db-MCP (SQLite MCP Server)

SQLite MCP Server with 170+ specialized tools, 11 data resources + 11 help resources, and 10 prompts, audit logging with DDL backup snapshots, HTTP/SSE Transport, OAuth 2.1 authentication, tool filtering, granular access control, and structured error handling with categorized, actionable responses. Available in WASM and better-sqlite3 variants. It runs locally over stdio via the published package.

People connecting database tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-08-24 · ★ 11 · #54 OF 151 MAINTAINED DATABASE · VERIFIED 2026-08-25

MIT · TypeScript servers · how we verify → /methodology

01 · Install db-MCP (SQLite MCP Server)

before you install - you'll need

Set CSV_EXTENSION_PATH, SPATIALITE_PATH before connecting.

Claude Code

claude mcp add neverinfamous-db-mcp -- npx -y db-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "neverinfamous-db-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "db-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions · container (OCI image) - can be sandboxed away from your filesystem

license MIT - declared in the repository

npm package db-mcp - unscoped; check the name against the project README before installing

registry namespace io.github.neverinfamous is GitHub-verified and matches the repo owner

03 · What db-MCP (SQLite MCP Server) can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Limitations (from the README)

[!WARNING] HTTP without authentication: When using --transport http without enabling OAuth, all clients have full unrestricted access. Always enable authentication for production HTTP deployments. See SECURITY.md for details.

Latest releases

v5.0.1 · 2026-06-12

Release v5.0.1 · Highlights · Security Patches: Resolved Alpine OpenSSL CVEs (CVE-2026-34182, etc.) in the Docker base image by fetching the latest edge packages during build. · Dependency Updates: Bumped @types/node…

v5.0.0 · 2026-06-06

Release v5.0.0 · Highlights · Stateful HTTP Sessions: Added HTTP stateful session enforcement with 30-minute idle timeout and in-flight request locks. · Security Hard Gates: Introduced strict fail-closures for…

v4.0.0 · 2026-06-03

v4.0.0 Release Notes · Major API Changes & Observability Features · This major release introduces the SystemDb observability architecture, new capabilities like hybrid FTS5 + vector search (sqlite_hybrid_search)…

04 · Who maintains db-MCP (SQLite MCP Server)

db-mcp (SQLite MCP Server) is maintained by neverinfamous. We track 5 MCP servers from neverinfamous - 4 actively maintained, 44 combined GitHub stars, oldest repo from Dec 2025. Full record: all servers from neverinfamous.

  1. PostgreSQL MCP Server PostgreSQL MCP server with 203 tools, connection pooling, HTTP/SSE, OAuth 2.1, and tool filtering ★ 12
  2. mysql-mcp Enterprise-grade MySQL MCP Server with OAuth 2.0, 106 tools, and Docker deployment ★ 9

05 · Facts

category
database - ranked #54 of 151 actively-maintained database servers as of 2026-08-25.
release cadence
6 releases in the last 90 days (latest 2026-06-12)
registry
io.github.neverinfamous/db-mcp (active, first published 2026-02-04)
packages
npm:db-mcp · oci:docker.io/writenotenow/db-mcp:v1.0.2

06 · db-MCP (SQLite MCP Server) FAQ

What is db-MCP (SQLite MCP Server)?

SQLite MCP Server with 170+ specialized tools, 11 data resources + 11 help resources, and 10 prompts, audit logging with DDL backup snapshots, HTTP/SSE Transport, OAuth 2.1 authentication, tool filtering, granular access control, and structured error handling with categorized, actionable responses. Available in WASM and better-sqlite3 variants. It runs locally over stdio via the published package.

Is db-MCP (SQLite MCP Server) still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-24 and it shipped 6 releases in the last 90 days. We re-verify nightly.

How do I install db-MCP (SQLite MCP Server)?

Run `npx -y db-mcp`. The README documents 2 environment variables (CSV_EXTENSION_PATH, SPATIALITE_PATH) to set first. Set CSV_EXTENSION_PATH, SPATIALITE_PATH before connecting. You can also paste the ready-made client config above.

Does db-MCP (SQLite MCP Server) run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to db-MCP (SQLite MCP Server)

More database MCP servers · MySQL MCP · PostgreSQL MCP Server · Local FAISS MCP Server · Snowflake MCP Server · Dynoxide

More TypeScript MCP servers · Trust Oracle · Iranti · Maket · see all