{ "data": { "a": { "slug": "mcp-toolbox-databases", "name": "MCP Toolbox for Databases", "vendor": "Google", "vendorUrl": "https://mcp-toolbox.dev", "kind": "mcp", "category": "data", "summary": "MCP Toolbox for Databases is Google's open-source MCP server for more than 30 data sources, among them BigQuery, AlloyDB, Cloud SQL, Spanner and PostgreSQL. It runs as a binary or container with prebuilt or custom tools from tools.yaml.", "url": "https://www.anchorterminal.com/tools/mcp-toolbox-databases", "markdownUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases.json", "dns": "mcp-toolbox-databases.grade.anchorterminal.com", "repo": "https://github.com/googleapis/mcp-toolbox", "license": "Apache-2.0", "transports": [ "stdio", "streamable-http" ], "packages": [ { "registry": "npm", "name": "@toolbox-sdk/server" }, { "registry": "pypi", "name": "toolbox-core" }, { "registry": "npm", "name": "@toolbox-sdk/core" } ], "auth": "mixed", "authNotes": "Toolbox holds the source credentials (database users and passwords from environment variables, or Google Application Default Credentials and IAM for Google sources). Clients need nothing by default. Optional MCP authorisation makes Toolbox an OAuth 2.1 resource server that validates JWT bearer tokens against a configured authorisation server and required scopes, and publishes protected-resource metadata. authServices can also bind tool parameters to a signed-in user's claims. The HTTP server listens on 127.0.0.1 by default, but --allowed-origins and --allowed-hosts default to *.", "pricing": "free", "pricingNotes": "Free and Apache-2.0, run on your own machine or your own Cloud Run service. Google Cloud sources bill for their own usage (BigQuery queries, Cloud SQL instances); Toolbox itself has no price.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "Self-hosted MCP server with nothing to buy (checked 2026-11-06).", "endpoints": [] }, "toolCount": 29, "popularity": { "githubStars": 16818, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://mcp-toolbox.dev/", "llmsTxt": "https://mcp-toolbox.dev/llms.txt", "registryName": "io.github.googleapis/mcp-toolbox", "capabilities": [ "db.sql", "db.document", "db.admin" ], "tags": [ "self-hosted", "free", "open-source", "mcp", "stdio", "http", "mcp-registry", "llms-txt", "google-cloud", "bigquery", "postgres", "toolsets", "read-only-mode", "opentelemetry", "go" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 77.7, "grade": "BB", "agentReady": true, "rank": 27, "ranked": true, "rankOf": 1510, "categoryRank": 2, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 82, "maintenance": 95, "payments": 60, "reliability": 80, "schema": 85, "security": 75, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "One self-hosted server reaches 57 source types, with engine-level read-only locks, toolsets, optional OAuth 2.1 and fortnightly semver releases under Apache-2.0. Prebuilt sets list 9 to 41 tools, origin and host checks default to any, and 432 issues and pull requests are open.", "bestFor": "Agents and coding assistants that need one server across Google Cloud data services and common databases, or production agents with curated SQL tools.", "strengths": [ "57 source types and 39 prebuilt configurations, from BigQuery and AlloyDB to PostgreSQL, MySQL, MongoDB and Snowflake", "Read-only mode locks the database session, hides write tools and sets readOnlyHint", "Custom tools in tools.yaml fix SQL and bind parameters to the signed-in user's claims", "Optional MCP authorisation as an OAuth 2.1 resource server with protected-resource metadata", "v1.16.0 on 5 November 2026 after eight releases in 90 days, in the MCP registry" ], "weaknesses": [ "--allowed-origins and --allowed-hosts default to *, which the docs call unsafe", "Prebuilt PostgreSQL set lists 29 tools and AlloyDB 41 unless a toolset is chosen", "432 open issues and pull requests", "Some prebuilt descriptions are a single line with no guidance on when not to use the tool" ], "agentNotes": [ "Load one toolset (such as data) rather than the whole prebuilt set to keep context small", "Turn on the source's read-only mode for exploration; write tools then disappear from tools/list", "Start the HTTP server with --allowed-hosts and --allowed-origins set; the defaults accept any", "Prefer custom tools with fixed SQL over execute_sql for production agents" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 77.7 } ], "editorialScores": { "ergonomics": 82, "maintenance": 95, "payments": 60, "reliability": 80, "schema": 85, "security": 75, "transparency": 77 }, "provenanceScore": 50, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npx @toolbox-sdk/server --prebuilt postgres --stdio", "config": { "mcpServers": { "postgres": { "args": [ "-y", "@toolbox-sdk/server", "--prebuilt", "postgres", "--stdio" ], "command": "npx", "env": { "POSTGRES_DATABASE": "mydb", "POSTGRES_HOST": "localhost", "POSTGRES_PASSWORD": "password", "POSTGRES_USER": "user" } } } } }, "letme": { "capability": "https://letme.dev/db.sql", "tool": "https://letme.dev/mcp-toolbox-databases" }, "area": "developer", "provenance": { "legalEntity": "Google LLC", "domain": "mcp-toolbox.dev", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/googleapis/mcp-toolbox/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "Source files carry \"Copyright 2025 Google LLC\" under Apache-2.0, and the repository is in the googleapis organisation.", "SECURITY.md routes reports to g.co/vulnz with a five-working-day response and discloses through GitHub Security Advisories.", "mcp-toolbox.dev/robots.txt allows all crawlers and serves llms.txt. Its registration date wasn't found through RDAP.", "No terms or privacy policy specific to Toolbox, which sends nothing to Google unless GCP telemetry export or a Google source is configured." ], "score": 50 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.json", "live": { "slug": "mcp-toolbox-databases", "versions": [ { "registry": "github", "name": "googleapis/mcp-toolbox", "version": "v1.16.0", "released": "2026-11-05", "seenAt": "2026-11-06T23:43:21.921228545Z" }, { "registry": "mcp-registry", "name": "io.github.googleapis/mcp-toolbox", "version": "1.16.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "@toolbox-sdk/core", "version": "1.2.0", "seenAt": "2026-11-06T23:43:21.731206096Z" }, { "registry": "npm", "name": "@toolbox-sdk/server", "version": "1.16.0", "seenAt": "2026-11-06T23:43:19.586944944Z" }, { "registry": "pypi", "name": "toolbox-core", "version": "1.4.0", "released": "2026-09-01", "seenAt": "2026-11-06T23:43:20.432816729Z" } ], "githubStars": 16819, "npmWeekly": 37825, "pypiWeekly": 81244, "securityTxt": { "url": "https://mcp-toolbox.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:31.533747335Z" }, "llmsTxt": { "url": "https://mcp-toolbox.