// SCAN REPORT

Sql Database

12 tools. 1 can modify or destroy data without limits.

1 write tool that can modify data. Rate limits recommended.

Last updated: 5 Jul 2026

1 can modify or destroy data

11 read-only

12 tools total

Verified server · catalogue entry verified 05/07/2026 · full schemas captured for 11 of 12 tools

How to control Sql Database ↓

TOOL MAP

What Sql Database exposes to your agents

Read (11) Write / Execute (1) Destructive / Financial (0)

Running more than one server? Check your whole stack →

CONTEXT-WINDOW COST

What Sql Database costs in tokens

1,605 tokens of tool definitions, loaded on every request

0.8% of a 200k context window

186 heaviest tool: find_column_references

Full per-tool breakdown → Model it in the token calculator →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Sql Database tools

Execute · Critical execute_query This tool permits execution of any SQL statement supplied by the caller, including potentially destructive operations (DELETE, DROP, TRUNCATE) or data exfiltration queries.

1 of Sql Database's 12 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Sql Database

PolicyLayer is an MCP gateway — it sits between your AI agents and Sql Database, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "find_column_references": {
    "limits": [
      {
        "counter": "find_column_references_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Sql Database — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SQL DATABASE →

Instant setup, no code required.

FULL CATALOGUE

All 12 Sql Database tools

EXECUTE 1 tools

Execute execute_query Execute an arbitrary SQL query against the specified database and return the results as a formatted table.

READ 11 tools

Read find_column_references Find all references to a column name across the database — which tables/views define it and which stored proce Read get_foreign_keys Show all foreign key relationships for a given table — both outgoing (this table references) and incoming (oth Read get_indexes List all indexes on a specified table, including index type, columns, uniqueness, and whether the index is the Read get_object_dependencies Show what other objects a given database object references (tables, views, procedures it calls) and what objec Read get_stored_procedure_definition Get the full CREATE PROCEDURE source code for a stored procedure, including its parameters and body. Read get_table_schema Get the column-level schema of a specific table, including column name, data type, max length, and nullability Read list_databases List all accessible databases on each configured SQL Server. Connects to each server's master database and dis Read list_stored_procedures List all stored procedures in the specified database, including schema, name, parameter count, and last modifi Read list_tables List all user tables in the specified SQL Server database, including schema name and approximate row count. Read list_views List all views in the specified database, including schema name, view name, and whether the view is indexed. Read search_objects Search for database objects (tables, views, stored procedures, functions, triggers) by name pattern. Supports

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Sql Database

Is the Sql Database MCP server safe to use without restrictions? +

The Sql Database server is primarily read-only with 11 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the Sql Database MCP server expose? +

12 tools across 2 categories: Execute, Read. 11 are read-only. 1 can modify, create, or delete data.

How do I enforce a policy on Sql Database? +

Register the Sql Database MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Sql Database tool call.

Deterministic rules across all 12 Sql Database tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SQL DATABASE →

Instant setup, no code required.

12 Sql Database tools catalogued and risk-classified — across an index of 43,000+ MCP servers.