database-mcp-sqlite 0.1.0

MCP server for SQLite with read-only guardrails, row caps, and statement timeouts

database-mcp-sqlite

MCP server giving AI clients safe, structured access to a SQLite database. Two tools, guardrails on by default.

Quick start (Claude Desktop / Claude Code / Cursor)

{
  "mcpServers": {
    "sqlite": {
      "command": "uvx",
      "args": ["database-mcp-sqlite", "--dsn", "/absolute/path/to/database.db"]
    }
  }
}

Configuration

SQLite needs one thing: the path to the database file. Three ways to give it:

Flag

--dsn /absolute/path/to/database.db, as in the quick start.

Environment variable

SQLITE_PATH=/absolute/path/to/database.db

Config file

--config /absolute/path/to/database-mcp.yaml:

connection:
  dsn: /absolute/path/to/database.db

guardrails:
  readOnly: true
  maxRows: 1000
  queryTimeoutMs: 30000

Tools

• execute_sql: run a single SQL statement. Returns a summary line and compact JSON {columns, rows}.
• search_objects: list tables with estimated row counts, or describe one table (columns, indexes, foreign keys).

Guardrails

• Read-only by default, enforced twice: a SQL guard plus the database file opened read-only with PRAGMA query_only = ON. Pass --allow-write to enable writes.
• Results capped at maxRows (default 1000, MAX_ROWS).
• Statements exceeding queryTimeoutMs (default 30000, QUERY_TIMEOUT_MS) are aborted.

Full contract: docs/tool-contract.md

---

mcp-name: io.github.arifulislamat/database-mcp-sqlite