// SCAN REPORT

Mssql

33 tools. 1 can modify or destroy data without limits.

1 write tool that can modify data. Rate limits recommended.

Last updated: 1 Jul 2026

1 can modify or destroy data

32 read-only

33 tools total

Verified server · catalogue entry verified 01/07/2026 · full schemas captured for 32 of 33 tools

How to control Mssql ↓

TOOL MAP

What Mssql exposes to your agents

Read (32) Write / Execute (1) Destructive / Financial (0)

Running more than one server? Check your whole stack →

CONTEXT-WINDOW COST

What Mssql costs in tokens

4,537 tokens of tool definitions, loaded on every request

2.3% of a 200k context window

189 heaviest tool: search_stored_procedures_by_content

Full per-tool breakdown → Model it in the token calculator →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Mssql tools

Execute · High execute_query The tool executes arbitrary SQL queries supplied by the user ('custom SQL').

1 of Mssql's 33 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Mssql

PolicyLayer is an MCP gateway — it sits between your AI agents and Mssql, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "analyze_check_constraints": {
    "limits": [
      {
        "counter": "analyze_check_constraints_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Mssql — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MSSQL →

Instant setup, no code required.

FULL CATALOGUE

All 33 Mssql tools

EXECUTE 1 tools

Execute execute_query Execute a custom SQL SELECT query with automatic limit (top 20 rows)

READ 32 tools

Read analyze_check_constraints Extract and analyze business rules from check constraints Read analyze_data_distribution Get data distribution patterns for columns to understand data quality and patterns Read analyze_database_size Get comprehensive database size information including data and log file sizes Read analyze_index_usage Show detailed index usage statistics to identify unused or underutilized indexes Read analyze_null_patterns Find columns with high null percentages and analyze null patterns Read analyze_table_stats Get table row counts, size information, and last update statistics Read describe_stored_procedure Get detailed information about a specific stored procedure including parameters and definition Read describe_table Get detailed schema information for a specific table including columns, data types, and constraints Read describe_trigger Get detailed information about a specific trigger including its definition and events Read describe_view Get detailed information about a specific view including its definition and dependencies Read detect_audit_columns Identify common audit trail patterns (created/modified dates, user tracking) Read find_computed_columns List computed columns and their formulas to understand derived business logic Read find_lookup_tables Identify reference/lookup tables automatically based on table patterns Read find_missing_indexes Identify potentially missing indexes based on query execution patterns Read get_all_stored_procedure_definitions Get complete SQL definitions for all stored procedures in a schema Read get_multiple_stored_procedure_definitions Get complete SQL definitions for multiple stored procedures at once Read get_relationships Get foreign key relationships between tables in the database Read get_stored_procedure_definition Get the complete SQL query/definition of a stored procedure - this is the actual source code Read list_connections List all available named database connections configured in the server Read list_constraints List all constraints (check, unique, foreign key, etc.) across tables in the database Read list_databases List all databases available on the SQL Server instance Read list_default_constraints List all default value constraints and their definitions Read list_functions List all user-defined functions (scalar, table-valued, etc.) Read list_indexes List all indexes on tables with usage statistics and detailed information Read list_stored_procedures List all stored procedures, functions, and their basic information Read list_tables List all tables in the connected database Read list_triggers List all triggers in the database with their associated tables Read list_user_defined_types List all user-defined data types and their definitions Read list_views List all views in the database with their basic information Read sample_data Retrieve sample data from a table (top 10 rows by default) Read search_stored_procedures_by_content Search for stored procedures containing specific text or patterns in their SQL definition Read test_connection Test the database connection and return basic server information

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Mssql

Is the Mssql MCP server safe to use without restrictions? +

The Mssql server is primarily read-only with 32 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the Mssql MCP server expose? +

33 tools across 2 categories: Execute, Read. 32 are read-only. 1 can modify, create, or delete data.

How do I enforce a policy on Mssql? +

Register the Mssql MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Mssql tool call.

Deterministic rules across all 33 Mssql tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MSSQL →

Instant setup, no code required.

33 Mssql tools catalogued and risk-classified — across an index of 43,000+ MCP servers.