DBHub MCP Server

SQL databases and schema exploration accessible to MCP-compatible AI clients.

Data last scanned today · Reviewed yesterday

532 tools★ 3,181TypeScriptMIT

Overview

DBHub acts as a lightweight gateway between AI environments and a broad range of database systems, including PostgreSQL, MySQL, MariaDB, SQL Server, and SQLite. It utilizes TOML-based configuration to enable concurrent connections, allowing developers to manage multiple database environments through a single interface within tools like Claude Desktop or Cursor. Designed for token efficiency, the server provides two primary tools: execute_sql for performing queries and search_objects for schema discovery. It incorporates built-in safety features such as row limits, query timeouts, and support for SSH tunneling or SSL/TLS encryption to facilitate secure database interaction.

Our verdict

With a security score of 38/100, this server is considered high-risk. The assessment highlights a critical lack of authentication, meaning any user with access to the configuration can interact with the connected databases. Furthermore, the absence of an enforced read-only mode by default, combined with the fact that it is a community-maintained project rather than an official vendor release, suggests it should be used cautiously in non-sensitive development environments only.

Supports five common database types via one interface.
Features include row limiting and query timeout guardrails.
Maintained by 28 contributors with a high star count.
Includes seven direct dependencies for a small supply-chain surface.

No authentication method implemented for user access.
Lacks an enforced read-only mode across all operations.
Not an official product maintained by the vendor.
Has not yet undergone formal editorial security review.

Setup

Claude Desktop

{
  "mcpServers": {
    "dbhub": {
      "args": [
        "-y",
        "dbhub"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

No read-only mode — running this grants full read/write access.
No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

Tool	Description	Risk
execute_sql	Execute SQL queries with transaction support and safety controls	medium
search_objects	Search and explore database schemas, tables, columns, indexes, and procedures with progressive disclosure	low

Compatibility

Client	Local	Docker	Remote	Read-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

›Which databases are supported by DBHub?

DBHub supports PostgreSQL, MySQL, MariaDB, SQL Server, and SQLite.

›Does DBHub support connecting to multiple databases at once?

Yes, you can connect to multiple databases simultaneously by using a TOML configuration file.

›Are there built-in security features to prevent runaway database operations?

Yes, DBHub includes guardrails such as read-only mode, row limiting, and query timeouts.

›How can I secure the HTTP transport in production?

Because the HTTP transport does not authenticate clients, you should bind the server to 127.0.0.1 and protect it using a reverse proxy or firewall.

›What is the difference between the standard installation and the MCP Bundle?

The MCP Bundle runs locally over stdio and is read-only by design, making it suitable for giving teammates restricted database access without OAuth or remote endpoints.

›What are the Node.js requirements for the NPM installation?

The NPM installation requires Node.js version 22.5.0 or higher.