Secure Schema MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 87 installs a week from pypi. Last commit 4 Jul 2026.
Read-only MCP server for exposing database schema metadata without row data.
Today is the operative word: we check Secure Schema MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add secure-schema -e 'DATABASE_URL=<DATABASE_URL>' -- uvx mcp-secure-schema
{
"mcpServers": {
"secure-schema": {
"command": "uvx",
"args": [
"mcp-secure-schema"
],
"env": {
"DATABASE_URL": "<DATABASE_URL>"
}
}
}
}
[mcp_servers.secure-schema]
command = "uvx"
args = ["mcp-secure-schema"]
env = { DATABASE_URL = "<DATABASE_URL>" }
{
"mcpServers": {
"secure-schema": {
"command": "uvx",
"args": [
"mcp-secure-schema"
],
"env": {
"DATABASE_URL": "<DATABASE_URL>"
}
}
}
}
{
"servers": {
"secure-schema": {
"type": "stdio",
"command": "uvx",
"args": [
"mcp-secure-schema"
],
"env": {
"DATABASE_URL": "<DATABASE_URL>"
}
}
}
}
Put your own value in place of
<DATABASE_URL> (SQLAlchemy database URL used for schema inspection).
The author’s registry entry marks it as required.
Optional settings from the registry entry, left out of the block above:
DATABASE_SCHEMA (Optional default schema or catalog namespace. In production it is locked and tool arguments cannot override it), ALLOWED_TABLES (Optional comma-separated table/view allowlist. When set, only listed tables and views are visible), SECURE_SCHEMA_ENV (Set to production to require ALLOWED_TABLES during startup), FASTMCP_CHECK_FOR_UPDATES (Set to off to disable FastMCP startup update checks), FASTMCP_SHOW_SERVER_BANNER (Set to false to suppress the FastMCP startup banner).
Read-only MCP server for 1C:Enterprise via OData with metadata and query builder tools.
Microsoft Dataverse MCP server: CRUD, FetchXML, metadata, schema, audit, batch and security roles.
MCP server for the GitHub CLI (gh). Read-only by default; single Go binary.
Local-first, read-only MCP server for evidence-backed repository memory.
MCP server exposing Martin Fowler's refactoring catalog to LLMs with 71+ refactorings
SQL Server / Azure SQL for agents: real schema, lint, read-only runs, plans, write previews.
Adjust MCP server: 5 read tools, 0 write tools. Read-only reporting for allowlisted apps.
PDF parsing server with text extraction, metadata, search, images, and TOC via MCP
Answers built from our own checks of this server.