// SCAN REPORT

Kingbase

11 tools. 2 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 5 Jul 2026

2 can modify or destroy data

9 read-only

11 tools total

Verified server · catalogue entry verified 05/07/2026 · full schemas captured for 10 of 11 tools

How to control Kingbase ↓

TOOL MAP

What Kingbase exposes to your agents

Read (9) Write / Execute (1) Destructive / Financial (1)

Running more than one server? Check your whole stack →

CONTEXT-WINDOW COST

What Kingbase costs in tokens

2,731 tokens of tool definitions, loaded on every request

1.4% of a 200k context window

410 heaviest tool: kb_table_data

Full per-tool breakdown → Model it in the token calculator →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Kingbase tools

Destructive · Critical kb_execute_ddl While the tool can perform reversible operations (CREATE, ALTER), it explicitly enables destructive operations (DROP, TRUNCATE) that cannot be undone. Execute · High kb_execute This tool explicitly runs INSERT, UPDATE, and DELETE statements against a database.

2 of Kingbase's 11 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Kingbase

PolicyLayer is an MCP gateway — it sits between your AI agents and Kingbase, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "kb_execute_ddl": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Cap read operations

{
  "kb_describe_table": {
    "limits": [
      {
        "counter": "kb_describe_table_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Kingbase — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON KINGBASE →

Instant setup, no code required.

FULL CATALOGUE

All 11 Kingbase tools

DESTRUCTIVE 1 tools

Destructive kb_execute_ddl Execute a DDL statement (CREATE, ALTER, DROP, TRUNCATE, etc.) against the KingBase database. WARNING: DDL ope

EXECUTE 1 tools

Execute kb_execute Execute a DML statement (INSERT, UPDATE, DELETE) against the KingBase database. Returns the number of affecte

READ 9 tools

Read kb_describe_table Get detailed structure of a table or view, including columns, types, constraints, and comments. Args: - tab Read kb_explain Get the execution plan for a SQL query using EXPLAIN. Use this to analyze query performance, identify full ta Read kb_list_constraints List all constraints (PK, FK, UNIQUE, CHECK) on a table. Args: - table (string): Table name - schema (str Read kb_list_indexes List all indexes on a table including columns, uniqueness, and index type. Args: - table (string): Table na Read kb_list_schemas List all schemas in the KingBase database. Returns schema names excluding internal PostgreSQL/KingBase system Read kb_list_tables List all tables and/or views in a schema. Args: - schema (string, optional): Schema name, defaults to DB_SC Read kb_query Execute a read-only SQL query (SELECT/WITH/SHOW) against the KingBase database. Returns query results as a fo Read kb_table_data Preview data from a table with optional filtering and pagination. A convenient shortcut for common SELECT ope Read kb_table_stats Get storage and usage statistics for a table, including row count, size, and dead tuples. Args: - table (st

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Kingbase

Can an AI agent delete data through the Kingbase MCP server? +

Yes. The Kingbase server exposes 1 destructive tools including kb_execute_ddl. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How many tools does the Kingbase MCP server expose? +

11 tools across 3 categories: Destructive, Execute, Read. 9 are read-only. 2 can modify, create, or delete data.

How do I enforce a policy on Kingbase? +

Register the Kingbase MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Kingbase tool call.

Deterministic rules across all 11 Kingbase tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON KINGBASE →

Instant setup, no code required.

11 Kingbase tools catalogued and risk-classified — across an index of 43,000+ MCP servers.