{ "data": { "a": { "slug": "mcp-toolbox-databases", "name": "MCP Toolbox for Databases", "vendor": "Google", "vendorUrl": "https://mcp-toolbox.dev", "kind": "mcp", "category": "data", "summary": "MCP Toolbox for Databases is Google's open-source MCP server for more than 30 data sources, among them BigQuery, AlloyDB, Cloud SQL, Spanner and PostgreSQL. It runs as a binary or container with prebuilt or custom tools from tools.yaml.", "url": "https://www.anchorterminal.com/tools/mcp-toolbox-databases", "markdownUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases.json", "dns": "mcp-toolbox-databases.grade.anchorterminal.com", "repo": "https://github.com/googleapis/mcp-toolbox", "license": "Apache-2.0", "transports": [ "stdio", "streamable-http" ], "packages": [ { "registry": "npm", "name": "@toolbox-sdk/server" }, { "registry": "pypi", "name": "toolbox-core" }, { "registry": "npm", "name": "@toolbox-sdk/core" } ], "auth": "mixed", "authNotes": "Toolbox holds the source credentials (database users and passwords from environment variables, or Google Application Default Credentials and IAM for Google sources). Clients need nothing by default. Optional MCP authorisation makes Toolbox an OAuth 2.1 resource server that validates JWT bearer tokens against a configured authorisation server and required scopes, and publishes protected-resource metadata. authServices can also bind tool parameters to a signed-in user's claims. The HTTP server listens on 127.0.0.1 by default, but --allowed-origins and --allowed-hosts default to *.", "pricing": "free", "pricingNotes": "Free and Apache-2.0, run on your own machine or your own Cloud Run service. Google Cloud sources bill for their own usage (BigQuery queries, Cloud SQL instances); Toolbox itself has no price.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "Self-hosted MCP server with nothing to buy (checked 2026-11-06).", "endpoints": [] }, "toolCount": 29, "popularity": { "githubStars": 16818, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://mcp-toolbox.dev/", "llmsTxt": "https://mcp-toolbox.dev/llms.txt", "registryName": "io.github.googleapis/mcp-toolbox", "capabilities": [ "db.sql", "db.document", "db.admin" ], "tags": [ "self-hosted", "free", "open-source", "mcp", "stdio", "http", "mcp-registry", "llms-txt", "google-cloud", "bigquery", "postgres", "toolsets", "read-only-mode", "opentelemetry", "go" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 77.7, "grade": "BB", "agentReady": true, "rank": 27, "ranked": true, "rankOf": 1510, "categoryRank": 2, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 82, "maintenance": 95, "payments": 60, "reliability": 80, "schema": 85, "security": 75, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "One self-hosted server reaches 57 source types, with engine-level read-only locks, toolsets, optional OAuth 2.1 and fortnightly semver releases under Apache-2.0. Prebuilt sets list 9 to 41 tools, origin and host checks default to any, and 432 issues and pull requests are open.", "bestFor": "Agents and coding assistants that need one server across Google Cloud data services and common databases, or production agents with curated SQL tools.", "strengths": [ "57 source types and 39 prebuilt configurations, from BigQuery and AlloyDB to PostgreSQL, MySQL, MongoDB and Snowflake", "Read-only mode locks the database session, hides write tools and sets readOnlyHint", "Custom tools in tools.yaml fix SQL and bind parameters to the signed-in user's claims", "Optional MCP authorisation as an OAuth 2.1 resource server with protected-resource metadata", "v1.16.0 on 5 November 2026 after eight releases in 90 days, in the MCP registry" ], "weaknesses": [ "--allowed-origins and --allowed-hosts default to *, which the docs call unsafe", "Prebuilt PostgreSQL set lists 29 tools and AlloyDB 41 unless a toolset is chosen", "432 open issues and pull requests", "Some prebuilt descriptions are a single line with no guidance on when not to use the tool" ], "agentNotes": [ "Load one toolset (such as data) rather than the whole prebuilt set to keep context small", "Turn on the source's read-only mode for exploration; write tools then disappear from tools/list", "Start the HTTP server with --allowed-hosts and --allowed-origins set; the defaults accept any", "Prefer custom tools with fixed SQL over execute_sql for production agents" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 77.7 } ], "editorialScores": { "ergonomics": 82, "maintenance": 95, "payments": 60, "reliability": 80, "schema": 85, "security": 75, "transparency": 77 }, "provenanceScore": 50, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npx @toolbox-sdk/server --prebuilt postgres --stdio", "config": { "mcpServers": { "postgres": { "args": [ "-y", "@toolbox-sdk/server", "--prebuilt", "postgres", "--stdio" ], "command": "npx", "env": { "POSTGRES_DATABASE": "mydb", "POSTGRES_HOST": "localhost", "POSTGRES_PASSWORD": "password", "POSTGRES_USER": "user" } } } } }, "letme": { "capability": "https://letme.dev/db.sql", "tool": "https://letme.dev/mcp-toolbox-databases" }, "area": "developer", "provenance": { "legalEntity": "Google LLC", "domain": "mcp-toolbox.dev", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/googleapis/mcp-toolbox/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "Source files carry \"Copyright 2025 Google LLC\" under Apache-2.0, and the repository is in the googleapis organisation.", "SECURITY.md routes reports to g.co/vulnz with a five-working-day response and discloses through GitHub Security Advisories.", "mcp-toolbox.dev/robots.txt allows all crawlers and serves llms.txt. Its registration date wasn't found through RDAP.", "No terms or privacy policy specific to Toolbox, which sends nothing to Google unless GCP telemetry export or a Google source is configured." ], "score": 50 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.json", "live": { "slug": "mcp-toolbox-databases", "versions": [ { "registry": "github", "name": "googleapis/mcp-toolbox", "version": "v1.16.0", "released": "2026-11-05", "seenAt": "2026-11-06T23:43:21.921228545Z" }, { "registry": "mcp-registry", "name": "io.github.googleapis/mcp-toolbox", "version": "1.16.