warp-sql-server-mcp

The server features a robust three-tier safety system with AST-based SQL query validation (using node-sql-parser) to detect dangerous functions (e.g., xp_cmdshell, openrowset) and potential SQL injection patterns. It supports cloud secret managers (AWS Secrets Manager, Azure Key Vault) for credential management, and provides context-aware SSL certificate handling that defaults to secure settings in production. Streaming functions include prototype pollution and size limit protection for JSON chunk processing. Comprehensive security audit logging and secure configuration defaults are also in place. The system errs on the side of security, requiring strong indicators for development environments to trust certificates.