▌BestMCPTools.org

Ranked & Compared

Best Database MCP Servers in 2026

By Ethan Halfhide · Updated October 20, 2026

Last verified 2026-10-20

Updated: 2026-10-20Compared official docs, repos and pricing pages on October 20, 2026. Not tested.

The best database MCP servers in October 2026 are Supabase MCP server for Supabase apps, Neon MCP for serverless Postgres, MongoDB MCP for document data, ClickHouse MCP for analytics, and a community MySQL MCP server for MySQL. All of them let an AI client such as Claude Code, Cursor or VS Code read your schema and run queries, and most of them ship a read-only switch. This guide ranks seven servers that are maintained today, explains which ones run locally and which are hosted, and flags the older reference servers for Postgres and SQLite that are now archived. Every fact here comes from each project's official repository or documentation, checked on October 20, 2026.

TL;DR, Quick Verdict

Pick the server made by the company that runs your database. Supabase MCP and Neon MCP are hosted, use OAuth, and both offer a read-only mode, so they are the easiest safe start for Postgres. MongoDB MCP and ClickHouse MCP are official and open source: ClickHouse is read-only by default, and MongoDB includes a --readOnly flag in its manual setup examples by default. For plain MySQL, the community mysql_mcp_server is the most direct option but has no read-only flag, so connect it with a low-privilege user. Use dbt MCP when your team works through dbt models, and Neo4j MCP for graph data. Avoid the archived Postgres and SQLite reference servers for new work.

Quick Picks

Supabase projects

Supabase MCP

Hosted server with OAuth login, project scoping and a read_only=true URL option.

Serverless Postgres

Neon MCP

Remote server with OAuth or API key, read-only mode and branch-based migrations.

MongoDB and Atlas

MongoDB MCP

Official server whose manual setup examples include --readOnly by default.

Analytics SQL

ClickHouse MCP

Read-only by default, with separate opt-ins for writes and for destructive statements.

MySQL

MySQL MCP

Small community server with schema, sample and SQL tools, plus SSH tunneling.

dbt projects

dbt MCP

Exposes models, lineage, Semantic Layer metrics and job runs from dbt Labs.

How we chose these servers

We started from the database listings on our database category page and compared each one against its official GitHub repository and documentation on October 20, 2026. We did not install or run any of them, and we did not connect them to a database. A server qualified if it is maintained, comes from the vendor or is the most direct option for a popular database, and documents setup, auth and write limits. We ranked servers higher when the vendor hosts them, when they offer OAuth instead of pasted secrets, and when they document a read-only mode.

Which one fits your project

Match the server to the database you already run. If your backend is on Supabase, use Supabase MCP, since it also covers migrations, logs, advisors and branches on that platform. Neon users get project and branch management on top of SQL. Use MongoDB MCP for self-managed MongoDB or Atlas, ClickHouse MCP for analytical tables, and Neo4j MCP for graphs. For MySQL there is no vendor server among our listings, so the community MySQL MCP server is the practical choice. If your team models data in dbt, dbt MCP gives an agent the context of models, sources, tests and metrics rather than raw tables only.

The archived Postgres and SQLite reference servers

The original PostgreSQL and SQLite servers from the Model Context Protocol project now live in the servers-archived repository, which says it is no longer maintained and provides no security guarantees. Our PostgreSQL MCP server and SQLite MCP server pages describe those archived packages. The Postgres one ran every query in a READ ONLY transaction, but it will not receive fixes. For Postgres today, use Supabase MCP or Neon MCP if your database is hosted there, or a maintained multi-database option such as the one described next.

Official multi-database options

Google maintains MCP Toolbox for Databases, an open source MCP server under the Apache 2.0 license (the repository was renamed from genai-toolbox). It ships prebuilt tools selected with a flag such as --prebuilt=postgres, and its README lists AlloyDB, BigQuery, Cloud SQL, Spanner and Firestore plus PostgreSQL, MySQL, SQL Server, Oracle, MongoDB, Redis, Elasticsearch, ClickHouse, Neo4j, Snowflake and more. It is not one of our listings, so it has no card here, but it is the most direct official route for SQL Server or for a team that uses several engines. Snowflake has also moved on: the Snowflake-Labs community server behind our Snowflake MCP server page is marked deprecated, and Snowflake now points users to its Snowflake-managed MCP server, which uses Snowflake OAuth by default and role-based access control.

Costs and accounts

None of the seven servers charges for the MCP layer itself as far as their repositories show, but the database behind it is billed as usual. As of October 2026, Supabase lists a Free plan at $0 per month and Pro from $25 per month, and Neon lists a Free plan at $0 per month with paid Launch and Scale plans that are pay as you go with no monthly minimum. We did not check hosted prices for MongoDB, ClickHouse, dbt or Neo4j. dbt notes that remote OAuth access is in public beta for Starter, Enterprise and Enterprise+ accounts, and its self-hosted server can run with or without a dbt platform account.

