Skip to main content
Glama
HumanSamadian

Data Nexus MCP

Data Nexus MCP

A modular, secure platform for connecting to SQL and NoSQL databases via REST API, MCP (Model Context Protocol), and a Vue.js Web UI.

Architecture

┌─────────────┐     ┌──────────────┐     ┌─────────────────┐
│   Web UI    │────▶│  REST API    │────▶│ core-db-command │
│  (Vue.js)   │     │  (FastAPI)   │     │  (Python lib)   │
└─────────────┘     └──────┬───────┘     └────────┬────────┘
                           │                       │
                    ┌──────▼───────┐               │
                    │  MCP Server  │───────────────┘
                    └──────┬───────┘
                           │
                    ┌──────▼───────┐
                    │  MCP Client  │──▶ AI Agents / LLMs
                    └──────────────┘

Modules

Module

Package

Description

core-db-command

core_db_command/

Plugin-based Python library for all database drivers

rest-api-command

rest_api_command/

FastAPI REST layer with OAuth2/LDAP/basic auth

mcp-server

mcp_server/

MCP tools: query_database, get_schema, list_tables, describe_table, execute_sql

mcp-client

mcp_client/

MCP client bridge for agent integration

web-ui

web-ui/

Vue 3 + Pinia + Monaco Editor query studio

config

config/

YAML connection definitions with ${ENV} substitution

Related MCP server: Database MCP Server

Supported Database Types

The driver registry supports 50+ database types across 13 categories:

  • Relational: PostgreSQL, MySQL, MSSQL, Oracle, CockroachDB, TiDB, YugabyteDB, TimescaleDB, pgvector

  • Document: MongoDB, DocumentDB, Firestore, Couchbase (stub)

  • Key-Value: Redis, DynamoDB, Memcached/etcd/RocksDB (stub)

  • Wide-Column: Cassandra, ScyllaDB, Bigtable/HBase (stub)

  • Graph: Neo4j, Neptune/JanusGraph/ArangoDB (stub)

  • Time-Series: InfluxDB, ClickHouse, Prometheus/QuestDB (stub)

  • Vector: Qdrant, Weaviate, Milvus, Pinecone

  • Search: Elasticsearch, OpenSearch, Splunk/Solr (stub)

  • Warehouse: BigQuery, Snowflake, Redshift/Databricks (stub)

  • Multi-Model: Cosmos DB, OrientDB (stub)

  • Embedded: SQLite, DuckDB, Realm/LMDB (stub)

  • Ledger: QLDB/BigchainDB (stub)

  • NewSQL: Spanner (stub)

Fully implemented drivers include PostgreSQL, MySQL, MSSQL, Oracle, MongoDB, Redis, SQLite, DuckDB, Elasticsearch, ClickHouse, Neo4j, InfluxDB, Cassandra, DynamoDB, BigQuery, Snowflake, Qdrant, Weaviate, Milvus, Pinecone, Cosmos DB, and Firestore. Stub drivers are registered and extensible.

Quick Start

Prerequisites

  • Python 3.11+

  • Node.js 20+ (for Web UI development)

  • Docker & Docker Compose (optional)

1. Install Python dependencies

cp .env.example .env
pip install -e ".[dev]"

2. Configure connections

Edit config/connections.yaml and set secrets via environment variables:

connections:
  - name: postgres_prod
    type: postgresql
    host: localhost
    port: 5432
    database: mydb
    user: readonly_user
    password: ${PG_PASSWORD}

3. Start the REST API

db-rest-api
# or: uvicorn rest_api_command.app:app --reload

API docs: http://localhost:8000/docs

4. Start the Web UI (development)

cd web-ui
cp .env.example .env
npm install
npm run dev

Open http://localhost:5173 — default credentials: admin / changeme

5. Run with Docker Compose

docker compose up -d

Services:

REST API Endpoints

Method

Path

Description

GET

/api/connections

List connections (no credentials)

