Read-only SQL MCP tool for Magebit_Mcp — exposes a guarded, SELECT-only query tool over the Magento database. Disabled by default; enable only for trusted operators.
Single tool 'query' has a clear, action-oriented name and a detailed description (186 chars) explaining read-only constraints, row limits, table allowlisting, and ACL-based access control. Input schema is present with two parameters (sql, limit), both typed and described. However, output schema is not documented in the visible code, the tool description does not specify what fields the result contains, how rows are structured, or pagination behavior. Error handling is not visible in the provided source. The tool follows security best practices (read-only enforcement, ACL gating, table allowlisting) but lacks guidance on what to do when a query fails or returns no results.
Execute a read-only SQL query against the Magento database with row limits, table allowlisting, column deny-listing, and ACL-based access control
Output schema not documented. Tool description does not specify result structure, field names, row format, or pagination behavior. LLMs cannot plan downstream operations without knowing what fields to extract.
Error handling guidance missing. No visible error responses, recovery hints, or actionable error messages. If a query times out, hits row limits, or references a denied table, the LLM has no guidance on what to do next.
Parameter 'limit' lacks constraint documentation. Description says 'Optional row cap' and 'Clamped to the configured ceiling' but does not state the actual ceiling value, minimum, or maximum. LLMs cannot reason about valid ranges without explicit bounds.
No pagination or result-limiting guidance in tool description. If a SELECT returns 10,000 rows, the tool description does not explain how results are capped, paginated, or truncated. Large result sets risk context window exhaustion.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 51 | 2026-07-28+ | v2 |
Transport mechanism not visible in provided source. No evidence of HTTP, SSE, or STDIO transport configuration. Cannot assess protocol readiness without knowing how the tool is exposed.