mcp-read-only-sql

The server implements a robust three-layer security model including database-level read-only enforcement, query timeouts, and result size limits. SQL injection is mitigated by input sanitization (`sql_guard.py`) and explicit multi-statement rejection. Subprocess execution (`psql`, `clickhouse-client`, `sshpass`) avoids `shell=True` for arguments, preventing shell injection. Sensitive data (passwords) are primarily sourced from environment variables, not stored in configuration files. The DBeaver importer contains hardcoded keys for decrypting DBeaver's default encrypted credentials, which is a minor detail for its specific (import) use case and not a general server vulnerability. Overall, the codebase demonstrates a strong focus on security best practices for database access.