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:57.733544718Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/googleapis/mcp-toolbox/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:21:14.273833915Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a1a131225627" } ], "updatedAt": "2026-11-07T18:16:28.95801333Z" } }, "answer": "MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against ObsessionDB's 41.1 (E), and leads in every scored category.", "b": { "slug": "obsessiondb", "name": "ObsessionDB", "vendor": "Kellerkind UG (haftungsbeschränkt)", "vendorUrl": "https://obsessiondb.com", "kind": "mcp", "category": "data", "summary": "ObsessionDB is a managed ClickHouse service that runs the ClickHouse engine on object storage with stateless compute. Agents reach it through a hosted MCP server with OAuth, or through any ClickHouse client over the native or HTTP protocol.", "url": "https://www.anchorterminal.com/tools/obsessiondb", "markdownUrl": "https://www.anchorterminal.com/tools/obsessiondb.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/obsessiondb.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/obsessiondb.json", "dns": "obsessiondb.grade.anchorterminal.com", "license": "Proprietary service under ObsessionDB's terms of service. The query engine is the open-source ClickHouse engine; the storage layer is proprietary", "transports": [ "streamable-http" ], "remoteUrl": "https://console-api.obsessiondb.com/mcp", "packages": [], "auth": "mixed", "authNotes": "The hosted MCP server uses OAuth 2.1 with dynamic client registration and PKCE (S256), and the person signs in at console.obsessiondb.com and approves the connection in a browser. Scopes are `services:read`, `workbench:query`, `monitoring:read` and `alerts:read`, and a token works as the person's account across every organisation they belong to. Connections can be revoked under connected apps in the console. Direct ClickHouse connections use the host, port, user and password shown in the dashboard. No API key route was found for the MCP server.", "pricing": "usage", "pricingNotes": "Compute at $20 per GB of memory per node per month ($160 per 2 vCPU and 8 GB compute unit) and storage at $25 per TB per month after compression, per the pricing page's sizing prompt and calculator, which calls prices indicative and says they vary by cloud and region. Ingress and egress free, no per-query charge, no minimum commitment. A free developer tier (up to 4 vCPU and 8 GB) needs no card (checked 2026-10-21).", "priceSummary": "$160 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the pricing page, the pricing and billing docs page or the terms (checked 2026-10-21).", "endpoints": [] }, "toolCount": 12, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-21" }, "docsUrl": "https://obsessiondb.com/docs", "llmsTxt": "https://obsessiondb.com/llms.txt", "capabilities": [ "db.sql", "analytics.query" ], "tags": [ "official", "hosted", "mcp", "oauth", "database", "llms-txt", "usage-priced", "free-tier" ], "lastRelease": "2026-08-31", "graded": true, "anchor": { "graded": true, "score": 41.1, "grade": "E", "agentReady": false, "rank": 1307, "ranked": true, "rankOf": 1510, "categoryRank": 16, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 53, "maintenance": 28, "payments": 40, "reliability": 20, "schema": 43, "security": 51, "transparency": 59 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-21" }, "negative": 0, "verdict": "The hosted MCP server uses OAuth 2.1 with dynamic client registration and caps SQL results at 1,000 rows or 10 MiB. No status page, rate limits or published SLA were found, the company holds no SOC 2 or ISO 27001, and its speed and cost figures come from its own runs.", "bestFor": "An agent that needs SQL over large ClickHouse tables, and the database's own monitoring and alerts, through one hosted MCP connection.", "strengths": [ "OAuth 2.1 with dynamic client registration, PKCE and four scopes, so no database password goes into the client config", "Twelve MCP tools, one SQL tool and eleven read tools for services, monitoring and alerts", "`run_sql` caps results at 1,000 rows or 10 MiB and flags truncation", "Standard ClickHouse wire and HTTP protocols, so existing ClickHouse drivers and BI tools connect unchanged", "Per-GB compute and per-TB storage prices are public, with a free developer tier that needs no card" ], "weaknesses": [ "No public status page or incident history was found, and the terms give no uptime SLA on self-service plans", "No SOC 2 or ISO 27001, no security.txt, and encryption at rest was still rolling out per the security page of 10 June 2026", "The `workbench:query` scope runs any SQL as the person's account, with no read-only MCP mode documented", "Only two dated changelog entries in the 90 days to 21 October 2026, the last on 31 August", "Speed and cost claims come from ObsessionDB's own runs. It has no entry in ClickBench's results repository" ], "agentNotes": [ "Call `list_services` first and pass `serviceSlug` unchanged from it to `run_sql` and the monitoring tools", "Push aggregation into SQL with `GROUP BY` or `ORDER BY ... LIMIT`. Results stop at 1,000 rows or 10 MiB and set `truncated: true`", "Treat `available: false` from a monitoring tool as no monitoring archive for that service, not as an error", "Batch inserts to about one `INSERT` a second per table, because every insert writes durably to object storage", "Expect a browser sign-in on first connect. A person must approve the OAuth consent at console.obsessiondb.com" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 2.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 41.1 } ], "editorialScores": { "ergonomics": 53, "maintenance": 28, "payments": 40, "reliability": 20, "schema": 43, "security": 51, "transparency": 50 }, "provenanceScore": 68, "checked": { "categories": { "ergonomics": "2026-10-21", "maintenance": "2026-10-21", "payments": "2026-10-21", "reliability": "2026-10-21", "schema": "2026-10-21", "security": "2026-10-21", "transparency": "2026-10-21" }, "last": "2026-10-21", "lastMoved": "2026-10-30", "oldest": "2026-10-21", "stale": false, "staleAfterDays": 90 } }, "connect": { "claudeCode": "claude mcp add --transport http obsessiondb https://console-api.obsessiondb.com/mcp", "config": { "mcpServers": { "obsessiondb": { "args": [ "-y", "mcp-remote", "https://console-api.obsessiondb.com/mcp" ], "command": "npx" } } } }, "letme": { "capability": "https://letme.dev/db.sql", "tool": "https://letme.dev/obsessiondb" }, "area": "developer", "unitPrices": [ { "item": "Compute, per compute unit (2 vCPU, 8 GB) per node", "unit": "month", "usd": 160, "note": "$20 per GB of memory per node per month. Node sizes of 8 to 256 GB. Indicative; varies by cloud and region" }, { "item": "Storage, per TB after