Is Yugabytedb Mcp Server safe to use?

Yugabytedb Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.

How do I install Yugabytedb Mcp Server?

Yugabytedb Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Yugabytedb Mcp Server do?

Yugabytedb Mcp Server provides 2 tools: list_tables, run_query. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Yugabytedb Mcp Server?

Yugabytedb Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is Yugabytedb Mcp Server actively maintained?

Yugabytedb Mcp Server is actively maintained — last commit was 0 days ago. It has 8 GitHub stars.

Yugabytedb Mcp Server

Name: Yugabytedb Mcp Server
Author: yugabyte

Official

by yugabyte

MCP Server to interact with data in YugabyteDB

8 2 tools GitHub

No known CVEs

Apache-2.0 license

Actively maintained

Last commit 0d ago

Works with most clients

Transport: stdio, http

2 tools · ~116 tok

Grade A · 0.1% of 200K ctx

Edit this pageView history

Data

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "yugabytedb-mcp-docker": {
      "args": [
        "run",
        "--rm",
        "-i",
        "-e",
        "YUGABYTEDB_URL=dbname=yugabyte host=host.docker.internal port=5433 user=yugabyte password=yugabyte load_balance=false",
        "mcp/yugabytedb"
      ],
      "command": "docker"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/yugabytedb-mcp-server)](https://mcppedia.org/s/yugabytedb-mcp-server)

Read me

What Yugabytedb Mcp Server does

An MCP server implementation for YugabyteDB that allows LLMs to directly interact with your database.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

72/100across 5 weighted dimensions

How we score →

0255075100

−28

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (2)

Click any tool to inspect its schema.

~116 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Yugabytedb Mcp Server safe to use?: Yugabytedb Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install Yugabytedb Mcp Server?: Yugabytedb Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Yugabytedb Mcp Server do?: Yugabytedb Mcp Server provides 2 tools: list_tables, run_query. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Yugabytedb Mcp Server?: Yugabytedb Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is Yugabytedb Mcp Server actively maintained?: Yugabytedb Mcp Server is actively maintained — last commit was 0 days ago. It has 8 GitHub stars.

Similar servers

Others in data

View all →

PostgreSQL MCP Server98

Query and manage PostgreSQL databases directly from AI assistants

87.9k 1

Dbhub96

Zero-dependency, token-efficient database MCP server for Postgres, MySQL, SQL Server, MariaDB, SQLite.

3.1k 2

Firecrawl Mcp Server95

🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM clients.

6.8k 4

Supabase MCP Server95

Manage Supabase projects — databases, auth, storage, and edge functions

2.8k 4

MCP Security Weekly

Get CVE alerts and security updates for Yugabytedb Mcp Server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Data

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "yugabytedb-mcp-docker": {
      "args": [
        "run",
        "--rm",
        "-i",
        "-e",
        "YUGABYTEDB_URL=dbname=yugabyte host=host.docker.internal port=5433 user=yugabyte password=yugabyte load_balance=false",
        "mcp/yugabytedb"
      ],
      "command": "docker"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/yugabytedb-mcp-server)](https://mcppedia.org/s/yugabytedb-mcp-server)

Read me

What Yugabytedb Mcp Server does

An MCP server implementation for YugabyteDB that allows LLMs to directly interact with your database.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

YugabyteDB MCP Server

An MCP server for YugabyteDB and PostgreSQL — lets LLMs (Claude Desktop, Cursor, Windsurf, etc.) summarize schemas, run read-only queries, and execute write statements behind a configurable guardrail layer.

Features

summarize_database — list tables with columns and row counts for a schema (read-only)
run_read_only_query — execute a SELECT under BEGIN READ ONLY; results returned as JSON (read-only)
run_write_query — INSERT/UPDATE/DELETE/MERGE/TRUNCATE/DDL gated by a guardrail blocklist (destructive, disabled by default — enable with --enable-write-query or YB_MCP_ENABLE_WRITE_QUERY=true)

Defense in depth: the write tool is annotated destructiveHint: true, so Claude Desktop surfaces a confirmation prompt before every call even when the guardrails would let the statement through.