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "@toolbox-sdk/core", "version": "1.2.0", "seenAt": "2026-11-06T23:43:21.731206096Z" }, { "registry": "npm", "name": "@toolbox-sdk/server", "version": "1.16.0", "seenAt": "2026-11-06T23:43:19.586944944Z" }, { "registry": "pypi", "name": "toolbox-core", "version": "1.4.0", "released": "2026-09-01", "seenAt": "2026-11-06T23:43:20.432816729Z" } ], "githubStars": 16819, "npmWeekly": 37825, "pypiWeekly": 81244, "securityTxt": { "url": "https://mcp-toolbox.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:31.533747335Z" }, "llmsTxt": { "url": "https://mcp-toolbox.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:57.733544718Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/googleapis/mcp-toolbox/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:21:14.273833915Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a1a131225627" } ], "updatedAt": "2026-11-07T18:16:28.95801333Z" } }, "answer": "MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against Neon MCP Server's 72.5 (BB), and leads in 5 of 7 scored categories. Neon MCP Server leads on schema \u0026 documentation and transparency \u0026 trust.", "b": { "slug": "neon-mcp", "name": "Neon MCP Server", "vendor": "Neon (Databricks)", "vendorUrl": "https://neon.com/docs/ai/neon-mcp-server", "kind": "mcp", "category": "data", "summary": "Neon's official remote MCP server at mcp.neon.tech/mcp lets agents manage Neon Postgres projects, branches, roles and computes, run SQL and migrations on temporary branches, and configure Neon Auth, Data API and storage, through OAuth or an API key.", "url": "https://www.anchorterminal.com/tools/neon-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/neon-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/neon-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/neon-mcp.json", "dns": "neon-mcp.grade.anchorterminal.com", "repo": "https://github.com/neondatabase/mcp-server-neon", "license": "MIT", "transports": [ "streamable-http" ], "remoteUrl": "https://mcp.neon.tech/mcp", "packages": [], "auth": "oauth", "authNotes": "OAuth 2.1 with dynamic client registration or Client ID Metadata Documents, advertising `read` and `write` scopes; the consent screen lets the user untick writes and pick one project, a Postgres role and tool categories, or a parameterised URL fixes that grant. A Neon API key in a Bearer header also works, with readonly, projectId, category and roleName read from the URL on each request. The `neon mcp` CLI command can mint a key for the server. The local stdio package is deprecated.", "pricing": "freemium", "pricingNotes": "The MCP server is free; Neon usage is billed. The Free plan is $0 with no card (100 projects, 100 CU-hours and 0.5 GB storage per project, 1 GB storage). Launch and Scale are pay as you go, compute $0.106 a CU-hour on Launch and $0.222 on Scale, storage $0.35 a GB-month.", "priceSummary": "$0.106 / unit", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on the MCP server, docs or pricing page (checked 2026-11-06).", "endpoints": [] }, "toolCount": 138, "popularity": { "githubStars": 663, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://neon.com/docs/ai/neon-mcp-server", "llmsTxt": "https://neon.com/llms.txt", "openapi": "https://neon.com/docs/reference/api-reference", "registryName": "com.neon/mcp", "capabilities": [ "db.sql", "db.admin" ], "tags": [ "hosted", "freemium", "mcp", "remote-mcp", "oauth", "mcp-registry", "llms-txt", "openapi", "postgres", "read-only-mode", "branching", "databricks" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 72.5, "grade": "BB", "agentReady": true, "rank": 125, "ranked": true, "rankOf": 1510, "categoryRank": 4, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 79, "maintenance": 80, "payments": 40, "reliability": 72, "schema": 90, "security": 69, "transparency": 75 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "OAuth with read or write scopes, per-project and per-role grants, read-only SQL in READ ONLY transactions, and migrations tried on temporary branches. With no grant it lists 138 tools, the README advises against production use, and it sends account name and email to Segment with no opt-out for hosted users.", "bestFor": "Agents building on Neon Postgres in development, especially branch-per-change workflows. supabase-mcp and planetscale-mcp are the nearest listings; Neon itself advises against pointing it at production.", "strengths": [ "OAuth 2.1 with read and write scopes, and grants fixed to one project, one Postgres role and chosen categories", "Read-only mode runs SQL in READ ONLY transactions and withholds connection strings", "Migrations and query tuning run on a temporary branch before they touch the main one", "Descriptions say how to resolve IDs and which tools must never run without the user", "MIT source, dated CHANGELOG and com.neon/mcp in the official registry at 2.0.0" ], "weaknesses": [ "138 tools listed when no category or project is set", "The README says it isn't recommended for production databases", "Segment receives account ID, name and email on connect, with no opt-out on the hosted server", "The MCP server has no status component and no stated release stage", "No security.txt on neon.com" ], "agentNotes": [ "Connect with ?category=querying\u0026category=schema\u0026projectId=... or untick Allow writes at consent to cut 138 tools to a handful", "Use prepare_database_migration and complete_database_migration for schema changes, and ask the user before completing", "Pass branch IDs (br-...), not names; call list_branches to resolve a name", "On 429 back off exponentially, and on 423 Locked wait for the running operation to finish" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 72.5 } ], "editorialScores": { "ergonomics": 79, "maintenance": 80, "payments": 40, "reliability": 72, "schema": 90, "security": 69, "transparency": 79 }, "provenanceScore": 71, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "claudeCode": "claude mcp add --transport http neon