compression", "unit": "month", "usd": 25, "note": "Ingress and egress free. Indicative; varies by cloud and region" } ], "provenance": { "legalEntity": "Kellerkind UG (haftungsbeschränkt)", "domain": "obsessiondb.com", "domainRegistered": "2026-01-03", "endpointOnVendorDomain": true, "terms": "https://obsessiondb.com/terms", "privacy": "https://obsessiondb.com/privacy", "statusPage": "", "changelog": "https://obsessiondb.com/changelog", "securityTxt": "none", "checked": "2026-10-21", "notes": [ "The terms (updated 10 June 2026) and the imprint name Kellerkind UG (haftungsbeschränkt), Traunsteiner Str. 10, 10781 Berlin, HRB 267091 B at Amtsgericht Berlin (Charlottenburg), under German law with Berlin courts.", "The home page says the company is backed by Y Combinator. No parent company is named on a first-hand page.", "/.well-known/security.txt returns the site's HTML page, not a security.txt file. The security page gives an address for vulnerability reports.", "No status page was found. None is linked from the site, and status.obsessiondb.com did not answer through our proxy.", "RDAP for obsessiondb.com gives a registration date of 2026-01-03." ], "score": 68 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/obsessiondb.json", "live": { "slug": "obsessiondb", "probe": { "target": "https://console-api.obsessiondb.com/mcp", "method": "mcp-initialize", "lastAt": "2026-11-07T19:22:22.779485642Z", "lastOk": true, "lastStatus": 401, "lastMs": 1231, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 578, "p95ms24h": 1070, "samples24h": 238, "samples30d": 4161, "days": [ { "date": "2026-10-21", "probes": 43, "ok": 43 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 197, "ok": 197 } ] }, "securityTxt": { "url": "https://obsessiondb.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:56.989866137Z" }, "llmsTxt": { "url": "https://obsessiondb.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:33:21.040835876Z" }, "domain": { "domain": "obsessiondb.com", "registered": "2026-01-03", "source": "https://rdap.verisign.com/com/v1/domain/obsessiondb.com", "checkedAt": "2026-11-01T14:25:36.881384086Z" }, "pages": [ { "url": "https://obsessiondb.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:15:13.876023914Z", "changedAt": "2026-10-23T01:52:07.393493674Z", "fingerprint": "4cbf39d4d830" }, { "url": "https://obsessiondb.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:15:16.254258595Z", "changedAt": "2026-10-23T01:52:09.713287332Z", "fingerprint": "3a79146a6845" }, { "url": "https://obsessiondb.com/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:15:18.071146701Z", "changedAt": "2026-10-23T01:52:11.756748548Z", "fingerprint": "af1cab49e47c" } ], "mcpTools": { "url": "https://console-api.obsessiondb.com/mcp", "checkedAt": "2026-11-07T01:46:33.388257752Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-21T23:56:17.741401442Z" }, "updatedAt": "2026-11-07T19:22:22.779485642Z" } }, "edges": [ { "by": 67, "category": "maintenance", "leads": "mcp-toolbox-databases", "name": "Maintenance \u0026 community", "reasons": { "a": "v1.16.0 on 5 November 2026, one day before this check (30). Eight releases from v1.10.0 (27 August) to v1.16.0 in the 90 days (20). Pull requests merge daily and new tools land in each fortnightly release, though 432 issues and pull requests are open (20). io.github.googleapis/mcp-toolbox is in the official registry at 1.16.0 (15). Release automation, lint, tests and conformance workflows (10). 30 + 20 + 20 + 15 + 10 = 95.", "b": "Graded as a closed service. The last dated changelog entry is ClickHouse 26.8 LTS on 31 August 2026, 51 days before the check (20). Two dated entries in the 90 days to 21 October 2026, 21 and 31 August, short of three (0). A public changelog, in-console live chat since June 2026, a shared Slack channel for customers and email support. Replies were not sampled (8 of 15). Not in the official MCP registry and no SDKs of its own (0). Nothing to install for the service. chkit, its open-source CLI, had 93 commits in the 90 days and CI workflows on its default branch (0 of 10 for the service, as there's no package to check)." }, "scores": { "a": 95, "b": 28 } }, { "by": 60, "category": "reliability", "leads": "mcp-toolbox-databases", "name": "Reliability", "reasons": { "a": "Scored as local software the owner runs. A Go binary, a container in Artifact Registry and @toolbox-sdk/server on npm, with install paths per platform (20). Tests, lint, conformance and nightly tier-report workflows in the repository; the pass state wasn't read (15). 432 open issues and pull requests on a repository with 16,818 stars and releases every two weeks, triaged with labels, though the backlog is large (15). Semantic versioning with a published policy, release-please CHANGELOG and an UPGRADING.md (15). 1.x since well before this check, v1.16.0 now (15). 20 + 15 + 15 + 15 + 15 = 80.", "b": "Graded as a hosted service. No status page was found. None is linked from the site, status.obsessiondb.com did not answer through our proxy, and the home page sets its contractual SLAs against 'a status page' (0). No readable incident history (5). No request rate limit found for the MCP server or the ClickHouse endpoints. The 1,000-row or 10 MiB `run_sql` cap and the one-insert-a-second guidance are result and usage guidance, read under ergonomics (0). No 429 or backoff guidance. Insert deduplication is handled by the coordination layer and Jobs runs large SQL as retryable tasks (5 of 15). The terms (10 June 2026) give no contractual uptime SLA on self-service plans and the enterprise SLAs are not published (0). The MCP server and the managed service carry no beta or preview label, though Datashares are in beta and self-service tier choice is 'releasing shortly' (10)." }, "scores": { "a": 80, "b": 20 } }, { "by": 42, "category": "schema", "leads": "mcp-toolbox-databases", "name": "Schema \u0026 documentation", "reasons": { "a": "Every tool's parameters are typed in tools.yaml and published as JSON Schema over MCP (25). mcp-toolbox.dev serves llms.txt (10). Prebuilt descriptions vary from one line (\"Use this tool to execute a single SQL statement.\") to detailed, and few say when not to use a tool (12). Typed parameters with required flags; execute_sql takes free SQL (12). Many examples, samples and codelabs; error responses are thinly documented (11). Semver, a dated CHANGELOG and versioned docs (15). 