mcp-server-couchbase

The `run_sql_plus_plus_query` tool uses `lark_sqlpp` to parse and detect data or structure modification queries, enforcing a read-only mode by default. This is a strong safeguard against accidental LLM-driven modifications via SQL++. However, if `CB_MCP_READ_ONLY_QUERY_MODE` is explicitly set to `false`, LLMs can execute arbitrary SQL++ queries. Key-Value (KV) operations (upsert, delete) directly modify data and are always available. The documentation explicitly states that HTTP and SSE transport modes do not include authorization support, which is a critical security consideration. If these network transports are enabled and exposed, external authorization/authentication mechanisms must be implemented to prevent unauthorized database access.