oci ghcr.io/nethinwei/sql-mcp-server:0.1.10stdioupdated 1mo ago
The governed SQL gateway for untrusted AI agents.
Was kannst du mit SQL MCP Server machen?
SQL MCP Server
The governed SQL gateway for untrusted AI agents.
面向不可信 AI Agent 的受控 SQL 数据访问网关。通过显式 Entity、关系代数 IR 和 参数化 codegen 访问 PostgreSQL、MySQL 与 OceanBase,不接受任意 SQL,不提供 DDL。
核心差异
- 确定性执行:Agent 只能组合受控工具和白名单 IR;
- 字段与行治理:RBAC、字段 ACL、row policy 和 mask 统一强制;
- 成本可控:EXPLAIN 预筛、结果上限、超时和 session/tenant 预算;
- 默认拒绝:安全能力无法证明时 fail closed;
- 可审计:配置热重载、异步审计和 OpenTelemetry hook。
运行时安全行为以安全模型为准;Provider 验证边界与证据层级 以兼容矩阵为准;威胁、控制与剩余风险见 威胁模型。所有对外声明的证据汇总见 架构、安全边界与证据索引。不以本页摘要为准。
五分钟体验
只需 Docker 与 Docker Compose:
docker compose -f examples/quickstart/compose.yaml up -d --wait
curl -fsS http://127.0.0.1:8080/healthz
完整的 MCP Inspector 调用、tenant 隔离、mask 和拒绝场景见 五分钟快速体验。
安装与接入
源码构建要求 Go 1.25.12+ 和一个已验证数据库版本:
git clone https://github.com/nethinwei/sql-mcp-server.git
cd sql-mcp-server
make build
- Cursor、Claude Desktop 和 VS Code 的 stdio 模板:
examples/clients/(核对结论见 客户端接入核对); - 完整配置模板:
examples/config.example.yaml; - CLI、启动、热重载和升级:运行与运维;
- 魔搭分发展示:ModelScope 上架与使用。
按角色阅读
首次体验与集成
- 五分钟快速体验:唯一完整 Demo 与 Inspector 示例;
- 配置参考:公开 YAML 配置的唯一事实源;
- Provider 兼容性与 支持版本:当前能力和验证边界。
部署与安全
- 运行与运维:CLI、生命周期、监控和升级;
- 安全模型:运行时安全行为的唯一事实源;
- 威胁模型:威胁、控制、测试证据与剩余风险;
- SECURITY.md:漏洞披露流程。
开发与维护
版本与规划
- 当前 GA:
v0.1.10(发布说明); - 全版本摘要:CHANGELOG;历史能力与迁移: 发布说明索引;
- 未发布产品规划:Roadmap;
- 数据库候选:Provider Roadmap。
许可
Installation
SQL MCP Server zu deinem Client hinzufügen. Wähl den, den du nutzt.
claude mcp add ghcr-io-nethinwei-sql-mcp-server-0-1-10 -- docker run -i --rm ghcr.io/nethinwei/sql-mcp-server:0.1.10codex mcp add ghcr-io-nethinwei-sql-mcp-server-0-1-10 -- docker run -i --rm ghcr.io/nethinwei/sql-mcp-server:0.1.10amp mcp add ghcr-io-nethinwei-sql-mcp-server-0-1-10 -- docker run -i --rm ghcr.io/nethinwei/sql-mcp-server:0.1.10{
"mcpServers": {
"ghcr-io-nethinwei-sql-mcp-server-0-1-10": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/nethinwei/sql-mcp-server:0.1.10"
]
}
}
}Add to `claude_desktop_config.json`, then restart Claude Desktop.
{
"mcpServers": {
"ghcr-io-nethinwei-sql-mcp-server-0-1-10": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/nethinwei/sql-mcp-server:0.1.10"
]
}
}
}Add to `~/.cursor/mcp.json`, or `.cursor/mcp.json` for a single project.
code --add-mcp '{"name":"ghcr-io-nethinwei-sql-mcp-server-0-1-10","command":"docker","args":["run","-i","--rm","ghcr.io/nethinwei/sql-mcp-server:0.1.10"]}'Or add the block manually to `.vscode/mcp.json` under `servers`.
{
"mcpServers": {
"ghcr-io-nethinwei-sql-mcp-server-0-1-10": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/nethinwei/sql-mcp-server:0.1.10"
]
}
}
}Add to `~/.codeium/windsurf/mcp_config.json`.
{
"mcpServers": {
"ghcr-io-nethinwei-sql-mcp-server-0-1-10": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/nethinwei/sql-mcp-server:0.1.10"
]
}
}
}Add to `cline_mcp_settings.json` via the MCP Servers panel.
{
"mcpServers": {
"ghcr-io-nethinwei-sql-mcp-server-0-1-10": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/nethinwei/sql-mcp-server:0.1.10"
]
}
}
}Add to `~/.gemini/settings.json`.
{
"mcpServers": {
"ghcr-io-nethinwei-sql-mcp-server-0-1-10": {
"type": "local",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/nethinwei/sql-mcp-server:0.1.10"
],
"tools": [
"*"
]
}
}
}Add to `~/.copilot/mcp-config.json`, or run `/mcp add` inside the CLI.
{
"context_servers": {
"ghcr-io-nethinwei-sql-mcp-server-0-1-10": {
"command": {
"path": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/nethinwei/sql-mcp-server:0.1.10"
]
}
}
}
}Add to your Zed `settings.json`.
docker run -i --rm ghcr.io/nethinwei/sql-mcp-server:0.1.10Run `goose configure`, choose **Add Extension → Command-line Extension**, and paste this command.
Score
39 / 100
Unvollständig
- Dokumentation22/25
- Pflege22/25
- Vertrauen6/20
- Funktionsumfang0/15
- Installation12/15
- Documents what it does and how to connect
- Has a resolvable package or endpoint
- Exposes at least one tool, prompt or resource
- README has substantive content
- Includes a code example
- Documents its configuration
- Mentions credentials or security posture
- Last commit 51 days ago
- Has a release history
- Repository is not archived
- No licence detected
- Namespace verified in the official MCP registry
- Claimed by its owner
- Published under an organisation
- 0 tool(s) documented
- Provides prompt templates
- Provides resources
- 12 documented install method(s)
- Published to a package registry
- Offers a hosted endpoint — no local install
Versionsverlauf
| Versionen | Veröffentlicht |
|---|---|
| 0.1.10Aktuell | 12. Juli 2026 |
| 0.1.9 | 12. Juli 2026 |
| 0.1.8 | 12. Juli 2026 |
| 0.1.6 | 11. Juli 2026 |
| 0.1.5 | 11. Juli 2026 |
| 0.1.4 | 11. Juli 2026 |
| 0.1.3 | 11. Juli 2026 |
| 0.1.3-rc.4 | 11. Juli 2026 |
| 0.1.3-rc.3 | 11. Juli 2026 |