Optional OAuth (AWS Cognito) and Origin-header validation for self-hosted remote deployments.

Prerequisites

Python 3.10+
uv (recommended) or pip
A reachable YugabyteDB or PostgreSQL database
An MCP client (Claude Desktop, Cursor, Windsurf, etc.)

Installation

Three install options, in roughly the order of how end users will reach for them:

# uvx — no install at all; fetches and runs on demand. Handy for one-off use
# and also the form the MCPB Desktop extension uses internally.
uvx yugabytedb-mcp-server --help

# pipx — installs to an isolated venv, puts the script on $PATH.
pipx install yugabytedb-mcp-server

# uv tool — same idea, uv-managed.
uv tool install yugabytedb-mcp-server

# pip — system-level or current-venv install.
pip install yugabytedb-mcp-server

After any of the persistent installs (pipx / uv tool / pip), verify with:

yugabytedb-mcp --help
# or, equivalently:
yugabytedb-mcp-server --help

Both console scripts are registered and point at the same entry point — yugabytedb-mcp is the short form, yugabytedb-mcp-server matches the package name and is what uvx resolves to by default.

Pre-release note: while v2 is in release-candidate (e.g. 2.0.0rc2), default installs won't pick it up. For now, install with an explicit version (pipx install yugabytedb-mcp-server==2.0.0rc2) or with --pip-args='--pre'. This goes away once 2.0.0 stable is published.

For development from source, see Development below.

Configuration

Environment Variable	CLI flag	Required	Description
`YUGABYTEDB_URL`	`--yugabytedb-url`	Yes	libpq connection string (e.g. `host=… port=5433 dbname=… user=… password=…`).
`YB_MCP_TRANSPORT`	`--transport`	No	`stdio` (default) or `http`.
`YB_MCP_STATELESS_HTTP`	`--stateless-http`	No	`true` enables stateless Streamable-HTTP — required for multi-replica self-hosted deployments.
`YB_MCP_MAX_INSERT_ROWS`	`--max-insert-rows`	No	Reject INSERT … VALUES with more rows than this. Default `1000`.
`YB_MCP_REQUIRE_WHERE_ON_UPDATE`	`--require-where-on-update`	No	Reject UPDATE without a WHERE clause. Default `false`.
`YB_MCP_REQUIRE_WHERE_ON_DELETE`	`--require-where-on-delete`	No	Reject DELETE without a WHERE clause. Default `false`.
`YB_MCP_ENABLE_WRITE_QUERY`	`--enable-write-query`	No	Enable the `run_write_query` tool. Default `false` (write tool disabled).
`MCP_AUTH_PROVIDER`	`--mcp-auth-provider`	No	`cognito` (tested) or `oidc` (untested). Leave unset to disable auth.
`YB_MCP_IDENTITY_CLAIM`	`--identity-claim`	No	JWT claim to use as the DB role identifier for per-user `SET ROLE`. Default `email`.
`YB_MCP_IDENTITY_TRANSFORM`	`--identity-transform`	No	Transform applied to the claim before using as a DB role: `none` (default) or `strip_domain` (strips `@…` from emails).
`MCP_BASE_URL`	—	When auth enabled	Public base URL the server is reachable at (e.g. `https://mcp.example.com`).
`MCP_ALLOWED_OR

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

72/100across 5 weighted dimensions

How we score →

0255075100

−28

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (2)

Click any tool to inspect its schema.

~116 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Yugabytedb Mcp Server safe to use?: Yugabytedb Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install Yugabytedb Mcp Server?: Yugabytedb Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Yugabytedb Mcp Server do?: Yugabytedb Mcp Server provides 2 tools: list_tables, run_query. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Yugabytedb Mcp Server?: Yugabytedb Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is Yugabytedb Mcp Server actively maintained?: Yugabytedb Mcp Server is actively maintained — last commit was 0 days ago. It has 8 GitHub stars.