https://mcp.neon.tech/mcp", "config": { "mcpServers": { "Neon": { "url": "https://mcp.neon.tech/mcp?readonly=true" } } } }, "letme": { "capability": "https://letme.dev/db.sql", "tool": "https://letme.dev/neon-mcp" }, "area": "developer", "unitPrices": [ { "item": "Compute, Launch", "unit": "compute-unit", "usd": 0.106, "note": "Per CU-hour" }, { "item": "Compute, Scale", "unit": "compute-unit", "usd": 0.222, "note": "Per CU-hour" }, { "item": "Storage", "unit": "gb-month", "usd": 0.35, "note": "Launch and Scale" } ], "provenance": { "legalEntity": "Neon, LLC (subsidiary of Databricks, Inc.)", "domain": "neon.com", "domainRegistered": "1994-08-18", "endpointOnVendorDomain": false, "terms": "https://neon.com/terms-of-service", "privacy": "https://neon.com/privacy-policy", "statusPage": "https://neonstatus.com", "changelog": "https://github.com/neondatabase/mcp-server-neon/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The MCP endpoint is on mcp.neon.tech, Neon's older domain, while docs and legal pages are on neon.com.", "The Neon product schedule, last updated 14 October 2026, is between Databricks, Inc., the parent company of Neon, LLC, and the customer. The privacy notice is Databricks', last updated 9 January 2026.", "neon.com/security lists annual SOC 2 Type II audits with a public SOC 3 report, ISO 27001, ISO 27701, HIPAA, GDPR and CCPA.", "neon.com/.well-known/security.txt returns 404.", "neon.com/robots.txt allows all and carries Content-Signal ai-train=yes, search=yes, ai-input=yes. mcp.neon.tech has no robots.txt.", "RDAP gives neon.com a registration date of 18 August 1994; the domain predates Neon." ], "score": 71 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/neon-mcp.json", "live": { "slug": "neon-mcp", "probe": { "target": "https://mcp.neon.tech/mcp", "method": "mcp-initialize", "lastAt": "2026-11-07T19:22:21.502866963Z", "lastOk": true, "lastStatus": 401, "lastMs": 151, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 147, "p95ms24h": 366, "samples24h": 210, "samples30d": 210, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 197, "ok": 197 } ] }, "vendorStatus": { "page": "https://neonstatus.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-07T04:48:15.209607696Z" }, "versions": [ { "registry": "mcp-registry", "name": "com.neon/mcp", "version": "2.0.0", "seenAt": "2026-11-07T18:16:28.95801333Z" } ], "githubStars": 663, "securityTxt": { "url": "https://neon.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:24.319288694Z" }, "llmsTxt": { "url": "https://neon.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:33:18.8105724Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/neondatabase/mcp-server-neon/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:22:07.888479491Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "22d617e6b187" }, { "url": "https://neon.com/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:14:57.338873736Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "c96cd96f185b" }, { "url": "https://neon.com/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:14:59.695502864Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "d25bd3a3dc6e" } ], "mcpTools": { "url": "https://mcp.neon.tech/mcp", "checkedAt": "2026-11-07T01:52:00.41377208Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-03T22:16:15.261722522Z" }, "updatedAt": "2026-11-07T19:22:21.502866963Z" } }, "edges": [ { "by": 20, "category": "payments", "leads": "mcp-toolbox-databases", "name": "Payments \u0026 pricing", "reasons": { "a": "Free, self-hosted, nothing to buy, so 20 + 20 + 20. No payment protocol (0).", "b": "No x402, MPP or L402 (0). Per-unit prices are public, compute per CU-hour and storage per GB-month (20). Free plan with no card (20). A person signs up and authorises in a browser; the CLI can mint a key only after a login (0). 0 + 20 + 20 + 0 = 40." }, "scores": { "a": 60, "b": 40 } }, { "by": 15, "category": "maintenance", "leads": "mcp-toolbox-databases", "name": "Maintenance \u0026 community", "reasons": { "a": "v1.16.0 on 5 November 2026, one day before this check (30). Eight releases from v1.10.0 (27 August) to v1.16.0 in the 90 days (20). Pull requests merge daily and new tools land in each fortnightly release, though 432 issues and pull requests are open (20). io.github.googleapis/mcp-toolbox is in the official registry at 1.16.0 (15). Release automation, lint, tests and conformance workflows (10). 30 + 20 + 20 + 15 + 10 = 95.", "b": "v2.0.0 on 5 November 2026, one day before this check (30). 1.0.0 (registry, 17 September) and 2.0.0 in the 90 days, two releases (10). 53 open issues and pull requests, with commits most days; reply times weren't measured (15). com.neon/mcp in the official registry, a domain-verified namespace, at 2.0.0 (15). Unit, integration and end-to-end test suites, knip and lint in CI (10). 30 + 10 + 15 + 15 + 10 = 80." }, "scores": { "a": 95, "b": 80 } }, { "by": 11, "category": "transparency", "leads": "neon-mcp", "name": "Transparency \u0026 trust", "reasons": { "a": "Apache-2.0 (30). A self-hosted server; data goes only to the configured sources and to a telemetry exporter if one is set. There is no data-handling statement of its own (15). A versioning policy defining breaking changes, UPGRADING.md and a notice for the repository rename; prebuilt tool removals are listed in the changelog (16). Telemetry is off unless --telemetry-otlp or --telemetry-gcp is set, and the docs say so (16). 30 + 15 + 16 + 16 = 77.", "b": "MIT (30). Databricks' privacy notice (9 January 2026), the Neon product schedule (14 October 2026) with a DPA and a sub-contractor list linked from every page (24). The SSE retirement returns 410 with a pointer, and the stdio package is marked deprecated, but no notice period is stated (15). Telemetry is disclosed in the README, Segment identify with account ID, name and email plus every tool call, but hosted users have no opt-out (10). 30 + 24 + 15 + 10 = 79." }, "scores": { "a": 64, "b": 75 } }, { "by": 8, "category": "reliability", "leads": "mcp-toolbox-databases", "name": "Reliability", "reasons": { "a": "Scored as local software the owner runs. A Go binary, a container in Artifact Registry and @toolbox-sdk/server on npm, with install paths per platform (20). Tests, lint, conformance and nightly tier-report workflows in the repository; the pass state wasn't read (15). 