Back to Home
lianekai icon

mcp-dm8-server

Verified Safe

by lianekai

Overview

This server provides Model Context Protocol (MCP) tools for interacting with a DM8 database, enabling client applications (like AI agents) to browse table schemas and execute read-only SQL queries.

Installation

Run Command
npx -y mcp-dm8-server --host 127.0.0.1 --port 5236 --username SYSDBA --password YOUR_PASSWORD --schema SYSDBA

Environment Variables

  • DM_USERNAME
  • DM_PASSWORD
  • DM_HOST
  • DM_PORT
  • DM_SCHEMA
  • QUERY_TIMEOUT
  • RATE_LIMIT_MAX
  • CONNECTION_POOL_MAX
  • CONNECTION_POOL_MIN
  • LOG_LEVEL
  • NODE_ENV
  • NODE_OPTIONS

Security Notes

The server includes comprehensive security fixes (version 1.1.0) addressing critical vulnerabilities found in prior versions. Key mitigations include: 1. Enhanced SQL injection protection with parameterization, robust identifier normalization, multi-statement detection, and blacklisting of dangerous functions/keywords/patterns (e.g., file operations, subquery writes, NULL bytes, excessive nesting). 2. Implementation of a connection pool to prevent resource exhaustion and improve performance. 3. Addition of query timeouts to prevent long-running queries. 4. Integration of a token-bucket based rate limiting mechanism. 5. Structured logging with sensitive data redaction. 6. Input length limits for queries and identifiers. The project explicitly states a security score of 92/100 post-fixes and is 'recommended for production use'.

Similar Servers

Stats

Interest Score0
Security Score92
Cost ClassMedium
Avg Tokens200
Stars0
Forks0
Last Update2025-11-27

Tags

DM8DatabaseMCPSQLSecurity