Safety-railed database access for agents: Postgres, MySQL, Redis. Read-only by default.
MCPpedia last refreshed this data
io.github.Wangggym/quarry is an MCP server that safety-railed database access for agents: Postgres, MySQL, Redis. Read-only by default. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 87/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"io-github-wangggym-quarry": {
"args": [
"quarry-db"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Safety-railed database access for agents: Postgres, MySQL, Redis. Read-only by default.
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
uvx 'quarry-db' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked quarry-db against OSV.dev.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in data
Token-efficient database MCP server for PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, SQLite
Manage Supabase projects — databases, auth, storage, and edge functions
Firecrawl, the context API for AI agents: search, scrape, interact with the web, plus paper search.
A cross-platform desktop application for managing AI Agents and MCP Servers. 一款用于管理AI智能体与MCP服务器的跨平台桌面应用程序。
MCP Security Weekly
Get CVE alerts and security updates for io.github.Wangggym/quarry and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
A native database workbench: one reusable Rust kernel, CLI, browser GUI and MCP. PostgreSQL, MySQL, SQLite, Redis and experimental Neptune; explicit query/write policies, SSH tunnels, saved queries, local Docker services and a SQL assistant.
Quarry 2.x ships as a native Rust executable.
curl -fsSL https://yiminspace.github.io/quarry/install.sh | sh
qy --version
qy gui
Or download a native archive and SHA256SUMS from GitHub Releases. The native executable needs neither Python nor a Rust toolchain. Supported: macOS/Linux arm64/x86_64; Linux glibc 2.28+. See install and upgrade.
Installer-managed copies can download new stable versions in the background.
The next launch activates the verified update. Run qy update to update now.
Run qy gui stop from another terminal to shut down the local standalone GUI.
Use the same --config, --workspace, --host, and --port overrides as at
launch. If you started with --port 0, use the port in the printed GUI URL.
qy --workspace /path/to/workspace connections
qy --workspace /path/to/workspace exec shop --env dev --sql 'SELECT 1'
qy --workspace /path/to/workspace mcp
Workspaces contain connections.toml and reusable SQL query files. Actual
credentials remain local. GUI queries stay read-only; CLI writes require
--write and production confirmation. MCP writes require both server and
request authorization. SQLite opens existing files; it never invents a database
when a connection path is wrong. Assistant proposals never execute themselves.
Ordinary queries use native database drivers. SSH needs system ssh; Local services need Docker, and PostgreSQL schema sync needs pg_dump/psql.
Rust owns main and all 2.x distribution. quarry-core, quarry-runtime,
quarry-local, quarry-assistant and quarry-service can be embedded directly
in host applications. Architecture.
For a hosted workbench, the official Docker image serves the GUI, authentication,
read-only API and execution from one configuration file. Use a built-in
administrator or configure an existing platform's IAM. Standalone qy runs
locally with its own workspaces.
See the hosting guide for deployment, access grants and offline
behavior. The Rust SDK remains available for advanced embedding.
Python 1.11.0 is preserved at its tag and the protected archive/python-1.x
branch. Python import APIs do not ship in 2.x. The Python source retained in this
checkout is a development/test baseline, not a runtime dependency or published
Python implementation. Existing configuration, saved queries and histories are
read by Rust. See upgrade instructions before changing installer ownership.
For frontend development, start the Rust workbench and Vite in separate terminals.
qy gui --no-browser
cd web
npm ci
npm run dev
Open the Vite URL ending in /quarry/. Vite reloads frontend changes and forwards
/api to the local Rust workbench on port 8765. If qy gui uses a different
port, start Vite with QUARRY_DEV_API_PORT=<port> npm run dev.
For a native build and the existing test workflow:
cd web && npm ci && npm run build && cd ..
cargo build --release --locked -p quarry-cli
cargo test --workspace --all-targets --locked
GUI feature matrix · Compatibility · Verification boundaries · 中文