← Index

io.github.Fashad-Ahmed/universal-db-mcp

io.github.Fashad-Ahmed/universal-db-mcp·v1.1.2·Databases

Security-first MCP server for PostgreSQL, SQLite, MySQL, DuckDB with SQL injection prevention.

Trust verdict · v1 advisory · method
NOT YET SCREENEDno verdict on file

Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.

Own this server? Screen its description →

Environment variables
POSTGRES_URI
secret

PostgreSQL connection string (read-only user recommended)

SQLITE_PATH

Path to a SQLite database file

MYSQL_URI
secret

MySQL connection string (read-only user recommended)

DUCKDB_PATH

Path to a DuckDB file, or :memory:

ALLOW_DESTRUCTIVE

Set to true to allow INSERT/UPDATE/DELETE/DDL (default: false)

MAX_RESULT_ROWS

Maximum rows returned per query (default: 1000)

MCP quality score · maturity, not trust · methodology
freshness
25
completeness
10
installability
25
documentation
15
stability
10
Alternatives in Databases