Model Context Protocol moderate risk

Skysql

SkySQL MCP server manages serverless MariaDB instances, interacts with AI agents, executes SQL, and handles credentials via API key authentication.

Connections & Capabilities

Connects To

GitHubMySQL

Capabilities

readwriteexecadmin

Quickstart

Install

npx @wong2/mcp-cli

Exposed MCP Tools (6)

high

Launch MariaDB instance

Launches a new serverless MariaDB database instance.

Creates new database instances, incurring cost and potential security implications.

high

Execute SQL query

Executes a SQL query on a specified SkySQL instance.

Direct SQL execution can lead to data breaches or modifications if not properly secured.

critical

Manage database credentials

Manages database credentials, including password resets and user creation.

Compromised credentials can lead to complete database takeover.

safe

List database services

Lists available SkySQL database services.

Read-only operation with no potential for data modification.

high

Manage IP allowlists

Manages IP allowlists for database access.

Incorrectly configured allowlists can expose the database to unauthorized access.

moderate

Interact with AI Agents

Interacts with AI agents connected to the database.

AI agents might perform unintended actions if not properly controlled.

Safety Assessment

The SkySQL MCP server offers convenient database management but introduces risks related to API key security and SQL execution. It's relatively safe for listing and monitoring, but risky if the API key is exposed or SQL injection vulnerabilities are present. Proper key management and input sanitization are crucial.

API key authentication
Allows management of database credentials and IP allowlists
Provides an interface to interact with AI-powered database agents
Supports listing and monitoring database services

Requires storing API keys, potentially in environment variables
Enables execution of SQL queries, posing injection risks if not handled carefully
Manages database credentials, increasing risk if compromised
Potential for unauthorized database modifications if API key is compromised
Lack of explicit sandboxing for SQL execution