How do I install Database?

Database is a local plugin. Install it using npm package: @database-mcp/libsql and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Database safe to use?

Yes. Database passed MCP Marketplace's automated security scan with a score of 9.7/10 (low risk). Every server on MCP Marketplace is security-scanned before it's listed; see the full security report on this page for the findings and permissions.

What credentials does Database need?

Database requires the following credentials or environment variables: LIBSQL_URL, LIBSQL_AUTH_TOKEN. You can find setup instructions on the server detail page.

What AI apps work with Database?

Database uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Database MCP Server

by Arifulislamat

Developer ToolsLow Risk9.7MCP RegistryLocal

Free

Server data from the Official MCP Registry

MCP server for libSQL/Turso, local or remote. Read-only by default, row caps, timeouts.

About

MCP server for libSQL/Turso, local or remote. Read-only by default, row caps, timeouts.

Security Report

9.7

Low Risk9.7Low Risk

Valid MCP server (3 strong, 2 medium validity signals). No known CVEs in dependencies. ⚠️ Package registry links to a different repository than scanned source. Imported from the Official MCP Registry. 1 finding(s) downgraded by scanner intelligence.

17 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

database

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Database URL (file path or libsql://... remote)Optional

Environment variable: LIBSQL_URL

Auth token for remote libSQL/Turso databasesRequired

Environment variable: LIBSQL_AUTH_TOKEN

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-arifulislamat-database-mcp-libsql": {
      "env": {
        "LIBSQL_URL": "your-libsql-url-here",
        "LIBSQL_AUTH_TOKEN": "your-libsql-auth-token-here"
      },
      "args": [
        "-y",
        "@database-mcp/libsql"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

database-mcp

MCP servers that give AI clients safe, structured access to SQL databases.

One installable package per database engine. Every package exposes the same minimal two-tool surface, execute_sql and search_objects, with guardrails on by default: read-only mode, row caps, and statement timeouts.

Packages

Engine	TypeScript (npm)	Version
SQLite	`@database-mcp/sqlite`
libSQL	`@database-mcp/libsql`
MySQL	`@database-mcp/mysql`
MariaDB	`@database-mcp/mariadb`
Postgres	`@database-mcp/postgres`

All five are published, provenance-attested, and pass the shared conformance suite against real databases in CI.

Python, Go, and Rust implementations are planned once the TypeScript line is complete. All packages, in every language, pass the same language-agnostic conformance suite, so behavior is identical everywhere.

Design principles

Two tools, no more. A tiny tool surface keeps the model's context window clean. search_objects progressively discloses schema: call it with no arguments to list tables, with a table name to get columns, indexes, and foreign keys.
Safe by default. Read-only mode is enforced in two layers: a conservative SQL guard, plus a session-level read-only setting in the database itself. Rows are capped (default 1000) and statements time out (default 30s).
Configured at launch, never via chat. Connection details come from flags, a YAML config file, or environment variables. Credentials are never accepted through a tool call.
Secrets never appear in logs. Passwords live in non-printable secret types, DSNs are sanitized before logging, and a redaction filter guards the log boundary.

Quick start

Pick your engine's package; each README has the full config surface. SQLite:

{
  "mcpServers": {
    "sqlite": {
      "command": "npx",
      "args": ["-y", "@database-mcp/sqlite", "--dsn", "/absolute/path/to/database.db"]
    }
  }
}

Networked engines take credentials from the environment (MYSQL_*, MARIADB_*, POSTGRES_*/DATABASE_URL, LIBSQL_URL/LIBSQL_AUTH_TOKEN), *_FILE mounted secrets, or a YAML file via --config. Never from a chat prompt.

Contributing

See CONTRIBUTING.md. The short version: the conformance suite is the definition of done. A change is mergeable only when conformance/run.mjs passes against every affected server.

License

MIT

Reviews

No reviews yet

Be the first to review this server!

More Developer Tools MCP Servers

Git

Free

by Modelcontextprotocol · Developer Tools

Read, search, and manipulate Git repositories programmatically

Toleno

Free

by Toleno · Developer Tools

Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.

mcp-creator-python

Free

by mcp-marketplace · Developer Tools

Create, build, and publish Python MCP servers to PyPI — conversationally.

MarkItDown

Free

by Microsoft · Content & Media

Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.

FinAgent

Free

by mcp-marketplace · Finance

Free stock data and market news for any MCP-compatible AI assistant.

Database MCP Server

About

Security Report