POST

/api/db/{name}/query

Parameterized query

POST

/api/db/{name}/sql

Raw SQL / native command

GET

/api/db/{name}/schema

Database schema

GET

/api/db/{name}/tables

List tables/collections

GET

/api/db/{name}/tables/{table}/describe

Table structure

GET/POST

/api/query-history

Query history

MCP Server

Configure in .env or Cursor MCP env:

MCP_REST_API_URL=http://localhost:8000
# Option A: bearer token (when REST_API_AUTH_MODE=oauth2)
MCP_REST_API_TOKEN=<jwt-from-/api/auth/token>
# Option B: username/password (works with basic auth; auto-fetches JWT if oauth2)
MCP_REST_API_USER=admin
MCP_REST_API_PASSWORD=changeme

Run:

db-mcp-server

Add to Cursor/Claude MCP config:

{
  "mcpServers": {
    "data-nexus-mcp": {
      "command": "db-mcp-server",
      "cwd": "/path/to/data_nexus_mcp",
      "env": {
        "MCP_REST_API_URL": "http://localhost:8000",
        "MCP_REST_API_USER": "admin",
        "MCP_REST_API_PASSWORD": "changeme"
      }
    }
  }
}

Note: REST_API_* variables belong on the REST API process (db-rest-api), not in the MCP server config.

MCP Client

db-mcp-client                    # list available tools
db-mcp-client query local_sqlite "SELECT 1"

Authentication

Set REST_API_AUTH_MODE to one of:

  • basic — HTTP Basic Auth (default for development)

  • oauth2 — JWT bearer tokens via /api/auth/token

  • ldap — LDAP bind (requires REST_API_LDAP_SERVER and REST_API_LDAP_BASE_DN)

Adding a New Driver

  1. Create core_db_command/drivers/mydb.py

  2. Subclass BaseDriver and set driver_type

  3. Decorate with @DriverRegistry.register

  4. Import in core_db_command/drivers/registry_loader.py

from core_db_command.base import BaseDriver, DriverRegistry

@DriverRegistry.register
class MyDBDriver(BaseDriver):
    driver_type = "mydb"

    async def connect(self): ...
    async def disconnect(self): ...
    async def query(self, query, params=None): ...
    async def execute(self, command, params=None): ...
    async def list_tables(self, schema=None): ...
    async def describe_table(self, table, schema=None): ...

Testing

pytest tests/ -v

Security Notes

  • Credentials are never returned by the REST API or MCP server

  • Secrets must use ${ENV_VAR} placeholders in YAML config

  • All API endpoints require authentication

  • Query input is validated and length-limited

Project Structure

data-nexus-mcp/
├── core_db_command/       # Core library + drivers
├── rest_api_command/      # FastAPI REST API
├── mcp_server/            # MCP server
├── mcp_client/            # MCP client
├── web-ui/                # Vue.js frontend
├── config/                # YAML connection config
├── tests/                 # Unit tests
├── docker-compose.yml
├── Dockerfile
└── pyproject.toml

License

Apache 2.0

Available Tools

5 tools
describe_tableA

Describe the structure of a specific table or collection.

ParametersJSON Schema
NameRequiredDescriptionDefault
tableYes
schemaNo
connection_nameYes

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description's verb 'describe' implies a read-only, non-destructive operation, which is basic transparency. However, it doesn't disclose any additional behaviors (e.g., permission requirements, response shape, or limitations) beyond that.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single sentence that is direct and front-loaded with the core action and target. Every word earns its place, with zero waste.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is simple and has an output schema to document return values, but the description lacks context about relationships to sibling tools and does not mention the need for connection_name or that schema is optional. It is complete for a trivial description but not for a comprehensive agent-facing tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description adds no meaning to the parameters. The schema titles (table, schema, connection_name) are self-explanatory, but the description doesn't explain their roles or any requirements beyond the schema's 'required' fields.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Describe') and resource ('structure of a specific table or collection'), clearly distinguishing it from siblings like query_database and execute_sql, which run queries. It precisely communicates what the tool does.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage when you need the structure of one specific table, but does not explicitly mention when to avoid it or compare with get_schema or list_tables. No exclusions or alternatives are provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

execute_sqlB

Execute raw SQL or native database command on a named connection.