432 open issues and pull requests on a repository with 16,818 stars and releases every two weeks, triaged with labels, though the backlog is large (15). Semantic versioning with a published policy, release-please CHANGELOG and an UPGRADING.md (15). 1.x since well before this check, v1.16.0 now (15). 20 + 15 + 15 + 15 + 15 = 80.", "b": "Hosted reading. neonstatus.com on status.io with components per region, though no MCP component (20). The page shows only the last 30 days, three incidents, a partial disruption of monitoring data on 21 October (1 hour 22 minutes), slow compute starts in us-east-2 on 2 November (2 hours 14 minutes) and 26 minutes of console and API errors on 2 November; August and September weren't readable (15). The Neon API publishes 700 requests a minute with a 40-a-second burst per route (15). 429 with exponential backoff advice and 423 Locked for overlapping operations with retry guidance, but no idempotency keys (12). An uptime SLA on Scale only, with no percentage on the pricing page (5). The docs give the server no status label and the README says it isn't recommended for production (5). 20 + 15 + 15 + 12 + 5 + 5 = 72." }, "scores": { "a": 80, "b": 72 } }, { "by": 6, "category": "security", "leads": "mcp-toolbox-databases", "name": "Security \u0026 auth", "reasons": { "a": "Source credentials stay in Toolbox, Google sources use IAM, and optional MCP authorisation validates OAuth 2.1 JWTs with required scopes. --allowed-origins and --allowed-hosts default to *, which the CLI docs themselves call unsafe even on localhost, though the default bind is 127.0.0.1 (20). Read-only mode is enforced at the engine, write tools are suppressed, and custom tools can fix SQL and bind parameters to the signed-in user (18). The security docs cover prompt injection and screening through Model Armor (12). OpenTelemetry traces and metrics per call when exported (10). Google's vulnerability intake with a stated response time and GitHub advisories (15). 20 + 18 + 12 + 10 + 15 = 75.", "b": "OAuth 2.1 with read and write scopes, per-project and per-role fixed grants, Client ID Metadata Documents and RFC 9207 iss on redirects, or API keys (28). Read-only mode keeps SQL in READ ONLY transactions and withholds connection strings, roleName limits SQL to a role's grants, and destructive tools ask the model to confirm with the user; with an API key anyone who can edit the URL can widen the grant (17). The README warns to review every action and keep the server away from production, but we found no prompt-injection guidance for query results (5). Neon has project audit logs, but we didn't read whether MCP calls appear (5). SOC 2 Type II with a public SOC 3, ISO 27001 and 27701, HIPAA; no security.txt on neon.com (14). 28 + 17 + 5 + 5 + 14 = 69." }, "scores": { "a": 75, "b": 69 } }, { "by": 5, "category": "schema", "leads": "neon-mcp", "name": "Schema \u0026 documentation", "reasons": { "a": "Every tool's parameters are typed in tools.yaml and published as JSON Schema over MCP (25). mcp-toolbox.dev serves llms.txt (10). Prebuilt descriptions vary from one line (\"Use this tool to execute a single SQL statement.\") to detailed, and few say when not to use a tool (12). Typed parameters with required flags; execute_sql takes free SQL (12). Many examples, samples and codelabs; error responses are thinly documented (11). Semver, a dated CHANGELOG and versioned docs (15). 25 + 10 + 12 + 12 + 11 + 15 = 85.", "b": "Every tool has a JSON Schema, many generated from the Neon OpenAPI spec (25). neon.com serves llms.txt and Markdown pages (10). Descriptions say when and when not (\"branch_id is a branch id, not a branch name. Call list_branches to resolve a name\", \"NEVER run autonomously\") (18). Typed inputs with enums such as access read_only or read_write, and path arguments checked for . and .. since 2.0.0 (13). Examples in the README and docs, and API 4xx errors classified by kind (11). CHANGELOG with dated releases and a registry version (13). 25 + 10 + 18 + 13 + 11 + 13 = 90." }, "scores": { "a": 85, "b": 90 } } ], "facts": [ { "a": "MCP server", "b": "MCP server", "name": "Kind" }, { "a": "Google", "b": "Neon (Databricks)", "name": "Vendor" }, { "a": "no (local only)", "b": "https://mcp.neon.tech/mcp", "name": "Hosted endpoint" }, { "a": "stdio, Streamable HTTP", "b": "Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth", "name": "Auth" }, { "a": "Free", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "MIT", "name": "Licence" }, { "a": "29", "b": "138", "name": "Tools exposed" }, { "a": "yes", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "io.github.googleapis/mcp-toolbox", "b": "com.neon/mcp", "name": "MCP registry" }, { "a": "2026-11-05", "b": "2026-11-05", "name": "Last release" }, { "a": "no document linked", "b": "2026-10-14", "name": "Terms last updated" }, { "a": "no document linked", "b": "2026-01-09", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "17k stars", "b": "663 stars", "name": "Popularity" } ], "faq": [ { "answer": "MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against Neon MCP Server's 72.5 (BB), and leads in 5 of 7 scored categories. Neon MCP Server leads on schema \u0026 documentation and transparency \u0026 trust.", "question": "Which is better for AI agents, MCP Toolbox for Databases or Neon MCP Server?" }, { "answer": "MCP Toolbox for Databases takes an API key or an OAuth sign-in. Neon MCP Server uses an OAuth sign-in.", "question": "Do MCP Toolbox for Databases and Neon MCP Server need an API key?" }, { "answer": "MCP Toolbox for Databases runs on your own machine, with no hosted endpoint listed. Neon MCP Server has a hosted endpoint at https://mcp.neon.tech/mcp.", "question": "Can an agent call MCP Toolbox for Databases and Neon MCP Server without installing anything?" }, { "answer": "MCP Toolbox for Databases is open source (Apache-2.0). No open-source release is listed for Neon MCP Server.", "question": "Are MCP Toolbox for