claude-database-tools

SQL Server CLI and MCP server for Claude Code.

Why This Tool?

This project is an alternative to Microsoft's official mssql MCP server with some key advantages:

SQL Server Authentication: Supports SQL Server authentication (username/password), not just Windows/Entra authentication. Ideal for development environments, Docker containers, or scenarios where integrated auth isn't available.
CLI-First Design: The CLI tools can be used directly from a Claude Code skill, giving you database access without requiring MCP server setup. This is useful when you want simpler configuration or need to work in environments where MCP servers are problematic.
MCP Server Included: Also provides an MCP server if you prefer that integration approach.

Features

CLI Tool: Command-line interface for SQL Server operations
MCP Server: Model Context Protocol server for Claude integration (experimental)
Security: Built-in SQL injection prevention and query validation
Operations: List tables, describe schemas, query data, insert/update/delete records, DDL generation

Installation

git clone https://github.com/cyronius/claude-database-tools.git
cd claude-database-tools
npm install
npm run build

Configuration

Copy .env.example to .env and configure your database connection:

cp .env.example .env

Edit .env with your SQL Server credentials:

SQL_SERVER=localhost
SQL_DATABASE=your_database
SQL_USER=your_username
SQL_PASSWORD=your_password
SQL_PORT=1433
SQL_ENCRYPT=false
SQL_TRUST_SERVER_CERTIFICATE=true

CLI Usage

After building, run commands with:

node dist/cli/index.js <command> [options]

Or install globally:

npm install -g .
sql-cli <command> [options]

Commands

Command	Description
`list-tables [schemas...]`	List tables, optionally filtered by schema
`describe-table <tableName>`	Get table schema (columns, indexes, foreign keys)
`read-data <query>`	Execute a SELECT query
`insert-data <tableName> <jsonData>`	Insert records
`update-data <tableName> <updates> <whereClause>`	Update records
`delete-data <tableName> <whereClause> --confirm`	Delete records
`exec-proc <procedureName> [params]`	Execute stored procedure
`create-table <tableName> <columns>`	Create a new table
`drop-table <tableName>`	Drop a table
`create-index <tableName> <indexName> <columns>`	Create an index
`get-ddl <tableName>`	Generate CREATE TABLE DDL
`get-alter-ddl <tableName>`	Generate ALTER TABLE DDL

Examples

# List all tables
sql-cli list-tables

# List tables in specific schemas
sql-cli list-tables dbo sales

# Describe a table
sql-cli describe-table dbo.Users

# Query data
sql-cli read-data "SELECT TOP 10 * FROM dbo.Users"

# Insert data
sql-cli insert-data dbo.Users '{"name": "John", "email": "john@example.com"}'

# Update data
sql-cli update-data dbo.Users '{"name": "Jane"}' "id = 1"

# Delete data (requires --confirm flag)
sql-cli delete-data dbo.Users "id = 1" --confirm

# Get table DDL
sql-cli get-ddl dbo.Users

MCP Server (Experimental)

Note: The MCP server integration has not been fully tested. Use at your own risk.

The MCP server allows Claude Code to interact with your SQL Server database directly.

Setup

Add to your ~/.claude/mcp.json:

{
  "mcpServers": {
    "mssql": {
      "command": "node",
      "args": ["/path/to/claude-database-tools/dist/index.js"],
      "env": {
        "SQL_SERVER": "your-server",
        "SQL_DATABASE": "your-database",
        "SQL_USER": "your-username",
        "SQL_PASSWORD": "your-password",
        "SQL_ENCRYPT": "true",
        "READONLY": "true"
      }
    }
  }
}

Restart Claude Code to load the MCP server.

Available MCP Tools

Read-Only (available when READONLY=true):

list_tables - List tables
describe_table - Get table schema
read_data - Execute SELECT queries
get_table_ddl - Generate CREATE TABLE DDL
get_table_alter_ddl - Generate ALTER TABLE DDL

Write (requires READONLY=false):

insert_data - Insert records
update_data - Update records
delete_data - Delete records
create_table - Create tables
create_index - Create indexes
drop_table - Drop tables
execute_stored_proc - Execute stored procedures

Security

SQL Injection Prevention: SELECT queries are validated against dangerous keywords and patterns
Parameterized Queries: All INSERT/UPDATE/DELETE operations use parameterized queries
WHERE Clause Required: UPDATE and DELETE operations require WHERE clauses
Query Limits: Maximum query length of 10,000 characters, result sets limited to 10,000 records
Read-Only Mode: Set READONLY=true to disable write operations

License

MIT