Security and permissions

Read-only support differs a lot, so check it before you connect production data. Supabase supports read_only=true, which runs all queries as a read-only Postgres user, and recommends project scoping and limiting feature groups. Neon supports readonly=true and a roleName parameter, and says its server is meant for local development and IDE use, not production. MongoDB has a --readOnly flag that stops create, update and delete tools from registering. ClickHouse runs queries with readonly=1 unless you set CLICKHOUSE_ALLOW_WRITE_ACCESS, and destructive statements need CLICKHOUSE_ALLOW_DROP as well. Neo4j disables its write-cypher tool in read-only mode (NEO4J_MCP_READ_ONLY in the repository README, NEO4J_READ_ONLY in the configuration reference). The MySQL server has no such flag and its execute_sql tool accepts INSERT, UPDATE and DELETE, so its README tells you to use a dedicated MySQL user with minimal permissions. Supabase also warns about prompt injection from stored data and advises keeping manual approval of tool calls on.

Local vs remote setup

Supabase and Neon are hosted: you add a URL to your client and sign in through OAuth, with no local process to run. MongoDB runs locally over stdio by default and can also serve HTTP, while MongoDB also offers an Atlas-managed remote server that uses OAuth. ClickHouse, MySQL, dbt and Neo4j run on your machine by default, taking connection settings and credentials from environment variables, and Neo4j can also serve HTTP. ClickHouse requires authentication when you switch it to HTTP or SSE, and dbt offers a separate remote server on the dbt platform for teams that cannot install software. For terminal agents, see our Claude Code MCP servers guide.

What we could not verify

We could not open GitHub repository settings during this check, so archive and deprecation status comes from each README's own notice. We did not verify hosted pricing for MongoDB Atlas, ClickHouse Cloud, dbt platform or Neo4j Aura, and we did not verify third-party database servers that appear in search results, such as the executeautomation multi-database server, because they are not in our listings.

Quick Comparison

ServerBest forTransportAuthMaintainerPrice (as of October 2026)
Supabase MCPSupabase app backendsRemote HTTP (hosted); limited local endpoint via Supabase CLIOAuth; personal access token for CISupabaseServer free; Supabase Free $0, Pro from $25/month
Neon MCPServerless Postgres on NeonRemote Streamable HTTP (SSE deprecated)OAuth or Neon API keyNeonServer free; Neon Free $0/month, paid plans pay as you go
MongoDB MCPMongoDB and Atlasstdio by default, optional HTTP; Atlas-managed remoteConnection string or Atlas service account; OAuth for Atlas remoteMongoDBFree, Apache 2.0; database hosting billed separately
ClickHouse MCPAnalytics on ClickHousestdio by default, optional HTTP or SSEClickHouse user credentials; auth required on HTTP/SSEClickHouseFree, Apache 2.0; hosting billed separately
MySQL MCPMySQL schema and queriesstdio or SSEMySQL user credentialsCommunity (designcomputer)Free, MIT license
dbt MCPdbt models, lineage and metricsLocal via uvx, or remote HTTPdbt platform OAuth (beta), PAT or service tokendbt LabsFree, Apache 2.0; platform features need a dbt account
Neo4j MCPGraph data with Cypherstdio by default, optional HTTPUsername and password (stdio); bearer or basic auth over HTTPNeo4jServer free to install; Neo4j hosting not verified

The Tools, Ranked

#1Best for: Teams building on Supabase
Supabase MCP logo

Supabase MCP

Server free; Supabase Free $0, Pro from $25/month (as of October 2026)
Visit Supabase MCP →

Supabase runs a hosted MCP server at mcp.supabase.com that connects your AI client to your Supabase projects for managing tables, fetching config and querying data. Login happens through OAuth with dynamic client registration, so you do not need to create a personal access token unless you run it in CI. URL parameters let you scope it to one project, limit tool groups and turn on read-only mode, and the docs recommend all three before you connect a production project.

Pros

  • ✓Hosted, no local install
  • ✓OAuth login by default
  • ✓read_only=true runs SQL as a read-only Postgres user
  • ✓Project scoping and feature groups reduce what the agent can touch

Cons

  • ✗Only for Supabase projects
  • ✗Local CLI and self-hosted modes offer a limited subset of tools and no OAuth 2.1
  • ✗Write tools are on unless you set read-only

Quick Install

claude mcp add --scope project --transport http supabase "https://mcp.supabase.com/mcp?features=docs%2Caccount%2Cdatabase%2Cdebugging%2Cdevelopment%2Cfunctions%2Cbranching"

Example

Ask the agent to list tables and explain a slow query in a project scoped with read_only=true.