ParametersJSON Schema
NameRequiredDescriptionDefault
paramsNo
commandYes
connection_nameYes

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Since no annotations are provided, the description carries the full burden of behavioral disclosure. It mentions 'raw SQL or native database command', implying potential write operations and risks, but fails to explicitly state that commands can modify data, require admin privileges, or that results may vary by connection type. The output schema exists but is not referenced.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence of 11 words, making it very concise. It includes the essential elements (execute, raw SQL, named connection) without fluff. However, the brevity leaves out important contextual details that could be added without significant lengthening.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (3 parameters, no annotations, 0% schema coverage, output schema present), the description is incomplete. It omits the role of 'params', fails to explain what 'native command' means, and does not address security or error behavior. The output schema exists but is not mentioned, so the agent cannot infer what will be returned.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It defines 'connection_name' and 'command' but provides no additional meaning beyond the schema fields. The 'params' parameter is an optional object described only as 'anyOf object or null', with no explanation of its role (e.g., parameterized queries). The description adds minimal value over the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool executes raw SQL or native database commands on a named connection. This distinguishes it from siblings like 'query_database' and 'describe_table' by emphasizing raw execution and the need for a named connection.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description does not specify when to use this tool versus siblings like 'query_database' or 'list_tables'. It lacks guidance on prerequisites (e.g., connection setup, permissions) and when not to use it (e.g., for read-only queries or exploratory analysis).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_schemaC

Retrieve schema information for a named database connection.

ParametersJSON Schema
NameRequiredDescriptionDefault
connection_nameYes

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description carries the full burden of behavioral disclosure. It does not mention whether the operation is read-only, requires permissions, or what happens if the connection_name is invalid. The minimal phrasing 'Retrieve schema information' provides no insight into side effects, errors, or performance implications.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence that is front-loaded and contains no unnecessary words. It is concise and easy to parse. However, it could be slightly more informative without losing conciseness, such as noting the output schema or the nature of the schema information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has an output schema, the description does not need to explain return values, but it still lacks context about how to use the connection_name parameter, what the tool returns (beyond schema info), and how it relates to sibling tools. The presence of siblings like 'list_tables' and 'describe_table' makes the lack of differentiation a significant gap. The description is too minimal to be fully actionable.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has a single parameter 'connection_name' with type string, but the description adds no meaning beyond the schema. With 0% schema description coverage, the description should explain what constitutes a valid connection name or how to obtain it. It does not, so it provides no added value for parameter understanding.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool retrieves schema information for a named database connection. It uses a specific verb-resource pair ('Retrieve schema information') and implies a scope of a connection, which distinguishes it from sibling tools like 'describe_table' that focus on individual tables. However, it does not specify what 'schema information' includes (e.g., tables, columns, types), which slightly reduces precision.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives such as 'list_tables' or 'describe_table'. There are no prerequisites, exclusions, or context about valid connection names. The description lacks any advisory information to help an agent decide between siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_tablesC

List all tables or collections in a named database connection.

