Microsoft-SQL-Server-MCP-Server

The `call_tool` function directly executes arbitrary SQL queries provided by the AI assistant, including DML and DDL operations (e.g., INSERT, UPDATE, DELETE, CREATE, DROP). This contradicts the README's claim of being 'Solo Lectura (Seguro)' and presents a critical security risk. While `read_resource` validates table names, the `execute_sql` tool has no built-in restrictions on query type. The `docker-compose.yml` uses 'sa' as the default database user, which goes against the security best practices outlined in `SECURITY.md` (recommending minimal permissions and avoiding admin accounts). Without extremely strict database user permissions, this server can be used to execute destructive commands.