Back to Home
oceanbase icon

awesome-oceanbase-mcp

by oceanbase

Overview

The project provides a collection of Model Context Protocol (MCP) servers to enable AI assistants to directly interact with OceanBase databases and its ecosystem components for operations, management, and monitoring.

Installation

Run Command
uv run oceanbase_mcp_server --transport stdio

Environment Variables

  • OB_HOST
  • OB_PORT
  • OB_USER
  • OB_PASSWORD
  • OB_DATABASE
  • ALLOWED_TOKENS
  • ENABLE_MEMORY
  • EMBEDDING_MODEL_NAME
  • EMBEDDING_MODEL_PROVIDER
  • TABLE_NAME_MEMORY
  • OCP_URL
  • OCP_ACCESS_KEY_ID
  • OCP_ACCESS_KEY_SECRET
  • project
  • username
  • password
  • SYS_PASSWORD
  • OBSHELL_HOST
  • OBSHELL_PORT
  • CLUSTER_NAME
  • TENANT_NAME
  • OB_CLUSTER_PASSWORD

Security Notes

Multiple servers execute arbitrary shell commands (e.g., okctl, obshell, obdiag) or direct SQL queries (e.g., oceanbase_mcp_server, obcloud_mcp_server). Input validation for commands and SQL queries is often limited to basic identifiers, leaving potential vulnerabilities for injection if LLM-generated input contains malicious strings. The `obshell_mcp_server` has hardcoded default passwords which is a critical risk. `okctl_mcp_server` downloads and executes external scripts, introducing supply chain risk. `ocp_mcp_server` can write files to an LLM-specified directory, posing a path traversal risk. While some authentication (ALLOWED_TOKENS) and command whitelisting exist, broad tool capabilities and direct execution paths warrant caution.

Similar Servers

Stats

Interest Score50
Security Score4
Cost ClassHigh
Avg Tokens1500
Stars85
Forks35
Last Update2025-12-04

Tags

OceanBaseDatabase ManagementAI IntegrationKubernetesMonitoring