Databases and Neon MCP Server open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 80 against 72", "Security \u0026 auth, 75 against 69", "Payments \u0026 pricing, 60 against 40", "Maintenance \u0026 community, 95 against 80" ], "also": [ "Runs on your own machine", "Open source" ], "goodFor": "Agents and coding assistants that need one server across Google Cloud data services and common databases, or production agents with curated SQL tools.", "slug": "mcp-toolbox-databases", "watchFor": "--allowed-origins and --allowed-hosts default to *, which the docs call unsafe" }, { "aheadOn": [ "Schema \u0026 documentation, 90 against 85", "Transparency \u0026 trust, 75 against 64" ], "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "Agents building on Neon Postgres in development, especially branch-per-change workflows. supabase-mcp and planetscale-mcp are the nearest listings; Neon itself advises against pointing it at production.", "slug": "neon-mcp", "watchFor": "138 tools listed when no category or project is set" } ], "history": null, "job": { "capability": "db.sql", "name": "SQL databases" }, "others": [ { "json": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-mcp-toolbox-databases.json", "title": "ClickHouse MCP Server vs MCP Toolbox for Databases", "url": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-mcp-toolbox-databases" }, { "json": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-neon-mcp.json", "title": "ClickHouse MCP Server vs Neon MCP Server", "url": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-neon-mcp" }, { "json": "https://www.anchorterminal.com/compare/dbhub-vs-mcp-toolbox-databases.json", "title": "DBHub vs MCP Toolbox for Databases", "url": "https://www.anchorterminal.com/compare/dbhub-vs-mcp-toolbox-databases" }, { "json": "https://www.anchorterminal.com/compare/dbhub-vs-neon-mcp.json", "title": "DBHub vs Neon MCP Server", "url": "https://www.anchorterminal.com/compare/dbhub-vs-neon-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb.json", "title": "MCP Toolbox for Databases vs ObsessionDB", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-planetscale-mcp.json", "title": "MCP Toolbox for Databases vs PlanetScale MCP Server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-planetscale-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-mcp-pro.json", "title": "MCP Toolbox for Databases vs Postgres MCP Pro", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-mcp-pro" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived.json", "title": "MCP Toolbox for Databases vs PostgreSQL (archived MCP reference server)", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-snowflake-managed.json", "title": "MCP Toolbox for Databases vs Snowflake-managed MCP server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-snowflake-managed" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-supabase-mcp.json", "title": "MCP Toolbox for Databases vs Supabase API + MCP", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-supabase-mcp" }, { "json": "https://www.anchorterminal.com/compare/neon-mcp-vs-obsessiondb.json", "title": "Neon MCP Server vs ObsessionDB", "url": "https://www.anchorterminal.com/compare/neon-mcp-vs-obsessiondb" }, { "json": "https://www.anchorterminal.com/compare/neon-mcp-vs-planetscale-mcp.json", "title": "Neon MCP Server vs PlanetScale MCP Server", "url": "https://www.anchorterminal.com/compare/neon-mcp-vs-planetscale-mcp" }, { "json": "https://www.anchorterminal.com/compare/neon-mcp-vs-postgres-mcp-pro.json", "title": "Neon MCP Server vs Postgres MCP Pro", "url": "https://www.anchorterminal.com/compare/neon-mcp-vs-postgres-mcp-pro" }, { "json": "https://www.anchorterminal.com/compare/neon-mcp-vs-postgres-reference-server-archived.json", "title": "Neon MCP Server vs PostgreSQL (archived MCP reference server)", "url": "https://www.anchorterminal.com/compare/neon-mcp-vs-postgres-reference-server-archived" }, { "json": "https://www.anchorterminal.com/compare/neon-mcp-vs-snowflake-managed.json", "title": "Neon MCP Server vs Snowflake-managed MCP server", "url": "https://www.anchorterminal.com/compare/neon-mcp-vs-snowflake-managed" }, { "json": "https://www.anchorterminal.com/compare/neon-mcp-vs-supabase-mcp.json", "title": "Neon MCP Server vs Supabase API + MCP", "url": "https://www.anchorterminal.com/compare/neon-mcp-vs-supabase-mcp" }, { "json": "https://www.anchorterminal.com/compare/mongodb-mcp-vs-neon-mcp.json", "title": "MongoDB MCP Server vs Neon MCP Server", "url": "https://www.anchorterminal.com/compare/mongodb-mcp-vs-neon-mcp" }, { "json": "https://www.anchorterminal.com/compare/neon-mcp-vs-redis-mcp.json", "title": "Neon MCP Server vs Redis MCP", "url": "https://www.anchorterminal.com/compare/neon-mcp-vs-redis-mcp" }, { "json": "https://www.anchorterminal.com/compare/neon-mcp-vs-reqres-mcp.json", "title": "Neon MCP Server vs ReqRes MCP server", "url": "https://www.anchorterminal.com/compare/neon-mcp-vs-reqres-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-mongodb-mcp.json", "title": "MCP Toolbox for Databases vs MongoDB MCP Server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-mongodb-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp.json", "title": "MCP Toolbox for Databases vs Redis MCP", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-reqres-mcp.json", "title": "MCP Toolbox for Databases vs ReqRes MCP server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-reqres-mcp" } ], "panel": null, "scores": [ { "by": 8, "edge": "mcp-toolbox-databases", "key": "reliability", "mcp-toolbox-databases": 80, "name": "Reliability", "neon-mcp": 72, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 5, "edge": "neon-mcp", "key": "schema", "mcp-toolbox-databases": 85, "name": "Schema \u0026 documentation", "neon-mcp": 90, "weight": 13 }, { "by": 3, "edge": "mcp-toolbox-databases", "key": "ergonomics", "mcp-toolbox-databases": 82, "name": "Agent ergonomics", "neon-mcp": 79, "weight": 13 }, { "by": 6, "edge": "mcp-toolbox-databases", "key": "security", "mcp-toolbox-databases": 75, "name": "Security \u0026 auth", "neon-mcp": 69, "weight": 14 }, { "by": 