mcp-dm8-server
Verified Safeby lianekai
Overview
This server provides Model Context Protocol (MCP) tools for interacting with a DM8 database, enabling client applications (like AI agents) to browse table schemas and execute read-only SQL queries.
Installation
npx -y mcp-dm8-server --host 127.0.0.1 --port 5236 --username SYSDBA --password YOUR_PASSWORD --schema SYSDBAEnvironment Variables
- DM_USERNAME
- DM_PASSWORD
- DM_HOST
- DM_PORT
- DM_SCHEMA
- QUERY_TIMEOUT
- RATE_LIMIT_MAX
- CONNECTION_POOL_MAX
- CONNECTION_POOL_MIN
- LOG_LEVEL
- NODE_ENV
- NODE_OPTIONS
Security Notes
The server includes comprehensive security fixes (version 1.1.0) addressing critical vulnerabilities found in prior versions. Key mitigations include: 1. Enhanced SQL injection protection with parameterization, robust identifier normalization, multi-statement detection, and blacklisting of dangerous functions/keywords/patterns (e.g., file operations, subquery writes, NULL bytes, excessive nesting). 2. Implementation of a connection pool to prevent resource exhaustion and improve performance. 3. Addition of query timeouts to prevent long-running queries. 4. Integration of a token-bucket based rate limiting mechanism. 5. Structured logging with sensitive data redaction. 6. Input length limits for queries and identifiers. The project explicitly states a security score of 92/100 post-fixes and is 'recommended for production use'.
Similar Servers
enhanced-postgres-mcp-server
This server acts as a Model Context Protocol interface for PostgreSQL, enabling LLMs to query data, modify records, and manage database schema objects with read and write capabilities.
MsSqlMCP
Provides an MCP Server for SQL Server database schema inspection and safe, read-only query execution to AI clients.
mcp-postgres
Provides a read-only Model Context Protocol (MCP) server for AI tools (like Claude Code, Cursor) to query a PostgreSQL database directly.
mysql_mcp_server
This server provides a Model Context Protocol (MCP) interface to a MySQL database, enabling AI models to execute SQL queries and retrieve database schema information.