Universal DB (read-only) MCP Server

by alghanim Your server? Claim it

local only

Universal DB (read-only) runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 9 Oct 2026.

Read-only, guarded SQL access for AI agents: PostgreSQL, MySQL, ClickHouse, Oracle, SQL Server, Db2

—

Installs / week

not published

Stars

0 open issues

9 Oct 2026

Last commit

from GitHub

Apache-2.0

License

Python

What the code does

We read the source, 1 d ago · rules ccca72095570

Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

Claims read-only, but the code runs commands src/universal_db_mcp/agents/core.py:1308, src/universal_db_mcp/config.py:1439, src/universal_db_mcp/diagnostics/doctor.py:101 и ещё 1

        proc = subprocess.run(  # noqa: S603 - the interpreter a registration would launch

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs an external command src/universal_db_mcp/agents/core.py:1308, src/universal_db_mcp/diagnostics/doctor.py:101

        proc = subprocess.run(  # noqa: S603 - the interpreter a registration would launch

Unsafe deserialization src/universal_db_mcp/config.py:1439

        return yaml.load(text, Loader=_UniqueKeySafeLoader)  # noqa: S506 - a SafeLoader subclass

Builds a file path from a variable src/universal_db_mcp/config.py:690

                client_dirs.append(("lib_dir", os.path.join(lib_dir, os.pardir, "network", "admin")))

Executes code built at runtime src/universal_db_mcp/diagnostics/doctor.py:523

            __import__(mod)

Page executes code built at runtime site/index.html:920

    elSql.innerHTML = highlight(c.sql);

Dumps the whole environment src/universal_db_mcp/__main__.py:176

            or resolve_harness_config_path(dict(os.environ), Path.home())

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

We found things in this code

Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Universal DB (read-only) and you get told the day something new turns up.

Alternatives to Universal DB (read-only)

same job, measured the same way

Data

by thinair

PostgreSQL, MySQL, and SQL Server in one session. 26 read-only MCP tools for AI agents.

answering

JDBC MCP Server

by igorolv

Read-only SQL, plans, schema for AI agents: PostgreSQL, Oracle, SQL Server, Firebird, SQLite, JDBC

local only

SafeSelect MCP

by antonillos

Fail-closed, read-only PostgreSQL and MongoDB access for AI agents over MCP.

local only

Rowbase

by djstreet11

Safe, read-only-by-default MySQL, PostgreSQL & SQLite access for AI agents. TOON output.

1 630 installs/wk local only

Quarry

by yiminspace

Safety-railed database access for agents: Postgres, MySQL, Redis. Read-only by default.

1 595 installs/wk local only

Quarry

by wangggym

Safety-railed database access for agents: Postgres, MySQL, Redis. Read-only by default.

local only

SaturnSQL

by saturnsql

Query Postgres, MySQL, SQL Server, Oracle, BigQuery, ClickHouse and Redshift from your AI client.

answering

DB Connect MCP

by yugui923

Multi-database MCP server for PostgreSQL, MySQL, and ClickHouse

565 installs/wk local only

Universal DB (read-only) — questions

Answers built from our own checks of this server.

Why is there no uptime for Universal DB (read-only)?

Universal DB (read-only) runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone.

Is Universal DB (read-only) open source?

Yes — it is published under the Apache-2.0 licence, written in Python and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.