ParametersJSON Schema
NameRequiredDescriptionDefault
schemaNo
connection_nameYes

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description must fully disclose behavioral traits. It states the tool 'list[s]' tables, implying a read-only operation, but does not explicitly confirm non-destructiveness, error conditions (e.g., invalid connection_name), rate limits, or behavior when 'schema' is null vs. specified. These are important gaps for a database connection tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single concise sentence with no wasted words. However, it is so brief that it sacrifices information needed for tool selection and correct invocation. Slightly more detail (e.g., about the schema parameter) could be added without sacrificing conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema (which helps with return values), the description lacks essential context about input semantics (especially the schema parameter), error handling, and behavioral guarantees. For a tool with 0% schema description coverage and no annotations, this description is insufficiently complete for correct agent invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, meaning the description must compensate entirely. While 'connection_name' is mentioned in the description ('named database connection'), the 'schema' parameter (which is optional and can be null) is not explained at all. The description does not clarify how 'schema' affects the listing (e.g., filter by schema, ignored if null). This is a significant gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('List') and resource ('tables or collections') and context ('in a named database connection'), clearly distinguishing this tool from siblings like 'describe_table' (which describes a single table) and 'get_schema' (which retrieves schema-level metadata). It leaves no ambiguity about what this tool returns.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides minimal usage guidance. It does not specify when to use this tool versus 'get_schema' or 'describe_table', nor does it mention any prerequisites (e.g., connection must exist). It lacks exclusion criteria or alternative suggestions, relying on the user/agent to infer context from sibling names.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

query_databaseD

Run a parameterized query on a named database connection.

ParametersJSON Schema
NameRequiredDescriptionDefault
queryYes
paramsNo
connection_nameYes

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

D1.8/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations exist, so the description carries full burden for behavioral disclosure. It fails to indicate whether the tool is read-only, whether it modifies data, what permissions are needed, or any side effects. The agent cannot determine safety or appropriateness from the description alone.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely short (one sentence), but this brevity comes at the cost of completeness. It is under-specified rather than concise. Every sentence should earn its place; here, it leaves critical gaps.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema (not shown), the description is incomplete. It does not explain return values, error handling, connection requirements, or the role of 'params'. For a tool with 3 parameters and zero annotations, much more context is needed to be minimally viable.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, meaning the schema provides no parameter descriptions. The description adds no value: it does not explain the purpose of 'query', 'params', or 'connection_name', nor how to structure the 'params' object. The agent is left guessing parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description 'Run a parameterized query on a named database connection' clearly states the verb and resource, but it does not differentiate itself from the sibling tool 'execute_sql', which likely performs a similar function. The term 'parameterized query' hints at safety but is not explicit enough to distinguish usage.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus siblings like 'get_schema' or 'execute_sql'. There is no mention of prerequisites, when-not-to-use, or alternatives. The agent must rely on the tool name alone to infer context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 5 tool updatesv0.1.0
    • First observeddescribe_table
    • First observedexecute_sql
    • First observedget_schema
    • First observedlist_tables
    • First observedquery_database

TDQS

B3/5.0
Disambiguation4/5

Tools are mostly distinct: query_database and execute_sql both run queries but one is parameterized and the other raw; get_schema, list_tables, describe_table each target different metadata. Minor potential for confusion between the two query tools, but descriptions clarify the difference.

Naming Consistency5/5

All tool names follow a consistent verb_noun pattern with lowercase and underscores: query_database, get_schema, list_tables, describe_table, execute_sql. No mixed conventions or irregularities.

Tool Count5/5

5 tools are well-scoped for a database MCP server. The set covers core operations—querying, schema retrieval, table listing, structure description, raw execution—without being overwhelming or too sparse.

Completeness4/5

The tool surface covers essential query and schema exploration operations. The execute_sql tool can handle DDL, but there are no dedicated create/alter/drop tools; transaction commands are also missing. Overall, it's nearly complete for a typical read-heavy interaction pattern.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    C
    maintenance
    Enables LLMs and agents to interact with relational databases (SQL Server, MySQL, PostgreSQL) through MCP tools. Supports executing queries, inserting records, listing tables, and exposing database schemas with secure credential management.
    -
  • A
    license
    Not graded
    quality
    C
    maintenance
    Provides universal database operations for AI assistants through MCP, supporting 40+ databases including PostgreSQL, MySQL, MongoDB, Redis, and SQLite with built-in introspection tools for schema exploration.
    8
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to query live schema, lineage, and query-context across data warehouses, dbt projects, orchestration systems, and BI tools via MCP tools.
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Give your AI agent safe, plain-English access to any database via MCP. Ask questions in natural language, get SQL queries and results, run read-only queries, and set up scheduled alerts.
    9
    54
    MIT

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/HumanSamadian/data-nexus-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server