🛡️ mcp-safe-db

Zero-risk, strictly read-only SQL database inspector for AI agents (Claude Desktop, Antigravity, Cursor, Cline).

Let your AI explore schemas, inspect tables, and run SELECT queries without risking accidental DROP, UPDATE, or DELETE.

---

⚡ The Problem

Giving an AI assistant database access is risky:

• A hallucinated UPDATE query without a WHERE clause can wipe production or local dev data.
• Semicolon injection (SELECT 1; DROP TABLE users;) can execute hidden destructive actions.
• Unbounded queries (SELECT *) blow up context windows and burn API tokens.

mcp-safe-db solves this with a Dual-Layer Defense:

1. Layer 1 (Parser Guard): Strict AST & regex validation blocks mutation keywords, multiple statements, and comment bypasses. High limits are capped to 50 rows automatically.
2. Layer 2 (Engine Lock): SQLite engine is locked with PRAGMA query_only = ON;. Even if a query bypasses parsing, the database engine physically rejects write operations.

---

🚀 Quickstart

Direct execution via npx

npx mcp-safe-db ./path/to/database.sqlite

---

🛠️ Configuration

1. Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "safe-db": {
      "command": "npx",
      "args": ["-y", "mcp-safe-db", "/absolute/path/to/your/database.sqlite"]
    }
  }
}

2. Antigravity IDE / Cursor / Cline

Add to your mcp_config.json:

{
  "mcpServers": {
    "safe-db": {
      "command": "npx",
      "args": ["-y", "mcp-safe-db", "/absolute/path/to/your/database.sqlite"]
    }
  }
}

---

🧰 Available Tools for AI

---

🧪 Testing

npm test

Runs the automated security and safety tests.

---

📄 License

MIT © 2026

---

Vibe Coded with 💖 by MrSkele & Antigravity