A
licenseNot graded
qualityA
maintenanceProvides safe, configurable SQL database access via MCP tools, enabling schema introspection, predefined queries, and structured updates with multi-backend support.
2
MIT
fastmcp-sqltools
by atarkowska
Enables SQL database access to MySQL, including listing tables, retrieving schema, and executing queries.
Enables SQL database access to PostgreSQL, including listing tables, retrieving schema, and executing queries.
Enables SQL database access to SQLite, including listing tables, retrieving schema, and executing queries.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@fastmcp-sqltoolslist all tables"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
FastMCP SQL Tools
mcp-name: io.github.atarkowska/fastmcp-sqltools
A Model Context Protocol (MCP) server built with FastMCP that provides SQL database access with support for PostgreSQL, MySQL, and SQLite.
Features
list_tables: List all tables in the database
get_table_schema: Get detailed schema information for a table including columns, types, constraints, and indexes
execute_query: Execute any SQL query (INSERT, UPDATE, DELETE, DDL, etc.)
execute_safe_query: Execute read-only SELECT queries with additional safety checks
Related MCP server: mcp-sqlite3
Supported Databases
PostgreSQL: Full support via asyncpg
MySQL: Full support via aiomysql
SQLite: Full support via aiosqlite
The server automatically detects the database type from the DATABASE_URL environment variable.
Configuration
Add the following to your claude_desktop_config.json:
{
"mcpServers": {
"sql-mcp-tools": {
"command": "uvx",
"args": [
"fastmcp-sqltools"
],
"env": {
"DATABASE_URL": "<your-database-url>"
}
}
}
}Database URL Format
The DATABASE_URL should be in one of the following formats:
PostgreSQL:
postgresql://user:password@host:port/databaseorpostgres://user:password@host:port/databaseMySQL:
mysql://user:password@host:port/databaseSQLite:
sqlite:///path/to/database.db(use three slashes for absolute path)
License
This project is licensed under the GNU Affero General Public License v3.0 (AGPL-3.0). See the LICENSE file for details.
Available Tools
4 toolsexecute_queryB
Execute a SQL query and return results. WARNING: This can execute any SQL including DDL and DML statements.
ParametersJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | SQL query to execute | |
| params | No | Optional list of query parameters for parameterized queries |
Output Schema
ParametersJSON Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
B3.1/5.0
Behavior3/5
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description bears the full burden. It warns that the tool can execute any SQL including DDL and DML, which is a key behavioral trait. However, it lacks details on error behavior, permissions, or response format, limiting transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Conciseness4/5
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise with two sentences and includes a warning line. Every sentence is useful, but the structure could be improved by adding more guidance without increasing length significantly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Completeness2/5
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of a SQL execution tool and the presence of sibling tools, the description is insufficient. It does not explain permissions, error handling, result format, or when to prefer execute_safe_query. The output schema exists but is not described in the tool definition.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Parameters3/5
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, as both parameters have descriptions in the schema ('SQL query to execute' and 'Optional list of query parameters'). The description adds no additional meaning beyond what the schema already provides, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Purpose4/5
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Execute a SQL query and return results', which is a specific verb and resource. However, it does not distinguish from the sibling tool execute_safe_query, which likely restricts queries. The warning about DDL/DML hints at the difference but does not explicitly differentiate.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Usage Guidelines2/5
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool versus alternatives like execute_safe_query. The warning implies caution but does not provide clear usage context or exclusion criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
execute_safe_queryA
Execute a read-only SQL query (SELECT only). This is safer than execute_query as it prevents data modification.
ParametersJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | SQL SELECT query to execute | |
| params | No | Optional list of query parameters for parameterized queries |
Output Schema
ParametersJSON Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
A4.2/5.0
Behavior4/5
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description carries the full burden. It clearly declares the tool is read-only and prevents data modification, which is critical behavioral info. Could be more detailed about error handling or concurrency, but sufficient for a simple read-only tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Conciseness5/5
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences that are front-loaded with the core purpose. No unnecessary words, every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Completeness4/5
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the existence of an output schema and only two parameters, the description provides enough context for correct use. It clarifies the safe nature and distinguishes from siblings. Lacks mention of parameterized queries, but the schema covers that.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Parameters3/5
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, and the description adds minimal value beyond the schema. The schema already describes the 'query' and 'params' parameters adequately; the description does not provide additional semantic guidance.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Purpose5/5
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states that the tool executes a read-only SQL SELECT query, and explicitly distinguishes it from the sibling 'execute_query' by emphasizing safety and prevention of data modification.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Usage Guidelines4/5
Does the description explain when to use this tool, when not to, or what alternatives exist?