25 + 10 + 12 + 12 + 11 + 15 = 85.", "b": "No public contract for the MCP tools. Their input schemas come back only from `tools/list` with a signed-in token, which we didn't obtain, and the ClickHouse HTTP interface has no OpenAPI file. The OAuth metadata documents are machine-readable but don't describe tools (0). llms.txt and a Markdown copy of each docs page (10). The docs give one line per tool, say to call `list_services` first, explain slug clashes and when to push work into SQL. ObsessionDB's post of 18 June 2026 quotes one tool calling itself 'the entry point for service-wide error investigation' (10 of 20). Inputs are a service slug and a free-text SQL string, with four documented scopes. No enums or constraints could be read (5 of 15). Setup examples for eleven clients, and documented `truncated: true` and `available: false` results. ClickHouse errors come back in a field per the 18 June post, with no error catalogue. The stdio bridge is called 'Anthropic's `mcp-remote` proxy', and npm names Glen Maddern as its author (8 of 15). A dated public changelog with 19 entries that tracks the ClickHouse release (26.8 LTS), with no version for the MCP server (10 of 15)." }, "scores": { "a": 85, "b": 43 } }, { "by": 29, "category": "ergonomics", "leads": "mcp-toolbox-databases", "name": "Agent ergonomics", "reasons": { "a": "The PostgreSQL prebuilt set lists 29 tools (15), split into five toolsets a client can load one at a time, and write tools disappear in read-only mode (plus 8). Results are bounded per tool, some prebuilt tools take limits, and BigQuery tools compact empty schema fields (14). Errors come back as tool errors; paths are sanitised from file errors since 1.15.0 (12). readOnlyHint and destructiveHint are set per tool and switch with the source's read-only state (18). Prebuilt sets need only environment variables, and SDKs exist in Python, JavaScript, Go and Java (15). 23 + 14 + 12 + 18 + 15 = 82.", "b": "Twelve tools with short descriptions, all but `run_sql` read-only by name. Whether a person can approve fewer scopes at consent was not found (15). `run_sql` stops at 1,000 rows or 10 MiB and flags truncation, `monitoring_list_query_executions` filters to failed runs, and pattern tools take a time window. No paging was documented (12 of 20). Errors return in a field rather than failing the call, monitoring tools answer `available: false` where there is no archive, and a slug clash returns a rename request. ClickHouse error codes are documented upstream (12 of 20). No `readOnlyHint` or `destructiveHint` could be read from the docs, and no idempotency guidance for `run_sql` (4 of 20). Two required inputs for most calls. ObsessionDB ships no SDK of its own; ClickHouse's own drivers in Go, Python, JavaScript, Rust, .NET and Java are documented with per-driver setup pages (10 of 15)." }, "scores": { "a": 82, "b": 53 } }, { "by": 24, "category": "security", "leads": "mcp-toolbox-databases", "name": "Security \u0026 auth", "reasons": { "a": "Source credentials stay in Toolbox, Google sources use IAM, and optional MCP authorisation validates OAuth 2.1 JWTs with required scopes. --allowed-origins and --allowed-hosts default to *, which the CLI docs themselves call unsafe even on localhost, though the default bind is 127.0.0.1 (20). Read-only mode is enforced at the engine, write tools are suppressed, and custom tools can fix SQL and bind parameters to the signed-in user (18). The security docs cover prompt injection and screening through Model Armor (12). OpenTelemetry traces and metrics per call when exported (10). Google's vulnerability intake with a stated response time and GitHub advisories (15). 20 + 18 + 12 + 10 + 15 = 75.", "b": "OAuth 2.1 with dynamic client registration, S256 PKCE, refresh tokens, header-only bearer tokens and four scopes, revocable from the console. The authorisation server metadata was read on 21 October 2026. Less 4 because `workbench:query` runs any SQL as the person's account across every organisation they belong to, with no per-service scope (26 of 30). The MCP docs describe no read-only mode or confirmation step for `run_sql`. ClickHouse roles down to table and column, a global read-only role since May 2026 and read-only Datashares give least-privilege options to an operator who sets them up (8 of 20). `run_sql` returns stored rows to the model as they are, and no prompt-injection guidance was found. The agent context button masks passwords and keys in captured SQL (2 of 15). ClickHouse's `system.query_log` records each query and the console keeps a one-week monitoring archive. Whether MCP calls are attributed to a client was not found (10 of 15). No SOC 2 or ISO 27001 (stated on the security page), no security.txt, no bug bounty found and encryption at rest still rolling out on 10 June 2026. The security page names an address for vulnerability reports (5 of 20)." }, "scores": { "a": 75, "b": 51 } }, { "by": 20, "category": "payments", "leads": "mcp-toolbox-databases", "name": "Payments \u0026 pricing", "reasons": { "a": "Free, self-hosted, nothing to buy, so 20 + 20 + 20. No payment protocol (0).", "b": "No x402, MPP or L402 (0). Compute at $20 per GB of memory per node per month and storage at $25 per TB per month are public on the pricing page without a login, which calls them indicative (20). A free developer tier of up to 4 vCPU and 8 GB with 'No credit card required' (20). A person signs up in a browser and approves OAuth consent before an agent can connect (0)." }, "scores": { "a": 60, "b": 40 } } ], "facts": [ { "a": "MCP server", "b": "MCP server", "name": "Kind" }, { "a": "Google", "b": "Kellerkind UG (haftungsbeschränkt)", "name": "Vendor" }, { "a": "no (local only)", "b": "https://console-api.obsessiondb.com/mcp", "name": "Hosted endpoint" }, { "a": "stdio, Streamable HTTP", "b": "Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Pay per use", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Proprietary service under ObsessionDB's terms of service. The query engine is the open-source ClickHouse engine; the storage layer is proprietary", "name": "Licence" }, { "a": "29", "b": "12", "name": "Tools exposed" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "io.github.googleapis/mcp-toolbox", "b": "not listed", "name": "MCP registry" }, { "a": "2026-11-05", "b": "2026-08-31", "name": "Last release" }, { "a": "no document linked", "b": "2026-06-10", "name": "Terms last updated" }, { "a": "no document linked", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "17k stars", "b": "none", "name": "Popularity" }, { "a": "none", "b": "2.8/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against ObsessionDB's 41.1 (E), and leads in every scored category.", "question": "Which is better for AI agents, MCP Toolbox for Databases or ObsessionDB?