oci ghcr.io/nethinwei/sql-mcp-server:0.1.10stdioupdated 1mo ago
The governed SQL gateway for untrusted AI agents.
O que dá para fazer com SQL MCP Server?
SQL MCP Server
The governed SQL gateway for untrusted AI agents.
面向不可信 AI Agent 的受控 SQL 数据访问网关。通过显式 Entity、关系代数 IR 和 参数化 codegen 访问 PostgreSQL、MySQL 与 OceanBase,不接受任意 SQL,不提供 DDL。
核心差异
- 确定性执行:Agent 只能组合受控工具和白名单 IR;
- 字段与行治理:RBAC、字段 ACL、row policy 和 mask 统一强制;
- 成本可控:EXPLAIN 预筛、结果上限、超时和 session/tenant 预算;
- 默认拒绝:安全能力无法证明时 fail closed;
- 可审计:配置热重载、异步审计和 OpenTelemetry hook。
运行时安全行为以安全模型为准;Provider 验证边界与证据层级 以兼容矩阵为准;威胁、控制与剩余风险见 威胁模型。所有对外声明的证据汇总见 架构、安全边界与证据索引。不以本页摘要为准。
五分钟体验
只需 Docker 与 Docker Compose:
docker compose -f examples/quickstart/compose.yaml up -d --wait
curl -fsS http://127.0.0.1:8080/healthz
完整的 MCP Inspector 调用、tenant 隔离、mask 和拒绝场景见 五分钟快速体验。
安装与接入
源码构建要求 Go 1.25.12+ 和一个已验证数据库版本:
git clone https://github.com/nethinwei/sql-mcp-server.git
cd sql-mcp-server
make build
- Cursor、Claude Desktop 和 VS Code 的 stdio 模板:
examples/clients/(核对结论见 客户端接入核对); - 完整配置模板:
examples/config.example.yaml; - CLI、启动、热重载和升级:运行与运维;
- 魔搭分发展示:ModelScope 上架与使用。
按角色阅读
首次体验与集成
- 五分钟快速体验:唯一完整 Demo 与 Inspector 示例;
- 配置参考:公开 YAML 配置的唯一事实源;
- Provider 兼容性与 支持版本:当前能力和验证边界。
部署与安全
- 运行与运维:CLI、生命周期、监控和升级;
- 安全模型:运行时安全行为的唯一事实源;
- 威胁模型:威胁、控制、测试证据与剩余风险;
- SECURITY.md:漏洞披露流程。
开发与维护
版本与规划
- 当前 GA:
v0.1.10(发布说明); - 全版本摘要:CHANGELOG;历史能力与迁移: 发布说明索引;
- 未发布产品规划:Roadmap;
- 数据库候选:Provider Roadmap。
许可
Instalação
Adicione SQL MCP Server ao seu cliente. Escolha o que você usa.
claude mcp add ghcr-io-nethinwei-sql-mcp-server-0-1-10 -- docker run -i --rm ghcr.io/nethinwei/sql-mcp-server:0.1.10codex mcp add ghcr-io-nethinwei-sql-mcp-server-0-1-10 -- docker run -i --rm ghcr.io/nethinwei/sql-mcp-server:0.1.10amp mcp add ghcr-io-nethinwei-sql-mcp-server-0-1-10 -- docker run -i --rm ghcr.io/nethinwei/sql-mcp-server:0.1.10{
"mcpServers": {
"ghcr-io-nethinwei-sql-mcp-server-0-1-10": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/nethinwei/sql-mcp-server:0.1.10"
]
}
}
}Add to `claude_desktop_config.json`, then restart Claude Desktop.
{
"mcpServers": {
"ghcr-io-nethinwei-sql-mcp-server-0-1-10": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/nethinwei/sql-mcp-server:0.1.10"
]
}
}
}Add to `~/.cursor/mcp.json`, or `.cursor/mcp.json` for a single project.
code --add-mcp '{"name":"ghcr-io-nethinwei-sql-mcp-server-0-1-10","command":"docker","args":["run","-i","--rm","ghcr.io/nethinwei/sql-mcp-server:0.1.10"]}'Or add the block manually to `.vscode/mcp.json` under `servers`.
{
"mcpServers": {
"ghcr-io-nethinwei-sql-mcp-server-0-1-10": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/nethinwei/sql-mcp-server:0.1.10"
]
}
}
}Add to `~/.codeium/windsurf/mcp_config.json`.
{
"mcpServers": {
"ghcr-io-nethinwei-sql-mcp-server-0-1-10": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/nethinwei/sql-mcp-server:0.1.10"
]
}
}
}Add to `cline_mcp_settings.json` via the MCP Servers panel.
{
"mcpServers": {
"ghcr-io-nethinwei-sql-mcp-server-0-1-10": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/nethinwei/sql-mcp-server:0.1.10"
]
}
}
}Add to `~/.gemini/settings.json`.
{
"mcpServers": {
"ghcr-io-nethinwei-sql-mcp-server-0-1-10": {
"type": "local",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/nethinwei/sql-mcp-server:0.1.10"
],
"tools": [
"*"
]
}
}
}Add to `~/.copilot/mcp-config.json`, or run `/mcp add` inside the CLI.
{
"context_servers": {
"ghcr-io-nethinwei-sql-mcp-server-0-1-10": {
"command": {
"path": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/nethinwei/sql-mcp-server:0.1.10"
]
}
}
}
}Add to your Zed `settings.json`.
docker run -i --rm ghcr.io/nethinwei/sql-mcp-server:0.1.10Run `goose configure`, choose **Add Extension → Command-line Extension**, and paste this command.
Pontuação
39 / 100
Incompleta
- Documentação22/25
- Manutenção22/25
- Confiança6/20
- Capacidade0/15
- Instalação12/15
- Documents what it does and how to connect
- Has a resolvable package or endpoint
- Exposes at least one tool, prompt or resource
- README has substantive content
- Includes a code example
- Documents its configuration
- Mentions credentials or security posture
- Last commit 51 days ago
- Has a release history
- Repository is not archived
- No licence detected
- Namespace verified in the official MCP registry
- Claimed by its owner
- Published under an organisation
- 0 tool(s) documented
- Provides prompt templates
- Provides resources
- 12 documented install method(s)
- Published to a package registry
- Offers a hosted endpoint — no local install
Histórico de versões
| Versões | Publicada |
|---|---|
| 0.1.10Mais recente | 12 de jul. de 2026 |
| 0.1.9 | 12 de jul. de 2026 |
| 0.1.8 | 12 de jul. de 2026 |
| 0.1.6 | 11 de jul. de 2026 |
| 0.1.5 | 11 de jul. de 2026 |
| 0.1.4 | 11 de jul. de 2026 |
| 0.1.3 | 11 de jul. de 2026 |
| 0.1.3-rc.4 | 11 de jul. de 2026 |
| 0.1.3-rc.3 | 11 de jul. de 2026 |