Back to Home
RahulM0912 icon

fintra-mcp-server

by RahulM0912

Overview

Provides an interface for an AI agent to interact with a PostgreSQL database, specifically for financial transaction management, by exposing tools for database schema description and SQL query execution.

Installation

Run Command
npm start

Environment Variables

  • DATABASE_URL
  • SUPABASE_URL
  • SUPABASE_SERVICE_ROLE_KEY

Security Notes

CRITICAL: The `getQueryTool` in `src/controllers/tools.ts` directly executes arbitrary SQL queries provided as input (`pool.query(arg.sql)`). This design introduces a severe SQL injection vulnerability if the input `arg.sql` originates from untrusted user input without robust sanitization or proper parameterization. An attacker could exploit this to perform unauthorized data access, modification, deletion, or even full database compromise.

Similar Servers

Stats

Interest Score0
Security Score1
Cost ClassMedium
Avg Tokens750
Stars0
Forks0
Last Update2025-11-29

Tags

DatabasePostgreSQLFinancialAI Agent ToolModel Context Protocol