20, "edge": "mcp-toolbox-databases", "key": "payments", "mcp-toolbox-databases": 60, "name": "Payments \u0026 pricing", "neon-mcp": 40, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 15, "edge": "mcp-toolbox-databases", "key": "maintenance", "mcp-toolbox-databases": 95, "name": "Maintenance \u0026 community", "neon-mcp": 80, "weight": 7 }, { "by": 11, "edge": "neon-mcp", "key": "transparency", "mcp-toolbox-databases": 64, "name": "Transparency \u0026 trust", "neon-mcp": 75, "weight": 7 } ], "summary": "MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against Neon MCP Server's 72.5 (BB), and leads in 5 of 7 scored categories. Neon MCP Server leads on schema \u0026 documentation and transparency \u0026 trust. Both do sql databases.", "tasks": null, "tutorials": [], "verdicts": { "mcp-toolbox-databases": "One self-hosted server reaches 57 source types, with engine-level read-only locks, toolsets, optional OAuth 2.1 and fortnightly semver releases under Apache-2.0. Prebuilt sets list 9 to 41 tools, origin and host checks default to any, and 432 issues and pull requests are open.", "neon-mcp": "OAuth with read or write scopes, per-project and per-role grants, read-only SQL in READ ONLY transactions, and migrations tried on temporary branches. With no grant it lists 138 tools, the README advises against production use, and it sends account name and email to Segment with no opt-out for hosted users." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp", "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp.min.md" }, "markdown": "MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against Neon MCP Server's 72.5 (BB), and leads in 5 of 7 scored categories. Neon MCP Server leads on schema \u0026 documentation and transparency \u0026 trust. Both do sql databases.\n\n- MCP Toolbox for Databases: grade BB, 77.7/100, rank #27 of 1510. Markdown https://www.anchorterminal.com/tools/mcp-toolbox-databases.md · JSON https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases.json\n- Neon MCP Server: grade BB, 72.5/100, rank #125 of 1510. Markdown https://www.anchorterminal.com/tools/neon-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/neon-mcp.json\n- Best database, file and memory tools for AI agents: https://www.anchorterminal.com/best/data/index.md\n- All 111 databases comparisons: https://www.anchorterminal.com/compare/data/index.md\n\n## Which one, for what\n\n### MCP Toolbox for Databases (BB)\n\nGood for: Agents and coding assistants that need one server across Google Cloud data services and common databases, or production agents with curated SQL tools.\n\nAhead on:\n- Reliability, 80 against 72\n- Security \u0026 auth, 75 against 69\n- Payments \u0026 pricing, 60 against 40\n- Maintenance \u0026 community, 95 against 80\n\nAlso in its favour:\n- Runs on your own machine\n- Open source\n\nWatch for: --allowed-origins and --allowed-hosts default to *, which the docs call unsafe\n\n### Neon MCP Server (BB)\n\nGood for: Agents building on Neon Postgres in development, especially branch-per-change workflows. supabase-mcp and planetscale-mcp are the nearest listings; Neon itself advises against pointing it at production.\n\nAhead on:\n- Schema \u0026 documentation, 90 against 85\n- Transparency \u0026 trust, 75 against 64\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: 138 tools listed when no category or project is set\n\n\n## Why the edge\n\n### Payments \u0026 pricing: MCP Toolbox for Databases +20\n\n- MCP Toolbox for Databases (60): Free, self-hosted, nothing to buy, so 20 + 20 + 20. No payment protocol (0).\n- Neon MCP Server (40): No x402, MPP or L402 (0). Per-unit prices are public, compute per CU-hour and storage per GB-month (20). Free plan with no card (20). A person signs up and authorises in a browser; the CLI can mint a key only after a login (0). 0 + 20 + 20 + 0 = 40.\n\n### Maintenance \u0026 community: MCP Toolbox for Databases +15\n\n- MCP Toolbox for Databases (95): v1.16.0 on 5 November 2026, one day before this check (30). Eight releases from v1.10.0 (27 August) to v1.16.0 in the 90 days (20). Pull requests merge daily and new tools land in each fortnightly release, though 432 issues and pull requests are open (20). io.github.googleapis/mcp-toolbox is in the official registry at 1.16.0 (15). Release automation, lint, tests and conformance workflows (10). 30 + 20 + 20 + 15 + 10 = 95.\n- Neon MCP Server (80): v2.0.0 on 5 November 2026, one day before this check (30). 1.0.0 (registry, 17 September) and 2.0.0 in the 90 days, two releases (10). 53 open issues and pull requests, with commits most days; reply times weren't measured (15). com.neon/mcp in the official registry, a domain-verified namespace, at 2.0.0 (15). Unit, integration and end-to-end test suites, knip and lint in CI (10). 30 + 10 + 15 + 15 + 10 = 80.\n\n### Transparency \u0026 trust: Neon MCP Server +11\n\n- MCP Toolbox for Databases (64): Apache-2.0 (30). A self-hosted server; data goes only to the configured sources and to a telemetry exporter if one is set. There is no data-handling statement of its own (15). A versioning policy defining breaking changes, UPGRADING.md and a notice for the repository rename; prebuilt tool removals are listed in the changelog (16). Telemetry is off unless --telemetry-otlp or --telemetry-gcp is set, and the docs say so (16). 30 + 15 + 16 + 16 = 77.\n- Neon MCP Server (75): MIT (30). Databricks' privacy notice (9 January 2026), the Neon product schedule (14 October 2026) with a DPA and a sub-contractor list linked from every page (24). The SSE retirement returns 410 with a pointer, and the stdio package is marked deprecated, but no notice period is stated (15). Telemetry is disclosed in the README, Segment identify with account ID, name and email plus every tool call, but hosted users have no opt-out (10). 30 + 24 + 15 + 10 = 79.\n\n### Reliability: MCP Toolbox for Databases +8\n\n- MCP Toolbox for Databases (80): Scored as local software the owner runs. A Go binary, a container in Artifact Registry and @toolbox-sdk/server on npm, with install paths per platform (20). Tests, lint, conformance and nightly tier-report workflows in the repository; the pass state wasn't read (15). 