About io.github.Rheopyrin/db-access-mcp
io.github.Rheopyrin/db-access-mcp is an MCP server published by Rheopyrin in the Data category: mCP server for Postgres/MySQL/Redshift/SQL Server over SSH/SSM tunnels with secret providers.
Recent commit activity is the strongest signal that reported issues will get attention.
Install
claude mcp add io-github-rheopyrin-db-access-mcp -- npx -y @rheopyrin/db-access-mcpnpx -y @rheopyrin/db-access-mcpThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (11)
config_reloadRe-reads the config files into the running server so connections/tunnels added or edited on disk become usable without a restart. **Never disturbs live state** — see below.
Parameters not published.
connection_findFinds connections by `host`, `port`, `database`, `type`, `read_only` and/or `metadata` key-value pairs. All filters are combined with **AND**. `user`/`password` filters are ignored (and noted in the response).
Parameters not published.
connection_listLists configured connections: key, type, description, `read_only`, host/port/database, tunnel name, metadata. Credentials are **never** returned (allowlist-based sanitization; connection strings are parsed only for host/port/database).
Parameters not published.
connection_testEnd-to-end health check: secrets → tunnel → pool → one-row server-info query. Returns `ok: true` with server version/user/database/latency, or `ok: false` with the failure code and hint (an unreachable DB is a valid result, not a tool error).
Parameters not published.
dialect_listLists the supported database dialects: name (the `type` value for connections), default port and the plan format `query_plan` produces.
Parameters not published.
down_tunnelCloses a tunnel by `tunnel_id`. By default only the up_tunnel pin is released — if query pools still hold the tunnel it stays open (`remaining_holders`); `force: true` drains the holder pools and closes it unconditionally.
Parameters not published.
queryExecutes SQL on a connection. Accepts `connection`, `query`, optional `database` (see multi-database connections), `max_rows` and `timeout_ms` overrides. Results are truncated to the row cap with `truncated: true`.
Parameters not published.
query_planReturns the execution plan without running the query: `EXPLAIN (FORMAT JSON)` for postgres, `EXPLAIN FORMAT=JSON` for mysql, text `EXPLAIN` for redshift, `SHOWPLAN_XML` for mssql.
Parameters not published.
query_to_fileExecutes a query and writes the result to a file (`csv`/`jsonl`, inferred from the extension) instead of the model context. `file_path` is relative to the export dir (default `/tmp/db-access-mcp/exports`, created on demand), or an absolute/`~` path **under** the export dir or a configured `allow_export_paths` root — writes outside are rejected. Existing files require `overwrite: true`. postgres/mysql **stream** rows (no cap by default); redshift/mssql buffer and are capped at 100k rows.
Parameters not published.
tunnel_listLists the tunnels currently open in this MCP instance with a live health probe: `tunnel_id`, tunnel name/type, local and remote endpoints, `healthy`, holder pools (`connections`), up_tunnel `pins`, external PIDs.
Parameters not published.
up_tunnelOpens (or reuses) the tunnel configured for a connection and returns `{host, port, tunnel_id, reused}`. Optional `local_port` binds an exact local port; if the tunnel is already open on a different port or the port is taken, the call fails with the current port in the error.
Parameters not published.
Ask AI
Ask AI about io.github.Rheopyrin/db-access-mcp
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.