mcp-encrypted-sqlite
Verified Safeby rosch100
Overview
Provides a Model Context Protocol (MCP) server for interacting with encrypted SQLite databases (SQLCipher 4), enabling database exploration, querying, and CRUD operations.
Installation
docker run --rm -i -v "${DB_PATH}:/data/database.sqlite:ro" ghcr.io/rosch100/mcp-encrypted-sqlite:latest --args '{"db_path":"/data/database.sqlite","passphrase":"${DB_PASSPHRASE}"}'Environment Variables
- MCP_SQLITE_ENCRYPTION_KEY
- MCP_DEBUG
- DB_PATH
- DB_PASSPHRASE
Security Notes
The server implements robust SQL identifier validation to prevent SQL injection for most database operations. It uses strong AES-256-GCM encryption for passphrases, with secure key management via macOS Keychain or environment variables, and includes checks for weak keys. The `execute_sql` tool is explicitly noted as executing raw SQL without parameterization, carrying a security warning for untrusted input. The server communicates via STDIO, limiting direct network attack surface. Overall, security is a high priority in its design.
Similar Servers
mcp
This MCP server assists developers by identifying inefficient or outdated npm packages in install commands and source files, providing migration documentation.
mcp400
A Java-based server application, likely related to game development, specifically hinted as a Minecraft server.
Memo-MCP
Provides a local LLM Model Context Protocol (MCP) server for journaling with Retrieval-Augmented Generation (RAG) to search and retrieve personal memo and journal entries.
mcp-encrypted-sqlite
To provide secure and encrypted data storage for a Minecraft-related application or server using SQLite.