432 open issues and pull requests on a repository with 16,818 stars and releases every two weeks, triaged with labels, though the backlog is large (15). Semantic versioning with a published policy, release-please CHANGELOG and an UPGRADING.md (15). 1.x since well before this check, v1.16.0 now (15). 20 + 15 + 15 + 15 + 15 = 80.\n- Neon MCP Server (72): Hosted reading. neonstatus.com on status.io with components per region, though no MCP component (20). The page shows only the last 30 days, three incidents, a partial disruption of monitoring data on 21 October (1 hour 22 minutes), slow compute starts in us-east-2 on 2 November (2 hours 14 minutes) and 26 minutes of console and API errors on 2 November; August and September weren't readable (15). The Neon API publishes 700 requests a minute with a 40-a-second burst per route (15). 429 with exponential backoff advice and 423 Locked for overlapping operations with retry guidance, but no idempotency keys (12). An uptime SLA on Scale only, with no percentage on the pricing page (5). The docs give the server no status label and the README says it isn't recommended for production (5). 20 + 15 + 15 + 12 + 5 + 5 = 72.\n\n### Security \u0026 auth: MCP Toolbox for Databases +6\n\n- MCP Toolbox for Databases (75): Source credentials stay in Toolbox, Google sources use IAM, and optional MCP authorisation validates OAuth 2.1 JWTs with required scopes. --allowed-origins and --allowed-hosts default to *, which the CLI docs themselves call unsafe even on localhost, though the default bind is 127.0.0.1 (20). Read-only mode is enforced at the engine, write tools are suppressed, and custom tools can fix SQL and bind parameters to the signed-in user (18). The security docs cover prompt injection and screening through Model Armor (12). OpenTelemetry traces and metrics per call when exported (10). Google's vulnerability intake with a stated response time and GitHub advisories (15). 20 + 18 + 12 + 10 + 15 = 75.\n- Neon MCP Server (69): OAuth 2.1 with read and write scopes, per-project and per-role fixed grants, Client ID Metadata Documents and RFC 9207 iss on redirects, or API keys (28). Read-only mode keeps SQL in READ ONLY transactions and withholds connection strings, roleName limits SQL to a role's grants, and destructive tools ask the model to confirm with the user; with an API key anyone who can edit the URL can widen the grant (17). The README warns to review every action and keep the server away from production, but we found no prompt-injection guidance for query results (5). Neon has project audit logs, but we didn't read whether MCP calls appear (5). SOC 2 Type II with a public SOC 3, ISO 27001 and 27701, HIPAA; no security.txt on neon.com (14). 28 + 17 + 5 + 5 + 14 = 69.\n\n### Schema \u0026 documentation: Neon MCP Server +5\n\n- MCP Toolbox for Databases (85): Every tool's parameters are typed in tools.yaml and published as JSON Schema over MCP (25). mcp-toolbox.dev serves llms.txt (10). Prebuilt descriptions vary from one line (\"Use this tool to execute a single SQL statement.\") to detailed, and few say when not to use a tool (12). Typed parameters with required flags; execute_sql takes free SQL (12). Many examples, samples and codelabs; error responses are thinly documented (11). Semver, a dated CHANGELOG and versioned docs (15). 25 + 10 + 12 + 12 + 11 + 15 = 85.\n- Neon MCP Server (90): Every tool has a JSON Schema, many generated from the Neon OpenAPI spec (25). neon.com serves llms.txt and Markdown pages (10). Descriptions say when and when not (\"branch_id is a branch id, not a branch name. Call list_branches to resolve a name\", \"NEVER run autonomously\") (18). Typed inputs with enums such as access read_only or read_write, and path arguments checked for . and .. since 2.0.0 (13). Examples in the README and docs, and API 4xx errors classified by kind (11). CHANGELOG with dated releases and a registry version (13). 25 + 10 + 18 + 13 + 11 + 13 = 90.\n\n## Score by category\n\n| Category | Weight | MCP Toolbox for Databases | Neon MCP Server | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 80 | 72 | MCP Toolbox for Databases +8 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 85 | 90 | Neon MCP Server +5 |\n| Agent ergonomics | 13% (16.2 this run) | 82 | 79 | MCP Toolbox for Databases +3 |\n| Security \u0026 auth | 14% (17.5 this run) | 75 | 69 | MCP Toolbox for Databases +6 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 40 | MCP Toolbox for Databases +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 95 | 80 | MCP Toolbox for Databases +15 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 64 | 75 | Neon MCP Server +11 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **77.7 · BB** | **72.5 · BB** | |\n\n## Facts side by side\n\n| Fact | MCP Toolbox for Databases | Neon MCP Server |\n| --- | --- | --- |\n| Kind | MCP server | MCP server |\n| Vendor | Google | Neon (Databricks) |\n| Hosted endpoint | no (local only) | `https://mcp.neon.tech/mcp` |\n| Transports | stdio, Streamable HTTP | Streamable HTTP |\n| Auth | OAuth or key | OAuth |\n| Pricing | Free | Freemium |\n| x402 | no | no |\n| Licence | Apache-2.0 | MIT |\n| Tools exposed | 29 | 138 |\n| Read-only variant documented | yes | yes |\n| llms.txt | yes | yes |\n| MCP registry | `io.github.googleapis/mcp-toolbox` | `com.neon/mcp` |\n| Last release | 2026-11-05 | 2026-11-05 |\n| Terms last updated | no document linked | 2026-10-14 |\n| Privacy policy last updated | no document linked | 2026-01-09 |\n| Customer content may train models | not read yet | not found in the text |\n| Terms restrict automated access | not read yet | not found in the text |\n| Terms restrict benchmarking | not read yet | not found in the text |\n| Terms or service can change without notice | not read yet | not found in the text |\n| Arbitration or class-action waiver | not read yet | not found in the text |\n| Popularity | 17k stars | 663 stars |\n\n## Verdicts\n\n**MCP Toolbox for Databases.