/ 100

1 month ago

mcp_so

StarRocks Official MCP Server

Item: StarRocks Official MCP Server
Rating: 59
Author: M8ven

StarRocks MCP (Model Context Protocol) Server

→ StarRocks/mcp-server-starrocks · listed on mcp_so

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

mcp.so GitHub

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Tool descriptions don’t match what handlers do

1 tool describes read intent but its handler mutates — query_and_plotly_chart (line 515: fig : plotly.graph_objs.Figure = eval(plotly_expr, {"px": px}, local_vars))

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: STARROCKS_PASSWORD

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretSTARROCKS_PASSWORD— "": "default empty",

configSTARROCKS_DUMMY_TEST

configSTARROCKS_FE_ARROW_FLIGHT_SQL_PORT

configSTARROCKS_URL— $ =root:@localhost:9030 uv run mcp-server-starrocks --test

configSTARROCKS_USER— "": "default root",

configSTARROCKS_HOST— "": "default localhost",

configSTARROCKS_PORT— "": "default 9030",

configSTARROCKS_DB— "": "default empty"

configSTARROCKS_MYSQL_AUTH_PLUGIN

configSTARROCKS_POOL_SIZE

configSTARROCKS_CONNECTION_TIMEOUT

configSTARROCKS_USE_PURE

configSTARROCKS_PASSWORD_KEYCHAIN_SERVICE— (Optional, macOS only) Generic password service name to use when reading the password from Keychain. This is only used when no explicit password is provided via STARROCKS_PASSWORD or STARROCKS_URL.

configSTARROCKS_PASSWORD_KEYCHAIN_ACCOUNT— (Optional, macOS only) Generic password account name to use when reading the password from Keychain. Defaults to the resolved StarRocks user.

configLOG_LEVEL

configSTARROCKS_OVERVIEW_LIMIT— The environment variable provides a _soft target_ for the maximum length of the overview string generated _per table_ when populating the cache, helping to manage memory usage.

configSTARROCKS_MCP_OUTPUT_DIR

configMCP_TRANSPORT_MODE— mode {stdio,sse,http,streamable-http}: Transport mode (default: stdio or env var)

configSTARROCKS_CHART_OUTPUT_DIR

configSTARROCKS_CHART_INCLUDE_PLOTLYJS

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/starrocks-mcp-server-starrocks-yelgp3)](https://m8ven.ai/mcp/starrocks-mcp-server-starrocks-yelgp3)

commit: 75bc4a9f570058f15506a84e6003126858946078

code hash: 52c6425476ed5e5a0dbf8f515e6033ead976a754dc8ed1b972152cd3d3adb7c9

verified: 6/27/2026, 8:57:20 AM

view raw JSON →