Back to Home
mrcyrilgoud icon

redshift-mcp-server

by mrcyrilgoud

Overview

This server acts as a Model Context Protocol (MCP) gateway for Amazon Redshift, allowing clients to discover database schemas and tables, describe table structures, and execute read-only SQL queries.

Installation

Run Command
npm start

Environment Variables

  • REDSHIFT_HOST
  • REDSHIFT_PORT
  • REDSHIFT_DATABASE
  • REDSHIFT_USER
  • REDSHIFT_PASSWORD

Security Notes

The server's `execute_query` tool allows arbitrary `SELECT`, `WITH`, or `EXPLAIN` SQL queries from user input. While intended for read-only access, this broad permission can be abused for denial-of-service, resource exhaustion, or sophisticated data exfiltration by crafting complex queries that align with allowed Redshift user permissions. The client-side `startsWith` check is insufficient to prevent all forms of malicious query construction. Additionally, the Redshift connection uses `ssl: { rejectUnauthorized: false }`, disabling SSL certificate validation and exposing the connection to potential Man-in-the-Middle (MITM) attacks. There are no hardcoded secrets or direct `eval` of user input, but the aforementioned issues are significant.

Similar Servers

Stats

Interest Score0
Security Score4
Cost ClassMedium
Avg Tokens500
Stars0
Forks0
Last Update2025-12-19

Tags

RedshiftDatabaseAWSData AccessMCP