MCP server for ODBC database connections. Provides tools for database querying via the Model Context Protocol.
Server provides 6 tools with complete input schemas and basic descriptions. However, descriptions are generic and lack actionable context for LLM selection. Parameter descriptions are minimal (e.g., 'Name of the connection to use (optional, uses default if not specified)' repeated across tools). No output schemas documented. No error handling guidance. Tool names follow verb_noun convention but descriptions do not explain WHEN to use each tool or what distinguishes similar tools (e.g., list-tables vs get-table-schema). Missing parameter constraints (e.g., max_rows has no bounds). No guidance on SQL injection prevention for execute-query.
Execute an SQL query and return results
Get schema information for a table
List all available DSNs on the system
List all configured database connections
List all tables in the database
Test a database connection and return information
Output schemas not documented. LLMs cannot plan downstream calls or extract required fields. No specification of what list-connections, list-tables, or execute-query return.
execute-query lacks input validation and error guidance for SQL injection. No mention of parameterized queries, prepared statements, or input sanitization. Dangerous for untrusted LLM-generated SQL.
Parameter descriptions are generic and repetitive. 'Name of the connection to use (optional, uses default if not specified)' appears verbatim in 4 tools. No guidance on what happens when connection_name is omitted or invalid.
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 53 | <=2025-11-25 | v2 |
max_rows parameter in execute-query has no bounds or constraints. LLM could pass 1000000, causing memory exhaustion or timeout. No minimum/maximum specified.
No error handling guidance. Tools return JSON but no documentation of error response format, recovery steps, or how LLM should handle connection failures, SQL syntax errors, or permission denials.