Verified

Turso MCP Server

Turso database management for AI agents using OAuth authentication.

Data last scanned today · Reviewed today

40★ 4MIT

Overview

Turso MCP Server enables direct interaction with Turso Cloud, allowing AI agents to manage organizations, databases, and groups while executing SQL commands. The system utilizes a centralized hosted server at mcp.turso.ai to provide seamless functionality for various AI coding assistants. Integration is simplified through OAuth 2.1 and PKCE, removing the need for manual API token management. Users authenticate via the Turso dashboard, where granular permissions for organizations and groups are minted as scoped tokens, ensuring that the MCP layer itself retains no elevated privileges.

Our verdict

With a security score of 30/100, this server is classified as high-risk. This rating is largely driven by the fact that the server is community-maintained rather than official and has not undergone an independent editorial review. While it implements secure OAuth flows, developers should approach this tool with caution due to the limited oversight, as any potential vulnerabilities in the hosted mcp.turso.ai endpoint would directly impact the agent's database access.

Uses OAuth 2.1 with PKCE for secure authentication.
Zero direct dependencies reduce potential supply-chain vulnerabilities.
Explicitly designed to offload authorization enforcement to Turso APIs.
Provides real documentation for multiple agent integrations.

Maintained by the community rather than the official vendor.
Lacks an independent editorial review of the codebase.
Currently reflects a significant bus-factor risk with one contributor.
Read-only mode and authentication methods remain unreviewed.

Compatibility

Client	Local	Docker	Remote	Read-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

›Do I need to manually generate or copy an API token to use this server?

No, the server uses OAuth 2.1 with PKCE for authentication, meaning there are no API tokens to copy or paste.

›Does the MCP server store my sensitive credentials or elevated privileges?

No, the MCP layer holds no privilege; it forwards a scoped token minted by the Turso dashboard, and the Turso API enforces all org-binding, role, scope, and audit requirements.

›Can I use this server with an MCP-capable client that is not explicitly listed in the documentation?

Yes, any MCP-capable client can connect directly by pointing it to the hosted URL https://mcp.turso.ai/mcp and completing the OAuth login.

›Is it possible to override the default hosted URL for the MCP server?

Yes, you can override the default server URL by setting the TURSO_MCP_URL environment variable.