Dbx runs on your own machine — the client starts it, so there is no endpoint to ping. 11 585 installs a week from npm. Last commit 2 Nov 2026.
Query databases from AI agents using connections configured in DBX.
We read the source, 22 h ago · rules 995398eba69f
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
std::fs::write(&script, r#"import json, sys
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
const child = spawn(binary, process.argv.slice(2), {
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
Ok(serde_json::from_value(json!({"columns":["OWNER","OBJECT_NAME","OBJECT_TYPE","OBJECT_ID","STATUS","LAST_DDL_TIME"],"rows":[["OWNER","Mixed.Func","FUNCTION",12,"VALID","2026-10-21T08:30:00"]]})).unwrap())
select {
case r.permits <- struct{}{}:
r.mu.Lock()
r.activeOperations++
r.mu.Unlock()
const manifest = path.join(normalizedId.slice(0, nodeModules), "node_modules", name, "package.json");
$handle = @popen($cmd, 'r');
for (const e of await fs.readdir(dir, { withFileTypes: true }).catch(() => [])) {
<Input v-model="selectedSsh.key_path" class="flex-1" placeholder="~/.ssh/id_rsa" />
span.innerHTML = open
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add dbx -- npx -y @dbx-app/mcp-server
{
"mcpServers": {
"dbx": {
"command": "npx",
"args": [
"-y",
"@dbx-app/mcp-server"
]
}
}
}
[mcp_servers.dbx]
command = "npx"
args = ["-y", "@dbx-app/mcp-server"]
{
"mcpServers": {
"dbx": {
"command": "npx",
"args": [
"-y",
"@dbx-app/mcp-server"
]
}
}
}
{
"servers": {
"dbx": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@dbx-app/mcp-server"
]
}
}
}
Query and explore 100+ databases through your DBCode connections.
Provision Postgres databases + webhooks from AI coding agents in one HTTP call.
Notion for AI agents — search, read pages/blocks, query databases, create pages.
Find why a PostgreSQL query is slow from its EXPLAIN output, without a database connection.
Chipp: custom actions, action collections, custom components, and database connections
A secure MCP server that lets AI agents query databases safely.
A dead-simple, self-hosted MCP server for securely querying databases via AI agents.
MongoDB tools: query, aggregate, index, and administer collections and databases.
Answers built from our own checks of this server.