Rowbase runs on your own machine — the client starts it, so there is no endpoint to ping. 1 630 installs a week from pypi. Last commit 8 Oct 2026.
Safe, read-only-by-default MySQL, PostgreSQL & SQLite access for AI agents. TOON output.
We read the source, 4 d ago · rules ccca72095570
Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.
let p = Process()
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
let p = Process()
sys.exit(subprocess.call(args, cwd=ROOT))
m = __import__(mod)
kw["unix_sock"] = sock if not os.path.isdir(sock) else os.path.join(sock, f".s.PGSQL.{int(c.get('port') or default_port)}")
b.textContent = `Update to ${v.latest}`;
b.title = `Rowbase ${v.latest} is available (you have ${v.current})`;
# no OS keychain inside a container → passwords come from ~/.config/rowbase/secrets.json or ROWBASE_PASSWORD_<NAME> ENV ROWBASE_SECRETS=file PYTHONUNBUFFERED=1
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Rowbase and you get told the day something new turns up.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add rowbase -- uvx rowbase-db
{
"mcpServers": {
"rowbase": {
"args": [
"rowbase-db"
],
"command": "uvx"
}
}
}
[mcp_servers.rowbase]
command = "uvx"
args = ["rowbase-db"]
{
"mcpServers": {
"rowbase": {
"args": [
"rowbase-db"
],
"command": "uvx"
}
}
}
{
"mcpServers": {
"rowbase": {
"args": [
"rowbase-db"
],
"command": "uvx"
}
}
}
Safety-railed database access for agents: Postgres, MySQL, Redis. Read-only by default.
Safety-railed database access for agents: Postgres, MySQL, Redis. Read-only by default.
PostgreSQL, MySQL, and SQL Server in one session. 26 read-only MCP tools for AI agents.
Safe, read-only Postgres and MySQL access for AI agents. Audit log + column-level controls.
Fail-closed, read-only PostgreSQL and MongoDB access for AI agents over MCP.
Read-only, guarded SQL access for AI agents: PostgreSQL, MySQL, ClickHouse, Oracle, SQL Server, Db2
Safe, read-only database access for AI agents. 5 databases, batch queries, SQLGlot.
MCP server for PostgreSQL. Read-only by default, row caps, timeouts, secrets never logged.
Answers built from our own checks of this server.