Back to Home
ekkerdthomas icon

pharos-mcp

Verified Safe

by ekkerdthomas

Overview

A Model Context Protocol (MCP) server that enables natural language querying and schema exploration of SYSPRO ERP SQL databases for non-technical users via Claude Desktop.

Installation

Run Command
./start_mcp.sh

Environment Variables

  • SYSPRO_DB_SERVER
  • SYSPRO_DB_NAME
  • SYSPRO_DB_USERNAME
  • SYSPRO_DB_PASSWORD
  • SYSPRO_DB_TRUSTED_CONNECTION

Security Notes

The `QueryValidator` module (`src/pharos_mcp/core/security.py`) implements strong, explicit blocking of all data modification/DDL SQL commands (INSERT, UPDATE, DELETE, DROP, etc.), system stored procedures, and common SQL injection patterns like multi-statements and inline comments. It enforces read-only operations for user-executed queries. Database credentials are loaded from environment variables, preventing hardcoding. All tool calls are audit logged with sanitized parameters. `sanitize_identifier` is used to prevent injection in table/column names.

Similar Servers

Stats

Interest Score0
Security Score9
Cost ClassMedium
Avg Tokens1000
Stars0
Forks0
Last Update2026-01-19

Tags

SYSPROERPDatabaseNatural Language QuerySQL ServerMCP