#2Best for: Serverless Postgres on Neon
Neon MCP logo

Neon MCP

Server free; Neon Free $0/month, Launch and Scale pay as you go (as of October 2026)
Visit Neon MCP →

Neon's open source MCP server, under the MIT license, translates natural language into Neon API calls for creating projects and branches, running queries and doing migrations. It is a remote server at mcp.neon.tech that accepts OAuth or a Neon API key. Neon warns that the server is intended for local development and IDE integrations and does not recommend it for production environments.

Pros

  • ✓Remote server with OAuth or API key
  • ✓readonly=true, projectId and roleName parameters
  • ✓Branch-based migrations
  • ✓One-command setup with neon init

Cons

  • ✗Only for Neon databases
  • ✗Not recommended for production by Neon
  • ✗SSE endpoint is deprecated in favor of Streamable HTTP

Quick Install

npx add-mcp "https://mcp.neon.tech/mcp?category=projects&category=branches&category=endpoints&category=querying&category=schema"

Example

Create a Neon branch, run a schema migration on it and compare it with the main branch.

#3Best for: MongoDB and Atlas users
MongoDB MCP logo

MongoDB MCP

Free and open source (Apache 2.0); MongoDB hosting billed separately
Visit MongoDB MCP →

MongoDB's official server, under Apache 2.0, works with self-managed MongoDB through a connection string and with Atlas through service account credentials. Tools cover find, aggregate and schema checks, plus Atlas cluster and user management. It runs locally over stdio by default and can serve HTTP, and MongoDB also offers an Atlas-managed remote server that uses OAuth. The README notes that its manual setup examples include --readOnly by default.

Pros

  • ✓Official server from MongoDB
  • ✓--readOnly flag blocks create, update and delete tools
  • ✓Covers both database queries and Atlas administration
  • ✓Interactive setup command

Cons

  • ✗Requires Node.js 22.13 or later
  • ✗Atlas tools need a service account with the right roles
  • ✗Write tools are available once you drop --readOnly

Quick Install

npx -y mongodb-mcp-server@latest setup

Example

Have the agent describe a collection's schema and write an aggregation for monthly totals.

#4Best for: Analytics on ClickHouse
ClickHouse MCP logo

ClickHouse MCP

Free and open source (Apache 2.0); ClickHouse hosting billed separately
Visit ClickHouse MCP →

ClickHouse maintains mcp-clickhouse, an Apache 2.0 Python server with run_query, list_databases and list_tables tools. It has the most layered write controls on this list: queries run with readonly=1 by default, CLICKHOUSE_ALLOW_WRITE_ACCESS enables non-destructive writes, and CLICKHOUSE_ALLOW_DROP is needed on top for DROP, TRUNCATE, DELETE and UPDATE. The README is clear that the drop check is a best-effort guard and that the real security boundary is the ClickHouse user's grants.

Pros

  • ✓Read-only by default
  • ✓Separate opt-in for destructive statements
  • ✓Authentication required by default on HTTP and SSE
  • ✓Can point at the public ClickHouse SQL Playground

Cons

  • ✗Needs uv and Python 3.10 to 3.14
  • ✗Only for ClickHouse and chDB
  • ✗The drop gate is not a security boundary

Quick Install

uv run --with mcp-clickhouse --python 3.12 mcp-clickhouse

Example

Ask for daily event counts by country from a large events table without risking writes.

#5Best for: Direct MySQL access
MySQL MCP logo

MySQL MCP

Free and open source (MIT)
Visit MySQL MCP →

mysql_mcp_server is a community project under the MIT license, not a vendor server, and it is the most direct MySQL option in our listings. It offers execute_sql, get_schema_info and get_table_sample tools, a multi-database mode when MYSQL_DATABASE is unset, SSH tunneling, and stdio or SSE transport. There is no read-only flag: execute_sql supports INSERT, UPDATE and DELETE with a destructive hint, so the README tells you to create a dedicated MySQL user with minimal permissions.

Pros

  • ✓Simple set of schema, sample and query tools
  • ✓SSH tunneling built in
  • ✓Works with stdio or SSE
  • ✓Install from PyPI or with uvx

Cons

  • ✗Community maintained
  • ✗No read-only switch
  • ✗Single SQL statements only

Quick Install

claude mcp add --transport stdio designcomputer-mysql_mcp_server uvx mysql_mcp_server

Example

Use a read-only MySQL user so the agent can sample tables and draft reporting queries.

