English Français العربية

Secure Schema MCP

Official registry Data and databases

Read-only MCP server for exposing database schema metadata without row data.

Source code

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

PYPI package mcp-secure-schema
Claude Code 
claude mcp add secure-schema-mcp -e 'DATABASE_URL=<your database_url>' -e 'DATABASE_SCHEMA=<DATABASE_SCHEMA>' -e 'ALLOWED_TABLES=<ALLOWED_TABLES>' -e 'SECURE_SCHEMA_ENV=development' -e 'FASTMCP_CHECK_FOR_UPDATES=off' -e 'FASTMCP_SHOW_SERVER_BANNER=false' -- uvx mcp-secure-schema==1.0.1
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "secure-schema-mcp": {
            "command": "uvx",
            "args": [
                "mcp-secure-schema==1.0.1"
            ],
            "env": {
                "DATABASE_URL": "<your database_url>",
                "DATABASE_SCHEMA": "<DATABASE_SCHEMA>",
                "ALLOWED_TABLES": "<ALLOWED_TABLES>",
                "SECURE_SCHEMA_ENV": "development",
                "FASTMCP_CHECK_FOR_UPDATES": "off",
                "FASTMCP_SHOW_SERVER_BANNER": "false"
            }
        }
    }
}

Environment variables

  • DATABASE_URL required secret SQLAlchemy database URL used for schema inspection.
  • DATABASE_SCHEMA Optional default schema or catalog namespace. In production it is locked and tool arguments cannot override it.
  • ALLOWED_TABLES Optional comma-separated table/view allowlist. When set, only listed tables and views are visible.
  • SECURE_SCHEMA_ENV Set to production to require ALLOWED_TABLES during startup.
  • FASTMCP_CHECK_FOR_UPDATES Set to off to disable FastMCP startup update checks.
  • FASTMCP_SHOW_SERVER_BANNER Set to false to suppress the FastMCP startup banner.

Frequently asked questions

What is Secure Schema MCP?

Read-only MCP server for exposing database schema metadata without row data.

How do I install Secure Schema MCP?

It runs on your machine. In Claude Code: claude mcp add secure-schema-mcp -e 'DATABASE_URL=<your database_url>' -e 'DATABASE_SCHEMA=<DATABASE_SCHEMA>' -e 'ALLOWED_TABLES=<ALLOWED_TABLES>' -e 'SECURE_SCHEMA_ENV=development' -e 'FASTMCP_CHECK_FOR_UPDATES=off' -e 'FASTMCP_SHOW_SERVER_BANNER=false' -- uvx mcp-secure-schema==1.0.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Secure Schema MCP need an API key?

Yes. It expects DATABASE_URL, which you set in its configuration.

Is Secure Schema MCP open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains Secure Schema MCP?

It is published by Siddharth-coder13. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.