// SCAN REPORT

SQL Server MCP Service

9 tools. 2 can modify or destroy data without limits.

2 write tools that can modify data. Rate limits recommended.

Last updated: 1 Jul 2026

2 can modify or destroy data

7 read-only

9 tools total

Community server · catalogue entry verified 01/07/2026

How to control SQL Server MCP Service ↓

TOOL MAP

What SQL Server MCP Service exposes to your agents

Read (7) Write / Execute (2) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous SQL Server MCP Service tools

Execute · High execute_procedure Stored procedures can perform arbitrary operations—reads, writes, deletes, or even financial transactions—depending on their implementation. Execute · High execute_query While the server description mentions 'built-in protection against SQL injection and destructive operations', the tool itself is fundamentally an Execute category tool because it runs SQL queries whose effects depend ent

2 of SQL Server MCP Service's 9 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control SQL Server MCP Service

PolicyLayer is an MCP gateway — it sits between your AI agents and SQL Server MCP Service, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "get_database_info": {
    "limits": [
      {
        "counter": "get_database_info_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register SQL Server MCP Service — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SQL SERVER MCP SERVICE →

Instant setup, no code required.

FULL CATALOGUE

All 9 SQL Server MCP Service tools

EXECUTE 2 tools

Execute execute_procedure Executes a stored procedure with parameters Execute execute_query Executes a SQL query in SQL Server

READ 7 tools

Read get_database_info Gets general information from the database Read get_function_schema Gets the schema and parameters of a specific function Read get_procedure_schema Gets the schema and parameters of a specific stored procedure Read get_table_schema Gets the schema of a specific table Read list_functions Lists all functions (scalar and table-valued) in the database Read list_procedures Lists all stored procedures in the database Read list_tables Lists all the tables in the database

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about SQL Server MCP Service

Is the SQL Server MCP Service MCP server safe to use without restrictions? +

The SQL Server MCP Service server is primarily read-only with 7 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the SQL Server MCP Service MCP server expose? +

9 tools across 2 categories: Execute, Read. 7 are read-only. 2 can modify, create, or delete data.

How do I enforce a policy on SQL Server MCP Service? +

Register the SQL Server MCP Service MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every SQL Server MCP Service tool call.

Deterministic rules across all 9 SQL Server MCP Service tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SQL SERVER MCP SERVICE →

Instant setup, no code required.

9 SQL Server MCP Service tools catalogued and risk-classified — across an index of 43,000+ MCP servers.