#6Best for: Teams that model data in dbt
dbt MCP logo

dbt MCP

Free and open source (Apache 2.0); dbt platform features need a dbt account
Visit dbt MCP →

dbt Labs publishes dbt-mcp under Apache 2.0, giving agents the context of a dbt project rather than raw tables alone. Tools cover the Semantic Layer, the Discovery API for models, lineage and model health, the Admin API for jobs, codegen, and dbt CLI commands such as build, run and test. You can run it yourself with uvx dbt-mcp, with or without a dbt platform account, or use the remote server hosted on the dbt platform. The README warns that CLI tools can modify data models and warehouse objects.

Pros

  • ✓Lineage, tests and metrics in one place
  • ✓Self-hosted or remote options
  • ✓text_to_sql and execute_sql with project context
  • ✓Remote server needs no local install

Cons

  • ✗Most useful only if you already use dbt
  • ✗Remote OAuth is in public beta for some plans
  • ✗CLI tools can change warehouse objects

Quick Install

uvx dbt-mcp

Example

Ask which downstream models break if a source column is renamed.

#7Best for: Graph data and Cypher
Neo4j MCP logo

Neo4j MCP

Free to install; Neo4j hosting not verified (as of October 2026)
Visit Neo4j MCP →

Neo4j's official MCP server gives an agent get-schema, read-cypher, write-cypher and list-gds-procedures tools. The read-cypher tool checks queries with EXPLAIN and Neo4j's query type classification, and read-only mode disables write-cypher. It runs over stdio by default, can also serve HTTP with bearer or basic auth, and installs from PyPI, Homebrew or a release binary.

Pros

  • ✓Official server from Neo4j
  • ✓Read-only mode disables write-cypher
  • ✓Schema introspection lets the agent learn the graph model
  • ✓Several install options

Cons

  • ✗Only for Neo4j
  • ✗Custom procedures misclassified as read-only may bypass the check
  • ✗Neo4j hosting prices not verified here

Quick Install

pip install neo4j-mcp-server

Example

Ask the agent to map the graph schema and find the shortest path between two customers.

The Verdict

Start with the server your database vendor publishes. Supabase MCP and Neon MCP are the simplest safe start for hosted Postgres because they are remote, use OAuth and support read-only mode. MongoDB MCP and ClickHouse MCP are the strongest official options for document and analytical data, and ClickHouse is read-only by default.

For MySQL, the community server works but needs a low-privilege database user because it has no read-only flag. Add dbt MCP server when your analytics run through dbt, and Neo4j MCP server for graphs.

Skip the archived Postgres and SQLite reference servers for new projects, and look at Google's MCP Toolbox for Databases if you need SQL Server or several engines behind one server.

Frequently Asked Questions

What is the best database MCP server?

It depends on your database. As of October 2026, Supabase MCP and Neon MCP are the easiest hosted options for Postgres, MongoDB MCP is the official choice for MongoDB, ClickHouse MCP suits analytics, and the community mysql_mcp_server is the most direct MySQL option.

Is there an MCP server for SQL Server?

None of the servers ranked here supports SQL Server. Google's open source MCP Toolbox for Databases lists SQL Server and Cloud SQL for SQL Server among its supported databases, and it works with MCP clients such as Claude Code, Codex and Gemini CLI.

Which MySQL MCP server should I use?

The designcomputer mysql_mcp_server is the most direct option in our listings. It is community maintained, MIT licensed, and has no read-only flag, so connect it with a dedicated MySQL user that has only the permissions you need. MCP Toolbox for Databases also supports MySQL.

Is the official PostgreSQL MCP server still maintained?

No. The PostgreSQL and SQLite reference servers were moved to the modelcontextprotocol servers-archived repository, which states they are no longer maintained and come with no security guarantees. Supabase MCP, Neon MCP and MCP Toolbox for Databases are maintained alternatives for Postgres.

Can a database MCP server change or delete my data?

Yes, if write tools are enabled and the database user allows it. Use the read-only options the vendors document, such as Supabase read_only=true, Neon readonly=true, MongoDB --readOnly and Neo4j read-only mode, and keep the database user's permissions as narrow as possible.

Where can I find database MCP servers on GitHub?

Most vendors publish servers in their own GitHub organizations, for example supabase/mcp, mongodb-js/mongodb-mcp-server, ClickHouse/mcp-clickhouse, dbt-labs/dbt-mcp and googleapis/mcp-toolbox. Prefer these over unmaintained forks.

Sources

About the author

Ethan Halfhide

Ethan Halfhide is an AI technologist who works with AI agents and Model Context Protocol integrations. He curates BestMCPTools' server directory, checking each server's documentation, supported clients and setup steps.

Keep exploring