SQLite MCP Server

Point Claude Code, Claude Desktop, Cursor or any MCP client at a SQLite file and ask questions in plain English: "revenue by month", "which customers ordered twice and then stopped", "why is this query slow". The server is read-only unless you turn writes on, caps results, stops runaway queries, and never lets the model attach other files or load extensions.

• 7 tools: list_databases, list_tables (with row counts), describe_table (columns, keys, foreign keys, indexes, CREATE SQL, sample rows), read_query, explain_query (flags full scans and temp sorts), search_schema, export_csv. write_query appears only with --allow-writes.
• Safety in layers: the file is opened mode=ro; a SQLite authorizer allows only SELECT, reads and read-only PRAGMAs; ATTACH/DETACH and load_extension are always blocked; one statement per call; ? parameters; row cap (default 200); time limit (default 10 s); writes run in a transaction and roll back on error.
• Several databases at once: --db app.db --db analytics=/data/events.sqlite.
• Python 3.9+ standard library only. No install, no Node, no network. Works with Django, Rails, Prisma, Drizzle, Turso exports, browser history, Anki, Apple Notes copies... any SQLite file.
• MCP 2026-07-28 and the 2025-11-25 handshake on the same server, so new and older clients both connect.
• Claude Code plugin with the sqlite-analyst skill (schema first, parameterized SQL, explain slow queries, confirm writes).

Claude Code (plugin): copy this folder somewhere permanent, then

export SQLITE_MCP_DB=/absolute/path/to/app.db
claude --plugin-dir /path/to/sqlite-mcp-server

Claude Code (just the server): claude mcp add sqlite -- python3 /path/to/sqlite-mcp-server/server.py --db /path/to/app.db

Claude Desktop / Cursor: see examples/configs/ (absolute paths). Restart the app.

Options: --allow-writes, --max-rows 500, --timeout 30. Environment: SQLITE_MCP_DB (several paths separated by :; ; on Windows), SQLITE_MCP_ALLOW_WRITES=1.

./demo.sh builds a fictional coffee shop database (60 customers, 186 orders) and runs a real MCP session: tables, schema, revenue by month, a query plan, and a blocked DELETE. ./run_tests.sh runs 13 tests (including MCP protocol tests).

• SQLite only (not Postgres or MySQL). For a big production database, point it at a copy or a read replica file.
• The model writes the SQL. Read-only mode protects the data, not the correctness of an answer; check the query it shows you.
• Values over 2,000 characters and blobs are shortened in results.
• Not affiliated with SQLite or Anthropic.

Related: CSV MCP Server: https://youraitools.co/marketplace/csv-mcp-server. MCP Config Validator: https://youraitools.co/marketplace/mcp-config-validator