It provides guidance that this tool is safer than execute_query for read-only queries, implying when to use it. However, it does not explicitly state when not to use it or mention alternatives beyond execute_query.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_table_schemaB
Get the schema (column definitions) for a specific table.
ParametersJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| schema | No | Database schema name (default: None, uses default schema for the database) | |
| table_name | Yes | Name of the table |
Output Schema
ParametersJSON Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
B3.3/5.0
Behavior2/5
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry the burden of behavioral traits. It does not mention read-only nature, permission requirements, error handling for non-existent tables, or any side effects. The output schema exists but is separate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Conciseness4/5
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, no fluff. Could be slightly expanded to include the optional schema parameter, but currently concise and front-loaded with the core purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Completeness4/5
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with output schema present, the description adequately communicates the core function. However, it lacks details about error conditions or expected behavior when table doesn't exist.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Parameters3/5
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema covers both parameters (table_name required, schema optional) with descriptions. Description adds no extra meaning beyond 'column definitions' for the return value. Baseline 3 due to 100% schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Purpose5/5
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Get' and the resource 'schema (column definitions)' for a specific table. It distinguishes itself from siblings like list_tables (which lists tables) and execute_query (which runs queries).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Usage Guidelines2/5
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool versus alternatives like list_tables or execute_query. The description implies usage for inspecting a table's schema, but does not mention prerequisites or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_tablesB
List all tables in the specified schema.
ParametersJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| schema | No | Database schema name (default: None, uses default schema for the database) |
Output Schema
ParametersJSON Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
B3.1/5.0
Behavior1/5
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description should disclose behavioral traits such as permissions, return format, or side effects. It fails to do so, providing only the basic function. The presence of an output schema mitigates this slightly, but the description itself lacks critical behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Conciseness5/5
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence with no unnecessary words. It is highly concise and front-loaded with the core purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Completeness3/5
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (one optional parameter, output schema exists), the minimal description is borderline adequate. However, it omits any mention of what the output contains (e.g., table names, sizes), which would help an agent fully understand the tool's capabilities.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Parameters3/5
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, and the parameter description in the schema is already informative. The tool description adds no additional meaning beyond what the schema provides, so a baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Purpose5/5
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('list'), resource ('tables'), and scope ('in the specified schema'). It effectively distinguishes from sibling tools like execute_query and get_table_schema, which perform different functions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Usage Guidelines2/5
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives, or any contextual prerequisites. The description simply states what it does without elaborating on appropriate usage scenarios.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
4 tool updates
v0.3.0- First observed
execute_query - First observed
execute_safe_query - First observed
get_table_schema - First observed
list_tables
TDQS
A3.7/5.0
Disambiguation5/5
Each tool has a clearly distinct purpose: execute_query for any SQL, execute_safe_query for read-only, get_table_schema for column definitions, and list_tables for table listing. No ambiguity.
Naming Consistency5/5
All tool names follow a consistent verb_noun pattern in snake_case, e.g., execute_query, list_tables. No deviations.
Tool Count5/5
Four tools is appropriate for a SQL tool server covering query execution, safe querying, schema retrieval, and table listing. Well-scoped.
Completeness3/5
Core operations are present, but missing a tool to list schemas (list_tables requires a schema parameter), which could cause agent failures. DDL is covered via execute_query.
Maintenance
ActivityInactive
ResponsivenessSyncing
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
- dataOAuthco.thinair
Read-only PostgreSQL, MySQL, SQL Server access via MCP — 24 dialect-aware hosted tools.
Explore, query, and inspect SQLite databases with ease. List tables, preview results, and view det…
The Instant MCP server is a wrapper around the Instant Platform SDK that enables creating, managing, and updating InstantDB applications directly within an editor. It provides tools for fetching rules files for LLMs, retrieving and pushing app schemas, managing permission rules, and executing database queries. Key capabilities include schema management (get-schema, push-schema), permission management (get-perms, push-perms), query execution, and listing recent query history.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceExposes sqlite3 database functionality as MCP tools, enabling SQL query execution, schema management, and CRUD operations.1MIT
- AlicenseNot gradedqualityCmaintenanceProvides comprehensive SQLite database interaction through MCP, enabling CRUD operations, custom SQL queries, and database exploration.545127MIT
- AlicenseNot gradedqualityDmaintenanceEnables database interaction (MySQL, PostgreSQL, SQL Server) via MCP, supporting SQL queries and command execution.31MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/atarkowska/fastmcp-sqltools'
If you have feedback or need assistance with the MCP directory API, please join our Discord server