MCP Safe DB — Data skill for Claude Code

🛡️ mcp-safe-db

[](https://opensource.org/licenses/MIT) [](https://nodejs.org/) [](https://modelcontextprotocol.io/)

**Zero-risk, strictly read-only SQL database inspector for AI agents** (Claude Desktop, Antigravity, Cursor, Cline).

Let your AI explore schemas, inspect tables, and run `SELECT` queries without risking accidental `DROP`, `UPDATE`, or `DELETE`.

---

⚡ The Problem

Giving an AI assistant database access is risky:

• A hallucinated UPDATE query without a WHERE clause can wipe production or local dev data.
• Semicolon injection (SELECT 1; DROP TABLE users;) can execute hidden destructive actions.
• Unbounded queries (SELECT *) blow up context windows and burn API tokens.

**mcp-safe-db** solves this with a **Dual-Layer Defense**:

1. Layer 1 (Parser Guard): Strict AST & regex validation blocks mutation keywords, multiple statements, and comment bypasses. High limits are capped to 50 rows automatically.
2. Layer 2 (Engine Lock): SQLite engine is locked with PRAGMA query_only = ON;. Even if a query bypasses parsing, the database engine physically rejects write operations.

---

🚀 Quickstart

Direct execution via `npx`

npx mcp-safe-db ./path/to/database.sqlite

---

🛠️ Configuration

1. Claude Desktop

Add to your `claude_desktop_config.json`:

{
  "mcpServers": {
    "safe-db": {
      "command": "npx",
      "args": ["-y", "mcp-safe-db", "/absolute/path/to/your/database.sqlite"]
    }
  }
}

2. Antigravity IDE / Cursor / Cline

Add to your `mcp_config.json`:

{
  "mcpServers": {
    "safe-db": {
      "command": "npx",
      "args": ["-y", "mcp-safe-db", "/absolute/path/to/your/database.sqlite"]
    }
  }
}

---

🧰 Available Tools for AI

| Tool | Description | S