2.0, etc.).

Tool test coverage

Only 0/53 tools referenced in tests (0%)

Write tests that reference each tool by name so every tool has at least one test.

Tests pass

npm test failed — tests do not pass

Make sure npm test runs cleanly. Common cause: missing build step or missing env vars.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/roilanrodriguez55/database-mcp?variant=verified)](https://m8ven.ai/mcp/roilanrodriguez55/database-mcp)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 4e530ef335679dc9562ebfb5999a22fc34e16b7a
code hash: d1b440ec11523ac90f49d39a756103eaab45f7791a99cbcc55553c809eeda813
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client