MCP-SQL-Server

CRITICAL RISK: The server directly executes SQL queries generated by the Ollama language model (LLM) based on user input, without robust sanitization or validation of the generated SQL. This makes the system highly vulnerable to SQL injection attacks, where a malicious user could craft prompts to generate destructive queries (e.g., `DROP TABLE`) or exfiltrate sensitive data. There is no user authentication or authorization layer, meaning any client can interact with the database via the LLM. The Ollama host is hardcoded to `http://localhost:11434`, which is not a secret but a deployment configuration that could be exploited if an attacker could reroute network traffic.