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do MCP Toolbox for Databases and ObsessionDB need an API key?" }, { "answer": "MCP Toolbox for Databases runs on your own machine, with no hosted endpoint listed. ObsessionDB has a hosted endpoint at https://console-api.obsessiondb.com/mcp.", "question": "Can an agent call MCP Toolbox for Databases and ObsessionDB without installing anything?" }, { "answer": "MCP Toolbox for Databases is open source (Apache-2.0). No open-source release is listed for ObsessionDB.", "question": "Are MCP Toolbox for Databases and ObsessionDB open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 80 against 20", "Schema \u0026 documentation, 85 against 43", "Agent ergonomics, 82 against 53", "Security \u0026 auth, 75 against 51", "Payments \u0026 pricing, 60 against 40", "Maintenance \u0026 community, 95 against 28", "Transparency \u0026 trust, 64 against 59" ], "also": [ "Agent-ready, a grade of BB or better", "Runs on your own machine", "Open source" ], "goodFor": "Agents and coding assistants that need one server across Google Cloud data services and common databases, or production agents with curated SQL tools.", "slug": "mcp-toolbox-databases", "watchFor": "--allowed-origins and --allowed-hosts default to *, which the docs call unsafe" }, { "aheadOn": null, "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "An agent that needs SQL over large ClickHouse tables, and the database's own monitoring and alerts, through one hosted MCP connection.", "slug": "obsessiondb", "watchFor": "No public status page or incident history was found, and the terms give no uptime SLA on self-service plans" } ], "history": { "mcp-toolbox-databases": null, "obsessiondb": [ { "causes": [ "method" ], "date": "2026-10-30", "delta": -0.1, "from": 41.2, "fromGrade": "E", "to": 41.1, "toGrade": "E" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 41.1, "fromGrade": "E", "to": 41.2, "toGrade": "E" } ] }, "job": { "capability": "db.sql", "name": "SQL databases" }, "others": [ { "json": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-mcp-toolbox-databases.json", "title": "ClickHouse MCP Server vs MCP Toolbox for Databases", "url": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-mcp-toolbox-databases" }, { "json": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-obsessiondb.json", "title": "ClickHouse MCP Server vs ObsessionDB", "url": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-obsessiondb" }, { "json": "https://www.anchorterminal.com/compare/dbhub-vs-mcp-toolbox-databases.json", "title": "DBHub vs MCP Toolbox for Databases", "url": "https://www.anchorterminal.com/compare/dbhub-vs-mcp-toolbox-databases" }, { "json": "https://www.anchorterminal.com/compare/dbhub-vs-obsessiondb.json", "title": "DBHub vs ObsessionDB", "url": "https://www.anchorterminal.com/compare/dbhub-vs-obsessiondb" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp.json", "title": "MCP Toolbox for Databases vs Neon MCP Server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-planetscale-mcp.json", "title": "MCP Toolbox for Databases vs PlanetScale MCP Server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-planetscale-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-mcp-pro.json", "title": "MCP Toolbox for Databases vs Postgres MCP Pro", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-mcp-pro" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived.json", "title": "MCP Toolbox for Databases vs PostgreSQL (archived MCP reference server)", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-snowflake-managed.json", "title": "MCP Toolbox for Databases vs Snowflake-managed MCP server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-snowflake-managed" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-supabase-mcp.json", "title": "MCP Toolbox for Databases vs Supabase API + MCP", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-supabase-mcp" }, { "json": "https://www.anchorterminal.com/compare/neon-mcp-vs-obsessiondb.json", "title": "Neon MCP Server vs ObsessionDB", "url": "https://www.anchorterminal.com/compare/neon-mcp-vs-obsessiondb" }, { "json": "https://www.anchorterminal.com/compare/obsessiondb-vs-planetscale-mcp.json", "title": "ObsessionDB vs PlanetScale MCP Server", "url": "https://www.anchorterminal.com/compare/obsessiondb-vs-planetscale-mcp" }, { "json": "https://www.anchorterminal.com/compare/obsessiondb-vs-postgres-mcp-pro.json", "title": "ObsessionDB vs Postgres MCP Pro", "url": "https://www.anchorterminal.com/compare/obsessiondb-vs-postgres-mcp-pro" }, { "json": "https://www.anchorterminal.com/compare/obsessiondb-vs-postgres-reference-server-archived.json", "title": "ObsessionDB vs PostgreSQL (archived MCP reference server)", "url": "https://www.anchorterminal.com/compare/obsessiondb-vs-postgres-reference-server-archived" }, { "json": "https://www.anchorterminal.com/compare/obsessiondb-vs-snowflake-managed.json", "title": "ObsessionDB vs Snowflake-managed MCP server", "url": "https://www.anchorterminal.com/compare/obsessiondb-vs-snowflake-managed" }, { "json": "https://www.anchorterminal.com/compare/obsessiondb-vs-supabase-mcp.json", "title": "ObsessionDB vs Supabase API + MCP", "url": "https://www.anchorterminal.com/compare/obsessiondb-vs-supabase-mcp" }, { "json": "https://www.anchorterminal.com/compare/mongodb-mcp-vs-obsessiondb.json", "title": "MongoDB MCP Server vs ObsessionDB", "url": "https://www.anchorterminal.com/compare/mongodb-mcp-vs-obsessiondb" }, { "json": "https://www.anchorterminal.com/compare/obsessiondb-vs-redis-mcp.json", "title": "ObsessionDB vs Redis MCP", "url": "https://www.anchorterminal.com/compare/obsessiondb-vs-redis-mcp" }, { "json": "https://www.anchorterminal.com/compare/obsessiondb-vs-reqres-mcp.json", "title": "ObsessionDB vs ReqRes MCP server", "url": "https://www.anchorterminal.com/compare/obsessiondb-vs-reqres-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-mongodb-mcp.json", "title": "MCP Toolbox for Databases vs MongoDB MCP Server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-mongodb-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp.json", "title": "MCP Toolbox for Databases vs Redis MCP", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-reqres-mcp.json", "title": "MCP Toolbox for Databases vs ReqRes MCP server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-reqres-mcp" } ], "panel": null, "scores": [ { "by": 60, "edge": "mcp-toolbox-databases", "key": "reliability", "mcp-toolbox-databases": 80, "name": "Reliability", "obsessiondb": 20, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 42, "edge": "mcp-toolbox-databases", "key": "schema", "mcp-toolbox-databases": 85, "name": "Schema \u0026 documentation", "obsessiondb": 43, "weight": 13 }, { "by": 29, "edge": "mcp-toolbox-databases", "key": "ergonomics", "mcp-toolbox-databases": 82, "name": "Agent ergonomics", "obsessiondb": 53, "weight": 13 }, { "by": 24, "edge": "mcp-toolbox-databases", "key": "security", "mcp-toolbox-databases": 75, "name": "Security \u0026 auth", "obsessiondb": 51, "weight": 14 }, { "by": 20, "edge": "mcp-toolbox-databases", "key": "payments", "mcp-toolbox-databases": 60, "name": "Payments \u0026 pricing", "obsessiondb": 40, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 67, "edge": "mcp-toolbox-databases", "key": "maintenance", "mcp-toolbox-databases": 95, "name": "Maintenance \u0026 community", "obsessiondb": 28, "weight": 7 }, { "by": 5, "edge": "mcp-toolbox-databases", "key": "transparency", "mcp-toolbox-databases": 64, "name": "Transparency \u0026 trust", "obsessiondb": 59, "weight": 7 } ], "summary": "MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against ObsessionDB's 41.1 (E), and leads in every scored category. Both do sql databases.", "tasks": null, "tutorials": [], "verdicts": { "mcp-toolbox-databases": "One self-hosted server reaches 57 source types, with engine-level read-only locks, toolsets, optional OAuth 2.1 and fortnightly semver releases under Apache-2.0. Prebuilt sets list 9 to 41 tools, origin and host checks default to any, and 432 issues and pull requests are open.", "obsessiondb": "The hosted MCP server uses OAuth 2.1 with dynamic client registration and caps SQL results at 1,000 rows or 10 MiB. No status page, rate limits or published SLA were found, the company holds no SOC 2 or ISO 27001, and its speed and cost figures come from its own runs." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb", "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb.min.md" }, "markdown": "MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against ObsessionDB's 41.1 (E), and leads in every scored category. Both do sql databases.\n\n- MCP Toolbox for Databases: grade BB, 77.7/100, rank #27 of 1510. Markdown https://www.anchorterminal.com/tools/mcp-toolbox-databases.md · JSON https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases.json\n- ObsessionDB: grade E, 41.1/100, rank #1307 of 1510. Markdown https://www.anchorterminal.com/tools/obsessiondb.md · JSON https://www.anchorterminal.com/api/v1/tools/obsessiondb.json\n- Best database, file and memory tools for AI agents: https://www.anchorterminal.com/best/data/index.md\n- All 111 databases comparisons: https://www.anchorterminal.com/compare/data/index.md\n\n## Which one, for what\n\n### MCP Toolbox for Databases (BB)\n\nGood for: Agents and coding assistants that need one server across Google Cloud data services and common databases, or production agents with curated SQL tools.\n\nAhead on:\n- Reliability, 80 against 20\n- Schema \u0026 documentation, 85 against 43\n- Agent ergonomics, 82 against 53\n- Security \u0026 auth, 75 against 51\n- Payments \u0026 pricing, 60 against 40\n- Maintenance \u0026 community, 95 against 28\n- Transparency \u0026 trust, 64 against 59\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Runs on your own machine\n- Open source\n\nWatch for: --allowed-origins and --allowed-hosts default to *, which the docs call unsafe\n\n### ObsessionDB (E)\n\nGood for: An agent that needs SQL over large ClickHouse tables, and the database's own monitoring and alerts, through one hosted MCP connection.\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: No public status page or incident history was found, and the terms give no uptime SLA on self-service plans\n\n\n## Why the edge\n\n### Maintenance \u0026 community: MCP Toolbox for Databases +67\n\n- MCP Toolbox for Databases (95): v1.16.0 on 5 November 2026, one day before this check (30). Eight releases from v1.10.0 (27 August) to v1.16.0 in the 90 days (20). Pull requests merge daily and new tools land in each fortnightly release, though 432 issues and pull requests are open (20). io.github.googleapis/mcp-toolbox is in the official registry at 1.16.0 (15). Release automation, lint, tests and conformance workflows (10). 30 + 20 + 20 + 15 + 10 = 95.\n- ObsessionDB (28): Graded as a closed service. The last dated changelog entry is ClickHouse 26.8 LTS on 31 August 2026, 51 days before the check (20). Two dated entries in the 90 days to 21 October 2026, 21 and 31 August, short of three (0). A public changelog, in-console live chat since June 2026, a shared Slack channel for customers and email support. Replies were not sampled (8 of 15). Not in the official MCP registry and no SDKs of its own (0). Nothing to install for the service. chkit, its open-source CLI, had 93 commits in the 90 days and CI workflows on its default branch (0 of 10 for the service, as there's no package to check).\n\n### Reliability: MCP Toolbox for Databases +60\n\n- MCP Toolbox for Databases (80): Scored as local software the owner runs. A Go binary, a container in Artifact Registry and @toolbox-sdk/server on npm, with install paths per platform (20). Tests, lint, conformance and nightly tier-report workflows in the repository; the pass state wasn't read (15). 432 open issues and pull requests on a repository with 16,818 stars and releases every two weeks, triaged with labels, though the backlog is large (15). Semantic versioning with a published policy, release-please CHANGELOG and an UPGRADING.md (15). 1.x since well before this check, v1.16.0 now (15). 20 + 15 + 15 + 15 + 15 = 80.\n- ObsessionDB (20): Graded as a hosted service. No status page was found. None is linked from the site, status.obsessiondb.com did not answer through our proxy, and the home page sets its contractual SLAs against 'a status page' (0). No readable incident history (5). No request rate limit found for the MCP server or the ClickHouse endpoints. The 1,000-row or 10 MiB `run_sql` cap and the one-insert-a-second guidance are result and usage guidance, read under ergonomics (0). No 429 or backoff guidance. Insert deduplication is handled by the coordination layer and Jobs runs large SQL as retryable tasks (5 of 15). The terms (10 June 2026) give no contractual uptime SLA on self-service plans and the enterprise SLAs are not published (0). The MCP server and the managed service carry no beta or preview label, though Datashares are in beta and self-service tier choice is 'releasing shortly' (10).\n\n### Schema \u0026 documentation: MCP Toolbox for Databases +42\n\n- MCP Toolbox for Databases (85): Every tool's parameters are typed in tools.yaml and published as JSON Schema over MCP (25). mcp-toolbox.dev serves llms.txt (10). Prebuilt descriptions vary from one line (\"Use this tool to execute a single SQL statement.\") to detailed, and few say when not to use a tool (12). Typed parameters with required flags; execute_sql takes free SQL (12). Many examples, samples and codelabs; error responses are thinly documented (11). Semver, a dated CHANGELOG and versioned docs (15). 25 + 10 + 12 + 12 + 11 + 15 = 85.