Model Context Protocol moderate risk

Xiyan

XiYan MCP server enables natural language queries to MySQL and PostgreSQL databases using the XiYanSQL text-to-SQL model, supporting both remote and local deployment.

Connections & Capabilities

Connects To

GitHubPostgreSQLMySQLPlaywright

Capabilities

readwrite

Quickstart

Install

pip install xiyan-mcp-server

Config

{
    "mcpServers": {
        "xiyan-mcp-server": {
            "command": "/xxx/python",
            "args": [
                "-m",
                "xiyan_mcp_server"
            ],
            "env": {
                "YML": "PATH/TO/YML"
            }
        }
    }
}

Exposed MCP Tools (3)

moderate

get_data

Retrieves data from a database using natural language queries converted to SQL.

Executes SQL queries, which can potentially modify data.

safe

{dialect}://{table_name}

Obtains sample data from a specified database table for model reference.

Provides read-only access to a portion of the table data.

safe

{dialect}://

Lists the names of the databases available in the current connection.

Provides read-only access to database names.

Safety Assessment

The XiYan MCP server presents moderate risk due to its ability to execute SQL queries. Local deployment significantly reduces risk by eliminating external API dependencies. Securely managing database credentials and validating LLM configurations are crucial for safe operation.

Supports read-only operations for data retrieval.
Offers a local deployment mode for enhanced security.
Uses API keys for authentication in remote mode.
Provides resource listing to limit access to specific tables.

Can execute SQL queries, potentially leading to data modification or deletion.
Requires database credentials, which must be securely managed.
Remote mode relies on external API, introducing dependency and potential vulnerabilities.
Improperly configured LLM could generate malicious SQL.