Read-Only MSSQL MCP Server with SQL Authentication
Three read-only tools with basic schemas and descriptions. All tools have input schemas with type definitions and descriptions present. However, descriptions are minimal (10-20 chars baseline), parameter descriptions lack actionable detail, and output schemas are undocumented. No error recovery guidance. Tool naming follows verb_noun pattern (list_, describe_, read_) which is good, but descriptions do not explain WHEN to use each tool or dependencies between them. Security is sound (read-only enforcement, parameterized queries), but composition lacks pagination and result limits are hardcoded without documentation.
Describes the structure of a table including column names, types, and constraints
Lists all tables in the database with their schema names
Executes a SELECT query to read data from the database
Output schemas undocumented. Tool descriptions do not specify what fields are returned or their types. LLMs cannot plan downstream calls or extract data reliably.
read_data enforces 10,000 row limit but does not document it in the tool description. Agents cannot predict when results will be truncated or plan pagination.
Parameter descriptions lack actionable constraints. 'schemas' param says 'Optional: Filter by specific schemas (e.g., ['dbo', 'etl'])', example values invite literal reuse. Should use enum or pattern constraint instead.
Error messages are generic. 'Query must start with SELECT' and 'Query contains forbidden operations' do not guide recovery. Should suggest alternatives or explain why the query failed.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 61 | 2026-07-28+ | v2 |
No tool composition guidance. Descriptions do not explain when to call list_table before describe_table, or how to chain tools. Discovery tools should hint at their role in multi-step workflows.