\n- ObsessionDB (43): No public contract for the MCP tools. Their input schemas come back only from `tools/list` with a signed-in token, which we didn't obtain, and the ClickHouse HTTP interface has no OpenAPI file. The OAuth metadata documents are machine-readable but don't describe tools (0). llms.txt and a Markdown copy of each docs page (10). The docs give one line per tool, say to call `list_services` first, explain slug clashes and when to push work into SQL. ObsessionDB's post of 18 June 2026 quotes one tool calling itself 'the entry point for service-wide error investigation' (10 of 20). Inputs are a service slug and a free-text SQL string, with four documented scopes. No enums or constraints could be read (5 of 15). Setup examples for eleven clients, and documented `truncated: true` and `available: false` results. ClickHouse errors come back in a field per the 18 June post, with no error catalogue. The stdio bridge is called 'Anthropic's `mcp-remote` proxy', and npm names Glen Maddern as its author (8 of 15). A dated public changelog with 19 entries that tracks the ClickHouse release (26.8 LTS), with no version for the MCP server (10 of 15).\n\n### Agent ergonomics: MCP Toolbox for Databases +29\n\n- MCP Toolbox for Databases (82): The PostgreSQL prebuilt set lists 29 tools (15), split into five toolsets a client can load one at a time, and write tools disappear in read-only mode (plus 8). Results are bounded per tool, some prebuilt tools take limits, and BigQuery tools compact empty schema fields (14). Errors come back as tool errors; paths are sanitised from file errors since 1.15.0 (12). readOnlyHint and destructiveHint are set per tool and switch with the source's read-only state (18). Prebuilt sets need only environment variables, and SDKs exist in Python, JavaScript, Go and Java (15). 23 + 14 + 12 + 18 + 15 = 82.\n- ObsessionDB (53): Twelve tools with short descriptions, all but `run_sql` read-only by name. Whether a person can approve fewer scopes at consent was not found (15). `run_sql` stops at 1,000 rows or 10 MiB and flags truncation, `monitoring_list_query_executions` filters to failed runs, and pattern tools take a time window. No paging was documented (12 of 20). Errors return in a field rather than failing the call, monitoring tools answer `available: false` where there is no archive, and a slug clash returns a rename request. ClickHouse error codes are documented upstream (12 of 20). No `readOnlyHint` or `destructiveHint` could be read from the docs, and no idempotency guidance for `run_sql` (4 of 20). Two required inputs for most calls. ObsessionDB ships no SDK of its own; ClickHouse's own drivers in Go, Python, JavaScript, Rust, .NET and Java are documented with per-driver setup pages (10 of 15).\n\n### Security \u0026 auth: MCP Toolbox for Databases +24\n\n- MCP Toolbox for Databases (75): Source credentials stay in Toolbox, Google sources use IAM, and optional MCP authorisation validates OAuth 2.1 JWTs with required scopes. --allowed-origins and --allowed-hosts default to *, which the CLI docs themselves call unsafe even on localhost, though the default bind is 127.0.0.1 (20). Read-only mode is enforced at the engine, write tools are suppressed, and custom tools can fix SQL and bind parameters to the signed-in user (18). The security docs cover prompt injection and screening through Model Armor (12). OpenTelemetry traces and metrics per call when exported (10). Google's vulnerability intake with a stated response time and GitHub advisories (15). 20 + 18 + 12 + 10 + 15 = 75.\n- ObsessionDB (51): OAuth 2.1 with dynamic client registration, S256 PKCE, refresh tokens, header-only bearer tokens and four scopes, revocable from the console. The authorisation server metadata was read on 21 October 2026. Less 4 because `workbench:query` runs any SQL as the person's account across every organisation they belong to, with no per-service scope (26 of 30). The MCP docs describe no read-only mode or confirmation step for `run_sql`. ClickHouse roles down to table and column, a global read-only role since May 2026 and read-only Datashares give least-privilege options to an operator who sets them up (8 of 20). `run_sql` returns stored rows to the model as they are, and no prompt-injection guidance was found. The agent context button masks passwords and keys in captured SQL (2 of 15). ClickHouse's `system.query_log` records each query and the console keeps a one-week monitoring archive. Whether MCP calls are attributed to a client was not found (10 of 15). No SOC 2 or ISO 27001 (stated on the security page), no security.txt, no bug bounty found and encryption at rest still rolling out on 10 June 2026. The security page names an address for vulnerability reports (5 of 20).\n\n### Payments \u0026 pricing: MCP Toolbox for Databases +20\n\n- MCP Toolbox for Databases (60): Free, self-hosted, nothing to buy, so 20 + 20 + 20. No payment protocol (0).\n- ObsessionDB (40): No x402, MPP or L402 (0). Compute at $20 per GB of memory per node per month and storage at $25 per TB per month are public on the pricing page without a login, which calls them indicative (20). A free developer tier of up to 4 vCPU and 8 GB with 'No credit card required' (20). A person signs up in a browser and approves OAuth consent before an agent can connect (0).\n\n## Score by category\n\n| Category | Weight | MCP Toolbox for Databases | ObsessionDB | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 80 | 20 | MCP Toolbox for Databases +60 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 85 | 43 | MCP Toolbox for Databases +42 |\n| Agent ergonomics | 13% (16.2 this run) | 82 | 53 | MCP Toolbox for Databases +29 |\n| Security \u0026 auth | 14% (17.5 this run) | 75 | 51 | MCP Toolbox for Databases +24 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 40 | MCP Toolbox for Databases +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 95 | 28 | MCP Toolbox for Databases +67 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 64 | 59 | MCP Toolbox for Databases +5 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **77.7 · BB** | **41.1 · E** | |\n\n## Facts side by side\n\n| Fact | MCP Toolbox for Databases | ObsessionDB |\n| --- | --- | --- |\n| Kind | MCP server | MCP server |\n| Vendor | Google | Kellerkind UG (haftungsbeschränkt) |\n| Hosted endpoint | no (local only) | `https://console-api.obsessiondb.com/mcp` |\n| Transports | stdio, Streamable HTTP | Streamable HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Free | Pay per use |\n| x402 | no | no |\n| Licence | Apache-2.0 | Proprietary service under ObsessionDB's terms of service. The query engine is the open-source ClickHouse engine; the storage layer is proprietary |\n| Tools exposed | 29 | 12 |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | yes |\n| MCP registry | `io.github.googleapis/mcp-toolbox` | not listed |\n| Last release | 2026-11-05 | 2026-08-31 |\n| Terms last updated | no document linked | 2026-06-10 |\n| Privacy policy last updated | no document linked | no date given |\n| Customer content may train models | not read yet | not found in the text |\n| Terms restrict automated access | not read yet | not found in the text |\n| Terms restrict benchmarking | not read yet | not found in the text |\n| Terms or service can change without notice | not read yet | not found in the text |\n| Arbitration or class-action waiver | not read yet | not found in the text |\n| Popularity | 17k stars | none |\n| Agent reviews | none | 2.8/5 (4) |\n\n## How the scores have moved\n\n### MCP Toolbox for Databases\n\nNo score change since it was listed.