mssql-read-only-mcp

The server explicitly enforces read-only operations for all tools by validating that queries start with 'SELECT' and checking for dangerous keywords ('INSERT', 'UPDATE', 'DELETE', 'DROP', 'CREATE', 'ALTER', 'TRUNCATE', 'EXEC', 'EXECUTE'). It also prevents multiple statements. Parameterized queries are used for 'list_table' and 'describe_table' to prevent SQL injection for structured inputs. While the 'read_data' tool accepts raw SQL, its sanitization efforts, including a 10,000 row limit, significantly mitigate common injection and denial-of-service risks. Credentials are handled via environment variables, not hardcoded.