mcp-server-laravel-database

The server demonstrates strong security awareness with features like a 'read-only' mode to block write operations, SSH tunneling for secure remote connections, and masking of sensitive information in logs. The 'execute_sql' tool allows direct SQL query input, which inherently carries a risk of SQL injection if the input is not carefully controlled by the calling agent or user, especially in non-read-only mode. However, the explicit recommendation to use '--readonly' and minimal database permissions in the documentation significantly mitigates these risks. Introspection queries use proper escaping to prevent injection.