** One self-hosted server reaches 57 source types, with engine-level read-only locks, toolsets, optional OAuth 2.1 and fortnightly semver releases under Apache-2.0. Prebuilt sets list 9 to 41 tools, origin and host checks default to any, and 432 issues and pull requests are open.\n\n**Neon MCP Server.** OAuth with read or write scopes, per-project and per-role grants, read-only SQL in READ ONLY transactions, and migrations tried on temporary branches. With no grant it lists 138 tools, the README advises against production use, and it sends account name and email to Segment with no opt-out for hosted users.\n\n## Before you call either\n\n### MCP Toolbox for Databases\n\n1. Load one toolset (such as data) rather than the whole prebuilt set to keep context small\n2. Turn on the source's read-only mode for exploration; write tools then disappear from tools/list\n3. Start the HTTP server with --allowed-hosts and --allowed-origins set; the defaults accept any\n4. Prefer custom tools with fixed SQL over execute_sql for production agents\n\n### Neon MCP Server\n\n1. Connect with ?category=querying\u0026category=schema\u0026projectId=... or untick Allow writes at consent to cut 138 tools to a handful\n2. Use prepare_database_migration and complete_database_migration for schema changes, and ask the user before completing\n3. Pass branch IDs (br-...), not names; call list_branches to resolve a name\n4. On 429 back off exponentially, and on 423 Locked wait for the running operation to finish\n\n## Questions\n\n### Which is better for AI agents, MCP Toolbox for Databases or Neon MCP Server?\n\nMCP Toolbox for Databases scores 77.7 (BB) on agent readiness against Neon MCP Server's 72.5 (BB), and leads in 5 of 7 scored categories. Neon MCP Server leads on schema \u0026 documentation and transparency \u0026 trust.\n\n### Do MCP Toolbox for Databases and Neon MCP Server need an API key?\n\nMCP Toolbox for Databases takes an API key or an OAuth sign-in. Neon MCP Server uses an OAuth sign-in.\n\n### Can an agent call MCP Toolbox for Databases and Neon MCP Server without installing anything?\n\nMCP Toolbox for Databases runs on your own machine, with no hosted endpoint listed. Neon MCP Server has a hosted endpoint at https://mcp.neon.tech/mcp.\n\n### Are MCP Toolbox for Databases and Neon MCP Server open source?\n\nMCP Toolbox for Databases is open source (Apache-2.0). No open-source release is listed for Neon MCP Server.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp.json, and with the fewest tokens: https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"mcp-toolbox-databases\", \"b\": \"neon-mcp\"}`. From a terminal: `anchor compare mcp-toolbox-databases neon-mcp`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases.json and https://www.anchorterminal.com/api/v1/tools/neon-mcp.json\n\n## Other comparisons with MCP Toolbox for Databases or Neon MCP Server\n\n- [ClickHouse MCP Server vs MCP Toolbox for Databases](https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-mcp-toolbox-databases.md)\n- [ClickHouse MCP Server vs Neon MCP Server](https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-neon-mcp.md)\n- [DBHub vs MCP Toolbox for Databases](https://www.anchorterminal.com/compare/dbhub-vs-mcp-toolbox-databases.md)\n- [DBHub vs Neon MCP Server](https://www.anchorterminal.com/compare/dbhub-vs-neon-mcp.md)\n- [MCP Toolbox for Databases vs ObsessionDB](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb.md)\n- [MCP Toolbox for Databases vs PlanetScale MCP Server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-planetscale-mcp.md)\n- [MCP Toolbox for Databases vs Postgres MCP Pro](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-mcp-pro.md)\n- [MCP Toolbox for Databases vs PostgreSQL (archived MCP reference server)](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived.md)\n- [MCP Toolbox for Databases vs Snowflake-managed MCP server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-snowflake-managed.md)\n- [MCP Toolbox for Databases vs Supabase API + MCP](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-supabase-mcp.md)\n- [Neon MCP Server vs ObsessionDB](https://www.anchorterminal.com/compare/neon-mcp-vs-obsessiondb.md)\n- [Neon MCP Server vs PlanetScale MCP Server](https://www.anchorterminal.com/compare/neon-mcp-vs-planetscale-mcp.md)\n- [Neon MCP Server vs Postgres MCP Pro](https://www.anchorterminal.com/compare/neon-mcp-vs-postgres-mcp-pro.md)\n- [Neon MCP Server vs PostgreSQL (archived MCP reference server)](https://www.anchorterminal.com/compare/neon-mcp-vs-postgres-reference-server-archived.md)\n- [Neon MCP Server vs Snowflake-managed MCP server](https://www.anchorterminal.com/compare/neon-mcp-vs-snowflake-managed.md)\n- [Neon MCP Server vs Supabase API + MCP](https://www.anchorterminal.com/compare/neon-mcp-vs-supabase-mcp.md)\n- [MongoDB MCP Server vs Neon MCP Server](https://www.anchorterminal.com/compare/mongodb-mcp-vs-neon-mcp.md)\n- [Neon MCP Server vs Redis MCP](https://www.anchorterminal.com/compare/neon-mcp-vs-redis-mcp.md)\n- [Neon MCP Server vs ReqRes MCP server](https://www.anchorterminal.com/compare/neon-mcp-vs-reqres-mcp.md)\n- [MCP Toolbox for Databases vs MongoDB MCP Server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-mongodb-mcp.md)\n- [MCP Toolbox for Databases vs Redis MCP](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp.md)\n- [MCP Toolbox for Databases vs ReqRes MCP server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-reqres-mcp.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "MCP Toolbox for Databases vs Neon MCP Server", "url": "" } ], "description": "MCP Toolbox for Databases scores 77.7 (BB) to Neon's 72.5 (BB) for sql databases. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "MCP Toolbox for Databases BB 77.7", "Neon MCP Server BB 72.5", "scores" ], "h1": "MCP Toolbox for Databases vs Neon MCP Server", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/mcp-toolbox-databases-vs-neon-mcp", "published": "2026-10-01", "section": "tools", "title": "MCP Toolbox for Databases vs Neon for AI agents (2026)", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp" }, "tokens": { "markdown": 4300, "slim": 2430 }, "version": 1 }