\n\n### ObsessionDB\n\n- -0.1 on 30 October 2026: checklist\n- +0.1 on 27 October 2026: checklist\n\n## Verdicts\n\n**MCP Toolbox for Databases.** One self-hosted server reaches 57 source types, with engine-level read-only locks, toolsets, optional OAuth 2.1 and fortnightly semver releases under Apache-2.0. Prebuilt sets list 9 to 41 tools, origin and host checks default to any, and 432 issues and pull requests are open.\n\n**ObsessionDB.** The hosted MCP server uses OAuth 2.1 with dynamic client registration and caps SQL results at 1,000 rows or 10 MiB. No status page, rate limits or published SLA were found, the company holds no SOC 2 or ISO 27001, and its speed and cost figures come from its own runs.\n\n## Before you call either\n\n### MCP Toolbox for Databases\n\n1. Load one toolset (such as data) rather than the whole prebuilt set to keep context small\n2. Turn on the source's read-only mode for exploration; write tools then disappear from tools/list\n3. Start the HTTP server with --allowed-hosts and --allowed-origins set; the defaults accept any\n4. Prefer custom tools with fixed SQL over execute_sql for production agents\n\n### ObsessionDB\n\n1. Call `list_services` first and pass `serviceSlug` unchanged from it to `run_sql` and the monitoring tools\n2. Push aggregation into SQL with `GROUP BY` or `ORDER BY ... LIMIT`. Results stop at 1,000 rows or 10 MiB and set `truncated: true`\n3. Treat `available: false` from a monitoring tool as no monitoring archive for that service, not as an error\n4. Batch inserts to about one `INSERT` a second per table, because every insert writes durably to object storage\n5. Expect a browser sign-in on first connect. A person must approve the OAuth consent at console.obsessiondb.com\n\n## Questions\n\n### Which is better for AI agents, MCP Toolbox for Databases or ObsessionDB?\n\nMCP Toolbox for Databases scores 77.7 (BB) on agent readiness against ObsessionDB's 41.1 (E), and leads in every scored category.\n\n### Do MCP Toolbox for Databases and ObsessionDB need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call MCP Toolbox for Databases and ObsessionDB without installing anything?\n\nMCP Toolbox for Databases runs on your own machine, with no hosted endpoint listed. ObsessionDB has a hosted endpoint at https://console-api.obsessiondb.com/mcp.\n\n### Are MCP Toolbox for Databases and ObsessionDB open source?\n\nMCP Toolbox for Databases is open source (Apache-2.0). No open-source release is listed for ObsessionDB.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb.json, and with the fewest tokens: https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"mcp-toolbox-databases\", \"b\": \"obsessiondb\"}`. From a terminal: `anchor compare mcp-toolbox-databases obsessiondb`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases.json and https://www.anchorterminal.com/api/v1/tools/obsessiondb.json\n\n## Other comparisons with MCP Toolbox for Databases or ObsessionDB\n\n- [ClickHouse MCP Server vs MCP Toolbox for Databases](https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-mcp-toolbox-databases.md)\n- [ClickHouse MCP Server vs ObsessionDB](https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-obsessiondb.md)\n- [DBHub vs MCP Toolbox for Databases](https://www.anchorterminal.com/compare/dbhub-vs-mcp-toolbox-databases.md)\n- [DBHub vs ObsessionDB](https://www.anchorterminal.com/compare/dbhub-vs-obsessiondb.md)\n- [MCP Toolbox for Databases vs Neon MCP Server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp.md)\n- [MCP Toolbox for Databases vs PlanetScale MCP Server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-planetscale-mcp.md)\n- [MCP Toolbox for Databases vs Postgres MCP Pro](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-mcp-pro.md)\n- [MCP Toolbox for Databases vs PostgreSQL (archived MCP reference server)](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived.md)\n- [MCP Toolbox for Databases vs Snowflake-managed MCP server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-snowflake-managed.md)\n- [MCP Toolbox for Databases vs Supabase API + MCP](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-supabase-mcp.md)\n- [Neon MCP Server vs ObsessionDB](https://www.anchorterminal.com/compare/neon-mcp-vs-obsessiondb.md)\n- [ObsessionDB vs PlanetScale MCP Server](https://www.anchorterminal.com/compare/obsessiondb-vs-planetscale-mcp.md)\n- [ObsessionDB vs Postgres MCP Pro](https://www.anchorterminal.com/compare/obsessiondb-vs-postgres-mcp-pro.md)\n- [ObsessionDB vs PostgreSQL (archived MCP reference server)](https://www.anchorterminal.com/compare/obsessiondb-vs-postgres-reference-server-archived.md)\n- [ObsessionDB vs Snowflake-managed MCP server](https://www.anchorterminal.com/compare/obsessiondb-vs-snowflake-managed.md)\n- [ObsessionDB vs Supabase API + MCP](https://www.anchorterminal.com/compare/obsessiondb-vs-supabase-mcp.md)\n- [MongoDB MCP Server vs ObsessionDB](https://www.anchorterminal.com/compare/mongodb-mcp-vs-obsessiondb.md)\n- [ObsessionDB vs Redis MCP](https://www.anchorterminal.com/compare/obsessiondb-vs-redis-mcp.md)\n- [ObsessionDB vs ReqRes MCP server](https://www.anchorterminal.com/compare/obsessiondb-vs-reqres-mcp.md)\n- [MCP Toolbox for Databases vs MongoDB MCP Server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-mongodb-mcp.md)\n- [MCP Toolbox for Databases vs Redis MCP](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp.md)\n- [MCP Toolbox for Databases vs ReqRes MCP server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-reqres-mcp.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "MCP Toolbox for Databases vs ObsessionDB", "url": "" } ], "description": "MCP Toolbox for Databases scores 77.7 (BB) to ObsessionDB's 41.1 (E) for sql databases. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "MCP Toolbox for Databases BB 77.7", "ObsessionDB E 41.1", "scores" ], "h1": "MCP Toolbox for Databases vs ObsessionDB", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/mcp-toolbox-databases-vs-obsessiondb", "published": "2026-10-01", "section": "tools", "title": "MCP Toolbox for Databases vs ObsessionDB for AI agents (2026)", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb" }, "tokens": { "markdown": 4850, "slim": 2980 }, "version": 1 }