Back to Home
Strom-Capital icon

mcp-server-db2i

Verified Safe

by Strom-Capital

Overview

Enables AI assistants to query and inspect IBM DB2 for i databases using the Model Context Protocol (MCP) via stdio or HTTP.

Installation

Run Command
npx mcp-server-db2i

Environment Variables

  • DB2I_HOSTNAME
  • DB2I_USERNAME
  • DB2I_USERNAME_FILE
  • DB2I_PASSWORD
  • DB2I_PASSWORD_FILE
  • MCP_AUTH_TOKEN

Security Notes

The server demonstrates a strong focus on security. All SQL queries are validated using both AST parsing and regex patterns to ensure they are read-only (SELECT statements only) and block dangerous operations (DML, DDL, DCL, system commands like QCMDEXC). Sensitive credentials are handled via environment variables with a strong recommendation for file-based Docker secrets. The HTTP transport includes OAuth-style token authentication with `timingSafeEqual` to prevent timing attacks, IP-based rate limiting for authentication attempts, and explicit warnings/configuration for TLS/HTTPS. Logging redacts sensitive information like passwords. Resource limits (max sessions, query result limits) are configurable to prevent abuse.

Similar Servers

Stats

Interest Score85
Security Score9
Cost ClassLow
Avg Tokens200
Stars7
Forks2
Last Update2026-01-18

Tags

MCPIBM iDB2AI AgentDatabaseSQLNode.js