The Plug WeeklyThis week: databases. Socketlist lists 92 database servers with a score of 70 or higher. These five scored best, again from five different authors. Every number below comes from public data (the official MCP Registry, GitHub and npm) as of October 17, 2026.
The five picks
A DynamoDB emulator with an MCP server exposing 35 DynamoDB tools to coding agents.
The evidence: 102 GitHub stars · 6,045 npm downloads last week · Apache-2.0 licence · has a security policy · last push Oct 17, 2026 · repo created Mar 2026 · no hygiene flags. (Maintenance 35/40 · security hygiene 35/35 · adoption 20/25)
npx -y dynoxide mcpBefore you install: A local DynamoDB emulator backed by SQLite, so the agent works on a local copy, not your AWS account. Plain npx dynoxide starts the HTTP emulator; the mcp subcommand starts the MCP server.
Why it scored 90: Maintenance 35/40: last push Oct 17, 2026, 21 open issues (recent commits earn up to 30 points and a light issue load up to 10). Security hygiene 35/35: Apache-2.0 licence, a SECURITY.md, a published package. Adoption 20/25: 102 GitHub stars and 6,045 npm downloads last week, scored on a log scale.
Sources: Socketlist page · GitHub
Read-only SQL queries and schema inspection for IBM Db2 for i over ODBC, JT400 or Mapepire (SSH).
The evidence: 26 GitHub stars · 586 npm downloads last week · MIT licence · has a security policy · last push Oct 17, 2026 · repo created Jan 2026 · no hygiene flags. (Maintenance 40/40 · security hygiene 35/35 · adoption 14/25)
npx -y mcp-server-db2i@latestBefore you install: Only useful if you run IBM i (AS/400). Needs DB2I_HOSTNAME, DB2I_USERNAME and DB2I_PASSWORD; use a profile that can only read. Queries are limited to SELECT statements with a result cap and a timeout, and QUERY_ALLOWED_SCHEMAS limits which libraries it may query.
Why it scored 89: Maintenance 40/40: last push Oct 17, 2026, 19 open issues. Security hygiene 35/35: MIT licence, a SECURITY.md, a published package. Adoption 14/25: 26 GitHub stars and 586 npm downloads last week, scored on a log scale, so small or young projects top out low.
Sources: Socketlist page · GitHub
SQL database to MCP tools and REST API: PostgreSQL, MySQL, SQL Server, Oracle, SQLite, Snowflake.
The evidence: 159 GitHub stars · MIT licence · has a security policy · last push Oct 16, 2026 · repo created Feb 2026 · no hygiene flags. (Maintenance 40/40 · security hygiene 35/35 · adoption 11/25)
npx -y @faucetdb/faucet mcpBefore you install: In stdio mode it runs with local admin rights on the databases you added with faucet serve or faucet db add. For anything shared, run the HTTP server instead and give the agent an API key tied to a role with only the access it needs.
Why it scored 86: Maintenance 40/40: last push Oct 16, 2026, 3 open issues. Security hygiene 35/35: MIT licence, a SECURITY.md, a published package. Adoption 11/25: 159 GitHub stars, no npm download figure, scored on a log scale, so small or young projects top out low.
Sources: Socketlist page · GitHub
112 rules that catch dangerous PostgreSQL migrations, plus a pass/fail gate to call before any DDL.
The evidence: 9 GitHub stars · 648 npm downloads last week · MIT licence · has a security policy · last push Oct 13, 2026 · repo created Feb 2026 · no hygiene flags. (Maintenance 39/40 · security hygiene 35/35 · adoption 12/25)
npx -y migrationpilot-mcpBefore you install: A PostgreSQL migration linter. The tool to know is check_before_apply, a pass/fail gate the agent calls before it writes or runs DDL. It checks migration files without a database; give it a database URL only if you want the extra checks, and it then opens one read-only connection.
Why it scored 86: Maintenance 39/40: last push Oct 13, 2026, 0 open issues (recent commits earn up to 30 points and a light issue load up to 10). Security hygiene 35/35: MIT licence, a SECURITY.md, a published package. Adoption 12/25: 9 GitHub stars and 648 npm downloads last week, scored on a log scale, so small or young projects top out low.
Sources: Socketlist page · GitHub
MCP server for SQLite databases. Read-only by default, row caps, statement timeouts.
The evidence: 5 GitHub stars · 200 npm downloads last week · MIT licence · has a security policy · last push Oct 17, 2026 · repo created Jul 2026 · no hygiene flags. (Maintenance 40/40 · security hygiene 35/35 · adoption 10/25)
npx -y @database-mcp/sqliteWhy it scored 85: Maintenance 40/40: last push Oct 17, 2026, 1 open issue. Security hygiene 35/35: MIT licence, a SECURITY.md, a published package. Adoption 10/25: 5 GitHub stars and 200 npm downloads last week, scored on a log scale, so small or young projects top out low.
Sources: Socketlist page · GitHub
On the radar
- mcp-neo4j-aura-manager (84): MCP server for Neo4j Aura Database Instance Manager.
- PostgreSQL (84): MCP server for PostgreSQL: local, Docker, RDS, Neon, Supabase, or behind an SSH bastion.
- database-mcp-mysql (84): MCP server for MySQL. Read-only by default, row caps, statement timeouts, secrets never logged.
- MCP Superset (83): Apache Superset MCP server — 135+ tools for dashboards, charts, datasets, SQL Lab, and security.
- db-mcp (SQLite MCP Server) (83): SQLite MCP server with OAuth 2.1, HTTP/SSE, 122 tools, and smart tool filtering.
- PostgreSQL (hardened, read-only) (83): Read-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction.