io.github.spences10/mcp-sqlite-tools

NPM · MCP-SQLITE-TOOLS · SCANNED AUG 3

MCP server for local SQLite database operations

Available components

+15 this week 39 39 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security38

Malware scan not yet available for this package.Unverified
No known CVEs affecting this package version or its production dependencies.Pass
No install/post-install scripts declared.Pass
48 of 49 dependencies flagged as unhealthy (47 deprecated). View diagnostics → Partial

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 90 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability43

AI-judged instruction clarity (poor).Fail
Tool/resource definitions use about 676 tokens (~35/item across 19 items; 19 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management0

Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified

Tool Coverage67

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
0% of tool parameters carry a description.Fail

Capabilities60

Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · mcp-sqlite-tools

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add spences10-mcp-sqlite-tools -- npx -y mcp-sqlite-tools

# add to Codex CLI

codex mcp add spences10-mcp-sqlite-tools -- npx -y mcp-sqlite-tools

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "spences10-mcp-sqlite-tools": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "mcp-sqlite-tools"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add spences10-mcp-sqlite-tools --command npx --arg -y --arg mcp-sqlite-tools

# ~/.hermes/config.yaml

mcp_servers:
  spences10-mcp-sqlite-tools:
    command: "npx"
    args: ["-y", "mcp-sqlite-tools"]

// mcp.json

{
  "mcpServers": {
    "spences10-mcp-sqlite-tools": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-sqlite-tools"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 0
- Dependency health: 0.78 → 0.08 ▼ functional
- Schema quality: unverified → poor ▲ functional
1 Aug 26 +21
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → pass ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- MCP protocol: unverified → fail ▼ functional
- License: unverified → pass ▲ functional
- Dependency health: unverified → 0.78 ▲ functional
- Maintenance: unverified → pass ▲ functional
- Licence: MIT functional
31 Jul 26 −6
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
27 Jul 26 24

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 49 packages

49 packages in the resolved dependency tree · 47 deprecated · 25 stale.

MCP tools — 19 exposed · ~676 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

backup_database ✓ SAFE: Create a backup copy of a database ~35

✓ SAFE: Create a backup copy of a database

Input Output Examples

Name	Type	Req	Description
backup_path	string	—	—
source_database	string	—	—

No output schema declared.

No examples provided.

begin_transaction ⚠️ TRANSACTION: Begin a database transaction ~26

⚠️ TRANSACTION: Begin a database transaction

Input Output Examples

Name	Type	Req	Description
database	string	—	—

No output schema declared.

No examples provided.

bulk_insert ⚠️ DESTRUCTIVE: Insert multiple records efficiently in batches ~51

⚠️ DESTRUCTIVE: Insert multiple records efficiently in batches

Input Output Examples

Name	Type	Req	Description
batch_size	number	—	—
data	array	yes	—
database	string	—	—
table	string	yes	—

No output schema declared.

No examples provided.

close_database ✓ SAFE: Close a database connection ~23

✓ SAFE: Close a database connection

Input Output Examples

Name	Type	Req	Description
database	string	—	—

No output schema declared.

No examples provided.

commit_transaction ✓ TRANSACTION: Commit the current database transaction ~25

✓ TRANSACTION: Commit the current database transaction

Input Output Examples

Name	Type	Req	Description
database	string	—	—

No output schema declared.

No examples provided.

create_table ⚠️ SCHEMA CHANGE: Create a new table with specified columns ~44

⚠️ SCHEMA CHANGE: Create a new table with specified columns

Input Output Examples

Name	Type	Req	Description
columns	array	yes	—
database	string	—	—
name	string	yes	—

No output schema declared.

No examples provided.

database_info ✓ SAFE: Get information about a database (size, tables, etc.) ~30

✓ SAFE: Get information about a database (size, tables, etc.)

Input Output Examples

Name	Type	Req	Description
database	string	—	—

No output schema declared.

No examples provided.

describe_table ✓ SAFE: Get schema information for a table ~32

✓ SAFE: Get schema information for a table

Input Output Examples

Name	Type	Req	Description
database	string	—	—
table	string	yes	—

No output schema declared.

No examples provided.

drop_table ⚠️ DESTRUCTIVE: Permanently delete a table and all its data ~39

⚠️ DESTRUCTIVE: Permanently delete a table and all its data

Input Output Examples

Name	Type	Req	Description
database	string	—	—
table	string	yes	—

No output schema declared.

No examples provided.

execute_read_query ✓ SAFE: Execute read-only SQL queries (SELECT, PRAGMA, EXPLAIN) ~48

✓ SAFE: Execute read-only SQL queries (SELECT, PRAGMA, EXPLAIN)

Input Output Examples

Name	Type	Req	Description
database	string	—	—
params	object	—	—
query	string	yes	—

No output schema declared.

No examples provided.

execute_schema_query ⚠️ SCHEMA CHANGE: Execute DDL queries (CREATE, ALTER, DROP) ~48

⚠️ SCHEMA CHANGE: Execute DDL queries (CREATE, ALTER, DROP)

Input Output Examples

Name	Type	Req	Description
database	string	—	—
params	object	—	—
query	string	yes	—

No output schema declared.

No examples provided.

execute_write_query ⚠️ DESTRUCTIVE: Execute SQL that modifies data (INSERT, UPDATE, DELETE) ~49

⚠️ DESTRUCTIVE: Execute SQL that modifies data (INSERT, UPDATE, DELETE)

Input Output Examples

Name	Type	Req	Description
database	string	—	—
params	object	—	—
query	string	yes	—

No output schema declared.

No examples provided.

export_schema ✓ SAFE: Export database schema as SQL or JSON ~38

✓ SAFE: Export database schema as SQL or JSON

Input Output Examples

Name	Type	Req	Description
database	string	—	—
format	—	—	—
tables	array	—	—

No output schema declared.

No examples provided.

import_schema ⚠️ SCHEMA CHANGE: Import and execute schema from SQL or JSON ~43

⚠️ SCHEMA CHANGE: Import and execute schema from SQL or JSON

Input Output Examples

Name	Type	Req	Description
database	string	—	—
format	—	—	—
schema	string	yes	—

No output schema declared.

No examples provided.

list_databases ✓ SAFE: List available database files in a directory ~27

✓ SAFE: List available database files in a directory

Input Output Examples

Name	Type	Req	Description
directory	string	—	—

No output schema declared.

No examples provided.

list_tables ✓ SAFE: List all tables and views in a database ~27

✓ SAFE: List all tables and views in a database

Input Output Examples

Name	Type	Req	Description
database	string	—	—

No output schema declared.

No examples provided.

open_database ✓ SAFE: Open or create a SQLite database file ~33

✓ SAFE: Open or create a SQLite database file

Input Output Examples

Name	Type	Req	Description
create	boolean	—	—
path	string	yes	—

No output schema declared.

No examples provided.

rollback_transaction ⚠️ TRANSACTION: Rollback the current database transaction ~28

⚠️ TRANSACTION: Rollback the current database transaction

Input Output Examples

Name	Type	Req	Description
database	string	—	—

No output schema declared.

No examples provided.

vacuum_database ✓ MAINTENANCE: Optimize database storage by reclaiming unused space ~30

✓ MAINTENANCE: Optimize database storage by reclaiming unused space

Input Output Examples

Name	Type	Req	Description
database	string	—	—

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug