{ "data": { "a": { "slug": "mcp-toolbox-databases", "name": "MCP Toolbox for Databases", "vendor": "Google", "vendorUrl": "https://mcp-toolbox.dev", "kind": "mcp", "category": "data", "summary": "MCP Toolbox for Databases is Google's open-source MCP server for more than 30 data sources, among them BigQuery, AlloyDB, Cloud SQL, Spanner and PostgreSQL. It runs as a binary or container with prebuilt or custom tools from tools.yaml.", "url": "https://www.anchorterminal.com/tools/mcp-toolbox-databases", "markdownUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases.json", "dns": "mcp-toolbox-databases.grade.anchorterminal.com", "repo": "https://github.com/googleapis/mcp-toolbox", "license": "Apache-2.0", "transports": [ "stdio", "streamable-http" ], "packages": [ { "registry": "npm", "name": "@toolbox-sdk/server" }, { "registry": "pypi", "name": "toolbox-core" }, { "registry": "npm", "name": "@toolbox-sdk/core" } ], "auth": "mixed", "authNotes": "Toolbox holds the source credentials (database users and passwords from environment variables, or Google Application Default Credentials and IAM for Google sources). Clients need nothing by default. Optional MCP authorisation makes Toolbox an OAuth 2.1 resource server that validates JWT bearer tokens against a configured authorisation server and required scopes, and publishes protected-resource metadata. authServices can also bind tool parameters to a signed-in user's claims. The HTTP server listens on 127.0.0.1 by default, but --allowed-origins and --allowed-hosts default to *.", "pricing": "free", "pricingNotes": "Free and Apache-2.0, run on your own machine or your own Cloud Run service. Google Cloud sources bill for their own usage (BigQuery queries, Cloud SQL instances); Toolbox itself has no price.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "Self-hosted MCP server with nothing to buy (checked 2026-11-06).", "endpoints": [] }, "toolCount": 29, "popularity": { "githubStars": 16818, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://mcp-toolbox.dev/", "llmsTxt": "https://mcp-toolbox.dev/llms.txt", "registryName": "io.github.googleapis/mcp-toolbox", "capabilities": [ "db.sql", "db.document", "db.admin" ], "tags": [ "self-hosted", "free", "open-source", "mcp", "stdio", "http", "mcp-registry", "llms-txt", "google-cloud", "bigquery", "postgres", "toolsets", "read-only-mode", "opentelemetry", "go" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 77.7, "grade": "BB", "agentReady": true, "rank": 27, "ranked": true, "rankOf": 1486, "categoryRank": 2, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 82, "maintenance": 95, "payments": 60, "reliability": 80, "schema": 85, "security": 75, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "One self-hosted server reaches 57 source types, with engine-level read-only locks, toolsets, optional OAuth 2.1 and fortnightly semver releases under Apache-2.0. Prebuilt sets list 9 to 41 tools, origin and host checks default to any, and 432 issues and pull requests are open.", "bestFor": "Agents and coding assistants that need one server across Google Cloud data services and common databases, or production agents with curated SQL tools.", "strengths": [ "57 source types and 39 prebuilt configurations, from BigQuery and AlloyDB to PostgreSQL, MySQL, MongoDB and Snowflake", "Read-only mode locks the database session, hides write tools and sets readOnlyHint", "Custom tools in tools.yaml fix SQL and bind parameters to the signed-in user's claims", "Optional MCP authorisation as an OAuth 2.1 resource server with protected-resource metadata", "v1.16.0 on 5 November 2026 after eight releases in 90 days, in the MCP registry" ], "weaknesses": [ "--allowed-origins and --allowed-hosts default to *, which the docs call unsafe", "Prebuilt PostgreSQL set lists 29 tools and AlloyDB 41 unless a toolset is chosen", "432 open issues and pull requests", "Some prebuilt descriptions are a single line with no guidance on when not to use the tool" ], "agentNotes": [ "Load one toolset (such as data) rather than the whole prebuilt set to keep context small", "Turn on the source's read-only mode for exploration; write tools then disappear from tools/list", "Start the HTTP server with --allowed-hosts and --allowed-origins set; the defaults accept any", "Prefer custom tools with fixed SQL over execute_sql for production agents" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 77.7 } ], "editorialScores": { "ergonomics": 82, "maintenance": 95, "payments": 60, "reliability": 80, "schema": 85, "security": 75, "transparency": 77 }, "provenanceScore": 50, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npx @toolbox-sdk/server --prebuilt postgres --stdio", "config": { "mcpServers": { "postgres": { "args": [ "-y", "@toolbox-sdk/server", "--prebuilt", "postgres", "--stdio" ], "command": "npx", "env": { "POSTGRES_DATABASE": "mydb", "POSTGRES_HOST": "localhost", "POSTGRES_PASSWORD": "password", "POSTGRES_USER": "user" } } } } }, "letme": { "capability": "https://letme.dev/db.sql", "tool": "https://letme.dev/mcp-toolbox-databases" }, "area": "developer", "provenance": { "legalEntity": "Google LLC", "domain": "mcp-toolbox.dev", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/googleapis/mcp-toolbox/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "Source files carry \"Copyright 2025 Google LLC\" under Apache-2.0, and the repository is in the googleapis organisation.", "SECURITY.md routes reports to g.co/vulnz with a five-working-day response and discloses through GitHub Security Advisories.", "mcp-toolbox.dev/robots.txt allows all crawlers and serves llms.txt. Its registration date wasn't found through RDAP.", "No terms or privacy policy specific to Toolbox, which sends nothing to Google unless GCP telemetry export or a Google source is configured." ], "score": 50 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.json", "live": { "slug": "mcp-toolbox-databases", "versions": [ { "registry": "github", "name": "googleapis/mcp-toolbox", "version": "v1.16.0", "released": "2026-11-05", "seenAt": "2026-11-06T23:43:21.921228545Z" }, { "registry": "mcp-registry", "name": "io.github.googleapis/mcp-toolbox", "version": "1.16.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "@toolbox-sdk/core", "version": "1.2.0", "seenAt": "2026-11-06T23:43:21.731206096Z" }, { "registry": "npm", "name": "@toolbox-sdk/server", "version": "1.16.0", "seenAt": "2026-11-06T23:43:19.586944944Z" }, { "registry": "pypi", "name": "toolbox-core", "version": "1.4.0", "released": "2026-09-01", "seenAt": "2026-11-06T23:43:20.432816729Z" } ], "githubStars": 16819, "npmWeekly": 37825, "pypiWeekly": 81244, "securityTxt": { "url": "https://mcp-toolbox.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:31.533747335Z" }, "llmsTxt": { "url": "https://mcp-toolbox.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:57.733544718Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/googleapis/mcp-toolbox/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:21:14.273833915Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a1a131225627" } ], "updatedAt": "2026-11-07T18:16:28.95801333Z" } }, "answer": "MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against Redis MCP's 54.9 (C), and leads in 5 of 7 scored categories. Redis MCP leads on transparency \u0026 trust.", "b": { "slug": "redis-mcp", "name": "Redis MCP", "vendor": "Redis", "vendorUrl": "https://redis.io", "kind": "mcp", "category": "data", "summary": "Redis's open-source MCP server for Redis databases. The owner runs it locally over stdio, and it gives agents tools for strings, hashes, lists, sets, sorted sets, streams, pub/sub, JSON documents and vector search.", "url": "https://www.anchorterminal.com/tools/redis-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/redis-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/redis-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/redis-mcp.json", "dns": "redis-mcp.grade.anchorterminal.com", "repo": "https://github.com/redis/mcp-redis", "license": "MIT", "transports": [ "stdio" ], "packages": [ { "registry": "pypi", "name": "redis-mcp-server" }, { "registry": "oci", "name": "docker.io/mcp/redis" } ], "auth": "mixed", "authNotes": "The server signs in to Redis with a username and password (`--url`, `--username` and `--password`, or `REDIS_USERNAME` and `REDIS_PWD`), which a Redis admin creates, self-serve, and can scope with Redis ACL rules. TLS takes a CA file and an optional client certificate, with `ssl_cert_reqs` defaulting to required. Azure Managed Redis can use Entra ID through a service principal, a managed identity or the default Azure credential, with tokens renewed in the background. stdio needs no caller credential, and every caller shares the one Redis user.", "pricing": "free", "pricingNotes": "Free and open source under the MIT licence, with nothing to buy for the server. It needs a Redis database, which can be Redis Open Source on the owner's machine or a managed service such as Redis Cloud or Azure Managed Redis. Redis Cloud prices and its free database were not checked. Redis has no hosted version of this server in the pages read (checked 2026-10-09).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs pages or the source (checked 2026-10-09).", "endpoints": [] }, "toolCount": 53, "popularity": { "githubStars": 633, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://redis.io/docs/latest/integrate/redis-mcp/", "llmsTxt": "https://redis.io/llms.txt", "registryName": "io.github.redis/mcp-redis", "capabilities": [ "db.document", "db.vector", "db.hybrid" ], "tags": [ "official", "local", "open-source", "self-hosted", "mcp", "python", "docker", "database", "key-value", "vector-search" ], "lastRelease": "2026-08-04", "graded": true, "anchor": { "graded": true, "score": 54.9, "grade": "C", "agentReady": false, "rank": 888, "ranked": true, "rankOf": 1486, "categoryRank": 13, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 39, "maintenance": 47, "payments": 60, "reliability": 52, "schema": 64, "security": 54, "transparency": 77 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-04" }, "negative": 0, "verdict": "Redis's server, under the MIT licence, maps 53 tools onto Redis commands, with typed inputs and a CI workflow that tests five Python versions against a live Redis. It has no read-only mode, tool annotations or changelog file, no release has followed 0.5.1 of 4 August 2026, and PyPI installs failed to start from 28 July to 5 August.", "bestFor": "Teams with a Redis database that want an agent to read and write keys, streams, JSON documents and vector indexes on a developer's machine.", "strengths": [ "Maintained by Redis under the MIT licence, with 0.5.1 marked latest in the official MCP registry as `io.github.redis/mcp-redis` per the 9 October check", "CI runs pytest on pushes, pull requests and nightly across Python 3.10 to 3.14 against a live Redis, with an 80 per cent coverage floor", "No tool runs an arbitrary Redis command. Each of the 53 tools maps to a named operation, and none exposes `FLUSHALL`, `CONFIG` or `EVAL`", "Connects with a Redis ACL user, TLS with certificate checks required by default, client certificates, or Entra ID for Azure Managed Redis", "Blocking reads are capped in the server. `xreadgroup` and `read_messages` refuse waits over 5,000 ms, and pub/sub subscriptions are capped at 50" ], "weaknesses": [ "53 tools load at once, with no toolsets and no read-only subset. Pull request #161 for a tool allowlist has been open since 28 July 2026", "No tool declares `readOnlyHint` or `destructiveHint`, and nothing asks for confirmation before `delete`, `json_del` or `xgroup_destroy`, still true on main on 3 November 2026", "Fresh PyPI installs failed to start from 28 July to 5 August 2026, because 0.5.0 had no upper bound on the `mcp` package (issues #163 and #169)", "Started through the `redis-mcp-server` command without flags, the server ignores `REDIS_HOST` and `REDIS_PORT` and connects to 127.0.0.1:6379. Issue #156 has been open since 10 July 2026", "No changelog file, no SECURITY.md and no prompt-injection guidance. Patch release 0.5.1 changed the `unsubscribe` input from `channel` to `subscription_id` without a note" ], "agentNotes": [ "Pass the connection with `--url` or explicit flags. The `redis-mcp-server` command overrides `REDIS_HOST`, `REDIS_PORT`, `REDIS_DB`, `REDIS_SSL` and `REDIS_CLUSTER_MODE` with its own defaults when flags are absent", "Use `scan_keys` with the returned cursor until it is 0. `scan_all_keys`, `hgetall`, `smembers` and `json_get` return everything they match with no limit", "Read failures from the text. Tools return strings such as `Error ...` or an `error` key in place of an MCP error result", "Keep the `subscription_id` from `subscribe` or `psubscribe` and pass it to `read_messages` and `unsubscribe`. Idle subscriptions close after 300 seconds", "Connect as a Redis ACL user limited to the keys and command categories needed, since the server has no read-only switch and `delete` runs without confirmation" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 54.9 } ], "editorialScores": { "ergonomics": 39, "maintenance": 47, "payments": 60, "reliability": 52, "schema": 64, "security": 54, "transparency": 65 }, "provenanceScore": 89, "checked": { "categories": { "ergonomics": "2026-11-04", "maintenance": "2026-11-04", "payments": "2026-11-04", "reliability": "2026-11-04", "schema": "2026-11-04", "security": "2026-11-04", "transparency": "2026-11-04" }, "last": "2026-11-04", "lastMoved": "2026-11-04", "oldest": "2026-11-04", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install redis-mcp-server", "config": { "mcpServers": { "RedisMCPServer": { "args": [ "--from", "redis-mcp-server@latest", "redis-mcp-server", "--url", "redis://localhost:6379/0" ], "command": "uvx" } } } }, "letme": { "capability": "https://letme.dev/db.document", "tool": "https://letme.dev/redis-mcp" }, "area": "developer", "provenance": { "legalEntity": "Redis Ltd.", "domain": "redis.io", "domainRegistered": "2010-05-28", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/redis/mcp-redis/releases", "securityTxt": "valid", "checked": "2026-10-09", "notes": [ "No terms document governs this software beyond the MIT licence, so `terms` is left out.", "`privacy` is left out. The Redis Privacy Policy (last updated 29 November 2024, https://redis.io/legal/privacy-policy/) names Redis Ltd. and its affiliates and covers Redis's sites and services. It does not address this open-source server, which runs on the owner's machine. Questions sent by `search_redis_documents` do go to redis.io.", "The copyright line in the `LICENSE` file reads Redis, inc. The privacy policy names Redis Ltd., which is used here.", "redis.io/.well-known/security.txt gives a contact page, a HackerOne disclosure programme as policy and an expiry of 19 December 2030.", "RDAP for redis.io gives a registration date of 2010-05-28.", "The server runs on the owner's machine and connects to the Redis it is configured for, so there is no vendor endpoint to check. The changelog link is the GitHub releases page, since the repository has no changelog file." ], "score": 89 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/redis-mcp.json", "live": { "slug": "redis-mcp", "versions": [ { "registry": "github", "name": "redis/mcp-redis", "version": "0.5.1", "released": "2026-08-05", "seenAt": "2026-11-07T00:00:37.586801547Z" }, { "registry": "mcp-registry", "name": "io.github.redis/mcp-redis", "version": "0.5.1", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "pypi", "name": "redis-mcp-server", "version": "0.5.1", "released": "2026-08-05", "seenAt": "2026-11-07T00:00:37.365630293Z" } ], "githubStars": 641, "pypiWeekly": 2895, "securityTxt": { "url": "https://redis.io/.well-known/security.txt", "state": "valid", "expires": "2030-12-19T00:00:00Z", "checkedAt": "2026-11-07T16:00:27.489844353Z" }, "llmsTxt": { "url": "https://redis.io/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:33:43.940804068Z" }, "domain": { "domain": "redis.io", "checkedAt": "2026-11-01T14:21:23.110601118Z" }, "github": { "repo": "redis/mcp-redis", "checkedAt": "2026-11-02T09:20:36.173885498Z", "stars": 641, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-26T16:33:56Z", "openIssues": 7, "openPRs": 7, "issuesOpened90d": 7, "issuesClosed90d": 10, "prsMerged90d": 14, "ci": { "branch": "main", "runs": 50, "success": 49, "failure": 1, "other": 0, "latest": "success", "latestAt": "2026-10-26T16:35:29Z" }, "replies": { "sampled": 25, "unanswered": 4, "medianDays": 1.9 } }, "updatedAt": "2026-11-07T18:16:28.95801333Z" } }, "edges": [ { "by": 48, "category": "maintenance", "leads": "mcp-toolbox-databases", "name": "Maintenance \u0026 community", "reasons": { "a": "v1.16.0 on 5 November 2026, one day before this check (30). Eight releases from v1.10.0 (27 August) to v1.16.0 in the 90 days (20). Pull requests merge daily and new tools land in each fortnightly release, though 432 issues and pull requests are open (20). io.github.googleapis/mcp-toolbox is in the official registry at 1.16.0 (15). Release automation, lint, tests and conformance workflows (10). 30 + 20 + 20 + 15 + 10 = 95.", "b": "0.5.1 was tagged on 4 August 2026 and published on GitHub and PyPI on 5 August, 91 days before this check, and no release has followed (10). No release in the 90 days from 6 August. The 32 commits since 0.5.1, up to 3 November, are dependency updates and the removal of an unused dev dependency, with the version still 0.5.1 (0). 19 open items per the 9 October check, when Redis staff had answered #156, #163 and #169 within weeks and merged the `mcp` pin the day it was reported, while #174, #137 and #31 had no reply and #45 on streamable HTTP had been open since August 2025 (14 of 25). Listed in the official MCP registry as `io.github.redis/mcp-redis`, a GitHub-verified namespace, with 0.5.1 marked latest per the 9 October check, and the repository's server.json still names it (15). Dependabot updates merged up to 3 November 2026, a lock file and the `mcp` dependency pinned below 2 (8 of 10)." }, "scores": { "a": 95, "b": 47 } }, { "by": 43, "category": "ergonomics", "leads": "mcp-toolbox-databases", "name": "Agent ergonomics", "reasons": { "a": "The PostgreSQL prebuilt set lists 29 tools (15), split into five toolsets a client can load one at a time, and write tools disappear in read-only mode (plus 8). Results are bounded per tool, some prebuilt tools take limits, and BigQuery tools compact empty schema fields (14). Errors come back as tool errors; paths are sanitised from file errors since 1.15.0 (12). readOnlyHint and destructiveHint are set per tool and switch with the source's read-only state (18). Prebuilt sets need only environment variables, and SDKs exist in Python, JavaScript, Go and Java (15). 23 + 14 + 12 + 18 + 15 = 82.", "b": "53 tools load at once, about 15,700 characters of descriptions, with no toolsets, dynamic loading or read-only subset. Pull request #161 for an allowlist has been open since 28 July 2026 (5 of 25). `scan_keys` pages with a cursor, `lrange` and `zrange` take ranges, `xrange` and `xreadgroup` take a count, `read_messages` caps at 100 and the vector tools take `k`. `scan_all_keys`, `hgetall`, `smembers` and `json_get` return everything with no limit (12 of 20). Failures come back as ordinary results, a string starting `Error` or a dictionary with an `error` key, carrying the Redis error text. Input checks return clear messages, such as the refusal of `block_ms=0`. Nothing marks a result as an MCP error and no error list is documented (9 of 20). No tool declares `readOnlyHint`, `destructiveHint` or `idempotentHint`, and pull request #181 adding them was opened on 8 October 2026. No retry guidance was found, and `lpush`, `xadd` and `publish` are not safe to repeat (3 of 20). Most tools need one or two arguments and defaults are stated in the descriptions. The server is a Python package only (10 of 15)." }, "scores": { "a": 82, "b": 39 } }, { "by": 28, "category": "reliability", "leads": "mcp-toolbox-databases", "name": "Reliability", "reasons": { "a": "Scored as local software the owner runs. A Go binary, a container in Artifact Registry and @toolbox-sdk/server on npm, with install paths per platform (20). Tests, lint, conformance and nightly tier-report workflows in the repository; the pass state wasn't read (15). 432 open issues and pull requests on a repository with 16,818 stars and releases every two weeks, triaged with labels, though the backlog is large (15). Semantic versioning with a published policy, release-please CHANGELOG and an UPGRADING.md (15). 1.x since well before this check, v1.16.0 now (15). 20 + 15 + 15 + 15 + 15 = 80.", "b": "Scored as local software, since the owner runs it over stdio. Official PyPI package `redis-mcp-server` with Python 3.10 to 3.14 stated in the metadata, though the README badge says 3.14 and later (20). The CI workflow runs on pushes, pull requests and nightly, on a five-version Python matrix against a live Redis with pytest and an 80 per cent coverage floor, but its run results couldn't be read on 4 November 2026 (GitHub's pages and API answered 403), so 15 under this run's reading for test CI with an unreadable result. Fresh PyPI installs failed to start from 28 July to 5 August 2026 after `mcp` 2.0.0 removed the module the server imports, fixed in 0.5.1 (issues #163 and #169). Issue #156, where the console command ignores `REDIS_HOST` and `REDIS_PORT`, was open with two unmerged fixes per the 9 October check (13 of 25). Tagged releases with numbers in semantic form, but no changelog file, release notes that are lists of pull request titles, and a patch release (0.5.1) that changed the `unsubscribe` input and added six tools. Issue #137 asking for semver tags had no reply (4 of 15). Version 0.5.1 with the classifier `Development Status :: 4 - Beta` (0)." }, "scores": { "a": 80, "b": 52 } }, { "by": 21, "category": "schema", "leads": "mcp-toolbox-databases", "name": "Schema \u0026 documentation", "reasons": { "a": "Every tool's parameters are typed in tools.yaml and published as JSON Schema over MCP (25). mcp-toolbox.dev serves llms.txt (10). Prebuilt descriptions vary from one line (\"Use this tool to execute a single SQL statement.\") to detailed, and few say when not to use a tool (12). Typed parameters with required flags; execute_sql takes free SQL (12). Many examples, samples and codelabs; error responses are thinly documented (11). Semver, a dated CHANGELOG and versioned docs (15). 25 + 10 + 12 + 12 + 11 + 15 = 85.", "b": "Each tool is built from a typed Python signature through FastMCP, so inputs carry JSON Schema, read from the source since we do not run vendor software. `get_vector_from_hash` has no return type, several tools return either a value or an error string, and there are no output schemas (21 of 25). redis.io serves llms.txt and a Markdown form of each docs page, and the README is Markdown (10). Most descriptions are one line plus an argument list. `scan_keys`, `scan_all_keys`, `hybrid_search` and `xreadgroup` say when to use them and what to avoid, and the rest do not (11 of 20). Required fields and defaults are typed, but there are no enums (`distance_metric` and the `info` section are free strings) and the bounds on `block_ms`, `timeout_ms` and `max_messages` are checked in code, not declared in the schema (8 of 15). The README and docs pages give client configuration examples. Tool examples exist only inside a few descriptions, and no list of error responses was found (6 of 15). Tagged versions and GitHub release notes, with no changelog file. The 0.4.0 notes name the docs tool `search_documents` where the source has `search_redis_documents`, and Redis's docs page still links a Smithery install that the README dropped in 0.3.5 (8 of 15)." }, "scores": { "a": 85, "b": 64 } }, { "by": 21, "category": "security", "leads": "mcp-toolbox-databases", "name": "Security \u0026 auth", "reasons": { "a": "Source credentials stay in Toolbox, Google sources use IAM, and optional MCP authorisation validates OAuth 2.1 JWTs with required scopes. --allowed-origins and --allowed-hosts default to *, which the CLI docs themselves call unsafe even on localhost, though the default bind is 127.0.0.1 (20). Read-only mode is enforced at the engine, write tools are suppressed, and custom tools can fix SQL and bind parameters to the signed-in user (18). The security docs cover prompt injection and screening through Model Armor (12). OpenTelemetry traces and metrics per call when exported (10). Google's vulnerability intake with a stated response time and GitHub advisories (15). 20 + 18 + 12 + 10 + 15 = 75.", "b": "The server holds one Redis username and password, which Redis ACL rules can scope to keys and command categories and an admin can revoke, or Entra ID credentials for Azure Managed Redis with token renewal. TLS certificate checks are required by default. The README's main example passes the password inside `--url` on the command line, and every caller shares the one user (22 of 30). The server has no read-only mode, no allowlist and no confirmation before `delete`, `json_del`, `xdel` or `xgroup_destroy`. The README gives an ACL example for a read-only user, and no tool runs an arbitrary command, so `FLUSHALL`, `CONFIG` and `EVAL` are out of reach (9 of 20). Stored values, pub/sub messages and docs search results reach the model as they are. No injection guidance was found in the README or the docs pages read (2 of 15). Logging goes to stderr at WARNING by default, so calls are not recorded unless the level is lowered. The connection names itself `redis-py(mcp-server_v0.5.1)`, which Redis shows in `CLIENT LIST` (6 of 15). Redis has a valid security.txt, a HackerOne disclosure programme, and SOC 2 Type 2 and ISO/IEC 27001 on its trust centre. CI runs Bandit and hardened runners, and Dependabot updates are merged within days. The repository has no SECURITY.md and no published advisories (15 of 20)." }, "scores": { "a": 75, "b": 54 } }, { "by": 13, "category": "transparency", "leads": "redis-mcp", "name": "Transparency \u0026 trust", "reasons": { "a": "Apache-2.0 (30). A self-hosted server; data goes only to the configured sources and to a telemetry exporter if one is set. There is no data-handling statement of its own (15). A versioning policy defining breaking changes, UPGRADING.md and a notice for the repository rename; prebuilt tool removals are listed in the changelog (16). Telemetry is off unless --telemetry-otlp or --telemetry-gcp is set, and the docs say so (16). 30 + 15 + 16 + 16 = 77.", "b": "MIT (30). Local software that connects to the configured Redis. `search_redis_documents` sends each question to redis.io, which the README mentions through `MCP_DOCS_SEARCH_URL` without saying what is sent or kept. The Redis Privacy Policy, last updated 29 November 2024, does not address this software, and no telemetry code was found in the 0.5.1 source (18 of 30). No deprecation policy. The README warns that the main branch may contain breaking changes, and the `unsubscribe` change in 0.5.1 came with no notice (4 of 20). No usage statistics on the evidence of the source. The docs search call can be redirected or switched off with an empty `MCP_DOCS_SEARCH_URL`, which the README does not present as an opt-out (13 of 20)." }, "scores": { "a": 64, "b": 77 } } ], "facts": [ { "a": "MCP server", "b": "MCP server", "name": "Kind" }, { "a": "Google", "b": "Redis", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "stdio, Streamable HTTP", "b": "stdio", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "MIT", "name": "Licence" }, { "a": "29", "b": "53", "name": "Tools exposed" }, { "a": "yes", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "io.github.googleapis/mcp-toolbox", "b": "io.github.redis/mcp-redis", "name": "MCP registry" }, { "a": "2026-11-05", "b": "2026-08-04", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "17k stars", "b": "633 stars", "name": "Popularity" } ], "faq": [ { "answer": "MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against Redis MCP's 54.9 (C), and leads in 5 of 7 scored categories. Redis MCP leads on transparency \u0026 trust.", "question": "Which is better for AI agents, MCP Toolbox for Databases or Redis MCP?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do MCP Toolbox for Databases and Redis MCP need an API key?" }, { "answer": "MCP Toolbox for Databases runs on your own machine, with no hosted endpoint listed. Redis MCP runs on your own machine, with no hosted endpoint listed.", "question": "Can an agent call MCP Toolbox for Databases and Redis MCP without installing anything?" }, { "answer": "Yes. MCP Toolbox for Databases is open source (Apache-2.0). Redis MCP is open source (MIT).", "question": "Are MCP Toolbox for Databases and Redis MCP open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 80 against 52", "Schema \u0026 documentation, 85 against 64", "Agent ergonomics, 82 against 39", "Security \u0026 auth, 75 against 54", "Maintenance \u0026 community, 95 against 47" ], "also": [ "Agent-ready, a grade of BB or better" ], "goodFor": "Agents and coding assistants that need one server across Google Cloud data services and common databases, or production agents with curated SQL tools.", "slug": "mcp-toolbox-databases", "watchFor": "--allowed-origins and --allowed-hosts default to *, which the docs call unsafe" }, { "aheadOn": [ "Transparency \u0026 trust, 77 against 64" ], "also": null, "goodFor": "Teams with a Redis database that want an agent to read and write keys, streams, JSON documents and vector indexes on a developer's machine.", "slug": "redis-mcp", "watchFor": "53 tools load at once, with no toolsets and no read-only subset. Pull request #161 for a tool allowlist has been open since 28 July 2026" } ], "history": { "mcp-toolbox-databases": null, "redis-mcp": [ { "causes": [ "evidence", "method", "time" ], "date": "2026-11-04", "delta": -0.9, "from": 55.8, "fromGrade": "C", "to": 54.9, "toGrade": "C" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 55.7, "fromGrade": "C", "to": 55.8, "toGrade": "C" } ] }, "job": { "capability": "db.document", "name": "Document databases" }, "others": [ { "json": "https://www.anchorterminal.com/compare/redis-mcp-vs-supabase-mcp.json", "title": "Redis MCP vs Supabase API + MCP", "url": "https://www.anchorterminal.com/compare/redis-mcp-vs-supabase-mcp" }, { "json": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-mcp-toolbox-databases.json", "title": "ClickHouse MCP Server vs MCP Toolbox for Databases", "url": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-mcp-toolbox-databases" }, { "json": "https://www.anchorterminal.com/compare/dbhub-vs-mcp-toolbox-databases.json", "title": "DBHub vs MCP Toolbox for Databases", "url": "https://www.anchorterminal.com/compare/dbhub-vs-mcp-toolbox-databases" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp.json", "title": "MCP Toolbox for Databases vs Neon MCP Server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb.json", "title": "MCP Toolbox for Databases vs ObsessionDB", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-planetscale-mcp.json", "title": "MCP Toolbox for Databases vs PlanetScale MCP Server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-planetscale-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-mcp-pro.json", "title": "MCP Toolbox for Databases vs Postgres MCP Pro", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-mcp-pro" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived.json", "title": "MCP Toolbox for Databases vs PostgreSQL (archived MCP reference server)", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-snowflake-managed.json", "title": "MCP Toolbox for Databases vs Snowflake-managed MCP server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-snowflake-managed" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-supabase-mcp.json", "title": "MCP Toolbox for Databases vs Supabase API + MCP", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-supabase-mcp" }, { "json": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-redis-mcp.json", "title": "ClickHouse MCP Server vs Redis MCP", "url": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-redis-mcp" }, { "json": "https://www.anchorterminal.com/compare/dbhub-vs-redis-mcp.json", "title": "DBHub vs Redis MCP", "url": "https://www.anchorterminal.com/compare/dbhub-vs-redis-mcp" }, { "json": "https://www.anchorterminal.com/compare/neon-mcp-vs-redis-mcp.json", "title": "Neon MCP Server vs Redis MCP", "url": "https://www.anchorterminal.com/compare/neon-mcp-vs-redis-mcp" }, { "json": "https://www.anchorterminal.com/compare/obsessiondb-vs-redis-mcp.json", "title": "ObsessionDB vs Redis MCP", "url": "https://www.anchorterminal.com/compare/obsessiondb-vs-redis-mcp" }, { "json": "https://www.anchorterminal.com/compare/planetscale-mcp-vs-redis-mcp.json", "title": "PlanetScale MCP Server vs Redis MCP", "url": "https://www.anchorterminal.com/compare/planetscale-mcp-vs-redis-mcp" }, { "json": "https://www.anchorterminal.com/compare/postgres-mcp-pro-vs-redis-mcp.json", "title": "Postgres MCP Pro vs Redis MCP", "url": "https://www.anchorterminal.com/compare/postgres-mcp-pro-vs-redis-mcp" }, { "json": "https://www.anchorterminal.com/compare/postgres-reference-server-archived-vs-redis-mcp.json", "title": "PostgreSQL (archived MCP reference server) vs Redis MCP", "url": "https://www.anchorterminal.com/compare/postgres-reference-server-archived-vs-redis-mcp" }, { "json": "https://www.anchorterminal.com/compare/redis-mcp-vs-snowflake-managed.json", "title": "Redis MCP vs Snowflake-managed MCP server", "url": "https://www.anchorterminal.com/compare/redis-mcp-vs-snowflake-managed" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-mongodb-mcp.json", "title": "MCP Toolbox for Databases vs MongoDB MCP Server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-mongodb-mcp" }, { "json": "https://www.anchorterminal.com/compare/mongodb-mcp-vs-redis-mcp.json", "title": "MongoDB MCP Server vs Redis MCP", "url": "https://www.anchorterminal.com/compare/mongodb-mcp-vs-redis-mcp" } ], "panel": null, "scores": [ { "by": 28, "edge": "mcp-toolbox-databases", "key": "reliability", "mcp-toolbox-databases": 80, "name": "Reliability", "redis-mcp": 52, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 21, "edge": "mcp-toolbox-databases", "key": "schema", "mcp-toolbox-databases": 85, "name": "Schema \u0026 documentation", "redis-mcp": 64, "weight": 13 }, { "by": 43, "edge": "mcp-toolbox-databases", "key": "ergonomics", "mcp-toolbox-databases": 82, "name": "Agent ergonomics", "redis-mcp": 39, "weight": 13 }, { "by": 21, "edge": "mcp-toolbox-databases", "key": "security", "mcp-toolbox-databases": 75, "name": "Security \u0026 auth", "redis-mcp": 54, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "mcp-toolbox-databases": 60, "name": "Payments \u0026 pricing", "redis-mcp": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 48, "edge": "mcp-toolbox-databases", "key": "maintenance", "mcp-toolbox-databases": 95, "name": "Maintenance \u0026 community", "redis-mcp": 47, "weight": 7 }, { "by": 13, "edge": "redis-mcp", "key": "transparency", "mcp-toolbox-databases": 64, "name": "Transparency \u0026 trust", "redis-mcp": 77, "weight": 7 } ], "summary": "MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against Redis MCP's 54.9 (C), and leads in 5 of 7 scored categories. Redis MCP leads on transparency \u0026 trust. Both do document databases.", "tasks": null, "tutorials": [], "verdicts": { "mcp-toolbox-databases": "One self-hosted server reaches 57 source types, with engine-level read-only locks, toolsets, optional OAuth 2.1 and fortnightly semver releases under Apache-2.0. Prebuilt sets list 9 to 41 tools, origin and host checks default to any, and 432 issues and pull requests are open.", "redis-mcp": "Redis's server, under the MIT licence, maps 53 tools onto Redis commands, with typed inputs and a CI workflow that tests five Python versions against a live Redis. It has no read-only mode, tool annotations or changelog file, no release has followed 0.5.1 of 4 August 2026, and PyPI installs failed to start from 28 July to 5 August." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp", "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp.min.md" }, "markdown": "MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against Redis MCP's 54.9 (C), and leads in 5 of 7 scored categories. Redis MCP leads on transparency \u0026 trust. Both do document databases.\n\n- MCP Toolbox for Databases: grade BB, 77.7/100, rank #27 of 1486. Markdown https://www.anchorterminal.com/tools/mcp-toolbox-databases.md · JSON https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases.json\n- Redis MCP: grade C, 54.9/100, rank #888 of 1486. Markdown https://www.anchorterminal.com/tools/redis-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/redis-mcp.json\n- Best database, file and memory tools for AI agents: https://www.anchorterminal.com/best/data/index.md\n- All 97 databases comparisons: https://www.anchorterminal.com/compare/data/index.md\n\n## Which one, for what\n\n### MCP Toolbox for Databases (BB)\n\nGood for: Agents and coding assistants that need one server across Google Cloud data services and common databases, or production agents with curated SQL tools.\n\nAhead on:\n- Reliability, 80 against 52\n- Schema \u0026 documentation, 85 against 64\n- Agent ergonomics, 82 against 39\n- Security \u0026 auth, 75 against 54\n- Maintenance \u0026 community, 95 against 47\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n\nWatch for: --allowed-origins and --allowed-hosts default to *, which the docs call unsafe\n\n### Redis MCP (C)\n\nGood for: Teams with a Redis database that want an agent to read and write keys, streams, JSON documents and vector indexes on a developer's machine.\n\nAhead on:\n- Transparency \u0026 trust, 77 against 64\n\nWatch for: 53 tools load at once, with no toolsets and no read-only subset. Pull request #161 for a tool allowlist has been open since 28 July 2026\n\n\n## Why the edge\n\n### Maintenance \u0026 community: MCP Toolbox for Databases +48\n\n- MCP Toolbox for Databases (95): v1.16.0 on 5 November 2026, one day before this check (30). Eight releases from v1.10.0 (27 August) to v1.16.0 in the 90 days (20). Pull requests merge daily and new tools land in each fortnightly release, though 432 issues and pull requests are open (20). io.github.googleapis/mcp-toolbox is in the official registry at 1.16.0 (15). Release automation, lint, tests and conformance workflows (10). 30 + 20 + 20 + 15 + 10 = 95.\n- Redis MCP (47): 0.5.1 was tagged on 4 August 2026 and published on GitHub and PyPI on 5 August, 91 days before this check, and no release has followed (10). No release in the 90 days from 6 August. The 32 commits since 0.5.1, up to 3 November, are dependency updates and the removal of an unused dev dependency, with the version still 0.5.1 (0). 19 open items per the 9 October check, when Redis staff had answered #156, #163 and #169 within weeks and merged the `mcp` pin the day it was reported, while #174, #137 and #31 had no reply and #45 on streamable HTTP had been open since August 2025 (14 of 25). Listed in the official MCP registry as `io.github.redis/mcp-redis`, a GitHub-verified namespace, with 0.5.1 marked latest per the 9 October check, and the repository's server.json still names it (15). Dependabot updates merged up to 3 November 2026, a lock file and the `mcp` dependency pinned below 2 (8 of 10).\n\n### Agent ergonomics: MCP Toolbox for Databases +43\n\n- MCP Toolbox for Databases (82): The PostgreSQL prebuilt set lists 29 tools (15), split into five toolsets a client can load one at a time, and write tools disappear in read-only mode (plus 8). Results are bounded per tool, some prebuilt tools take limits, and BigQuery tools compact empty schema fields (14). Errors come back as tool errors; paths are sanitised from file errors since 1.15.0 (12). readOnlyHint and destructiveHint are set per tool and switch with the source's read-only state (18). Prebuilt sets need only environment variables, and SDKs exist in Python, JavaScript, Go and Java (15). 23 + 14 + 12 + 18 + 15 = 82.\n- Redis MCP (39): 53 tools load at once, about 15,700 characters of descriptions, with no toolsets, dynamic loading or read-only subset. Pull request #161 for an allowlist has been open since 28 July 2026 (5 of 25). `scan_keys` pages with a cursor, `lrange` and `zrange` take ranges, `xrange` and `xreadgroup` take a count, `read_messages` caps at 100 and the vector tools take `k`. `scan_all_keys`, `hgetall`, `smembers` and `json_get` return everything with no limit (12 of 20). Failures come back as ordinary results, a string starting `Error` or a dictionary with an `error` key, carrying the Redis error text. Input checks return clear messages, such as the refusal of `block_ms=0`. Nothing marks a result as an MCP error and no error list is documented (9 of 20). No tool declares `readOnlyHint`, `destructiveHint` or `idempotentHint`, and pull request #181 adding them was opened on 8 October 2026. No retry guidance was found, and `lpush`, `xadd` and `publish` are not safe to repeat (3 of 20). Most tools need one or two arguments and defaults are stated in the descriptions. The server is a Python package only (10 of 15).\n\n### Reliability: MCP Toolbox for Databases +28\n\n- MCP Toolbox for Databases (80): Scored as local software the owner runs. A Go binary, a container in Artifact Registry and @toolbox-sdk/server on npm, with install paths per platform (20). Tests, lint, conformance and nightly tier-report workflows in the repository; the pass state wasn't read (15). 432 open issues and pull requests on a repository with 16,818 stars and releases every two weeks, triaged with labels, though the backlog is large (15). Semantic versioning with a published policy, release-please CHANGELOG and an UPGRADING.md (15). 1.x since well before this check, v1.16.0 now (15). 20 + 15 + 15 + 15 + 15 = 80.\n- Redis MCP (52): Scored as local software, since the owner runs it over stdio. Official PyPI package `redis-mcp-server` with Python 3.10 to 3.14 stated in the metadata, though the README badge says 3.14 and later (20). The CI workflow runs on pushes, pull requests and nightly, on a five-version Python matrix against a live Redis with pytest and an 80 per cent coverage floor, but its run results couldn't be read on 4 November 2026 (GitHub's pages and API answered 403), so 15 under this run's reading for test CI with an unreadable result. Fresh PyPI installs failed to start from 28 July to 5 August 2026 after `mcp` 2.0.0 removed the module the server imports, fixed in 0.5.1 (issues #163 and #169). Issue #156, where the console command ignores `REDIS_HOST` and `REDIS_PORT`, was open with two unmerged fixes per the 9 October check (13 of 25). Tagged releases with numbers in semantic form, but no changelog file, release notes that are lists of pull request titles, and a patch release (0.5.1) that changed the `unsubscribe` input and added six tools. Issue #137 asking for semver tags had no reply (4 of 15). Version 0.5.1 with the classifier `Development Status :: 4 - Beta` (0).\n\n### Schema \u0026 documentation: MCP Toolbox for Databases +21\n\n- MCP Toolbox for Databases (85): Every tool's parameters are typed in tools.yaml and published as JSON Schema over MCP (25). mcp-toolbox.dev serves llms.txt (10). Prebuilt descriptions vary from one line (\"Use this tool to execute a single SQL statement.\") to detailed, and few say when not to use a tool (12). Typed parameters with required flags; execute_sql takes free SQL (12). Many examples, samples and codelabs; error responses are thinly documented (11). Semver, a dated CHANGELOG and versioned docs (15). 25 + 10 + 12 + 12 + 11 + 15 = 85.\n- Redis MCP (64): Each tool is built from a typed Python signature through FastMCP, so inputs carry JSON Schema, read from the source since we do not run vendor software. `get_vector_from_hash` has no return type, several tools return either a value or an error string, and there are no output schemas (21 of 25). redis.io serves llms.txt and a Markdown form of each docs page, and the README is Markdown (10). Most descriptions are one line plus an argument list. `scan_keys`, `scan_all_keys`, `hybrid_search` and `xreadgroup` say when to use them and what to avoid, and the rest do not (11 of 20). Required fields and defaults are typed, but there are no enums (`distance_metric` and the `info` section are free strings) and the bounds on `block_ms`, `timeout_ms` and `max_messages` are checked in code, not declared in the schema (8 of 15). The README and docs pages give client configuration examples. Tool examples exist only inside a few descriptions, and no list of error responses was found (6 of 15). Tagged versions and GitHub release notes, with no changelog file. The 0.4.0 notes name the docs tool `search_documents` where the source has `search_redis_documents`, and Redis's docs page still links a Smithery install that the README dropped in 0.3.5 (8 of 15).\n\n### Security \u0026 auth: MCP Toolbox for Databases +21\n\n- MCP Toolbox for Databases (75): Source credentials stay in Toolbox, Google sources use IAM, and optional MCP authorisation validates OAuth 2.1 JWTs with required scopes. --allowed-origins and --allowed-hosts default to *, which the CLI docs themselves call unsafe even on localhost, though the default bind is 127.0.0.1 (20). Read-only mode is enforced at the engine, write tools are suppressed, and custom tools can fix SQL and bind parameters to the signed-in user (18). The security docs cover prompt injection and screening through Model Armor (12). OpenTelemetry traces and metrics per call when exported (10). Google's vulnerability intake with a stated response time and GitHub advisories (15). 20 + 18 + 12 + 10 + 15 = 75.\n- Redis MCP (54): The server holds one Redis username and password, which Redis ACL rules can scope to keys and command categories and an admin can revoke, or Entra ID credentials for Azure Managed Redis with token renewal. TLS certificate checks are required by default. The README's main example passes the password inside `--url` on the command line, and every caller shares the one user (22 of 30). The server has no read-only mode, no allowlist and no confirmation before `delete`, `json_del`, `xdel` or `xgroup_destroy`. The README gives an ACL example for a read-only user, and no tool runs an arbitrary command, so `FLUSHALL`, `CONFIG` and `EVAL` are out of reach (9 of 20). Stored values, pub/sub messages and docs search results reach the model as they are. No injection guidance was found in the README or the docs pages read (2 of 15). Logging goes to stderr at WARNING by default, so calls are not recorded unless the level is lowered. The connection names itself `redis-py(mcp-server_v0.5.1)`, which Redis shows in `CLIENT LIST` (6 of 15). Redis has a valid security.txt, a HackerOne disclosure programme, and SOC 2 Type 2 and ISO/IEC 27001 on its trust centre. CI runs Bandit and hardened runners, and Dependabot updates are merged within days. The repository has no SECURITY.md and no published advisories (15 of 20).\n\n### Transparency \u0026 trust: Redis MCP +13\n\n- MCP Toolbox for Databases (64): Apache-2.0 (30). A self-hosted server; data goes only to the configured sources and to a telemetry exporter if one is set. There is no data-handling statement of its own (15). A versioning policy defining breaking changes, UPGRADING.md and a notice for the repository rename; prebuilt tool removals are listed in the changelog (16). Telemetry is off unless --telemetry-otlp or --telemetry-gcp is set, and the docs say so (16). 30 + 15 + 16 + 16 = 77.\n- Redis MCP (77): MIT (30). Local software that connects to the configured Redis. `search_redis_documents` sends each question to redis.io, which the README mentions through `MCP_DOCS_SEARCH_URL` without saying what is sent or kept. The Redis Privacy Policy, last updated 29 November 2024, does not address this software, and no telemetry code was found in the 0.5.1 source (18 of 30). No deprecation policy. The README warns that the main branch may contain breaking changes, and the `unsubscribe` change in 0.5.1 came with no notice (4 of 20). No usage statistics on the evidence of the source. The docs search call can be redirected or switched off with an empty `MCP_DOCS_SEARCH_URL`, which the README does not present as an opt-out (13 of 20).\n\n## Score by category\n\n| Category | Weight | MCP Toolbox for Databases | Redis MCP | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 80 | 52 | MCP Toolbox for Databases +28 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 85 | 64 | MCP Toolbox for Databases +21 |\n| Agent ergonomics | 13% (16.2 this run) | 82 | 39 | MCP Toolbox for Databases +43 |\n| Security \u0026 auth | 14% (17.5 this run) | 75 | 54 | MCP Toolbox for Databases +21 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 95 | 47 | MCP Toolbox for Databases +48 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 64 | 77 | Redis MCP +13 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **77.7 · BB** | **54.9 · C** | |\n\n## Facts side by side\n\n| Fact | MCP Toolbox for Databases | Redis MCP |\n| --- | --- | --- |\n| Kind | MCP server | MCP server |\n| Vendor | Google | Redis |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | stdio, Streamable HTTP | stdio |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | MIT |\n| Tools exposed | 29 | 53 |\n| Read-only variant documented | yes | yes |\n| llms.txt | yes | yes |\n| MCP registry | `io.github.googleapis/mcp-toolbox` | `io.github.redis/mcp-redis` |\n| Last release | 2026-11-05 | 2026-08-04 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Popularity | 17k stars | 633 stars |\n\n## How the scores have moved\n\n### MCP Toolbox for Databases\n\nNo score change since it was listed.\n\n### Redis MCP\n\n- -0.9 on 4 November 2026: new evidence, checklist, time\n- +0.1 on 27 October 2026: checklist\n\n## Verdicts\n\n**MCP Toolbox for Databases.** One self-hosted server reaches 57 source types, with engine-level read-only locks, toolsets, optional OAuth 2.1 and fortnightly semver releases under Apache-2.0. Prebuilt sets list 9 to 41 tools, origin and host checks default to any, and 432 issues and pull requests are open.\n\n**Redis MCP.** Redis's server, under the MIT licence, maps 53 tools onto Redis commands, with typed inputs and a CI workflow that tests five Python versions against a live Redis. It has no read-only mode, tool annotations or changelog file, no release has followed 0.5.1 of 4 August 2026, and PyPI installs failed to start from 28 July to 5 August.\n\n## Before you call either\n\n### MCP Toolbox for Databases\n\n1. Load one toolset (such as data) rather than the whole prebuilt set to keep context small\n2. Turn on the source's read-only mode for exploration; write tools then disappear from tools/list\n3. Start the HTTP server with --allowed-hosts and --allowed-origins set; the defaults accept any\n4. Prefer custom tools with fixed SQL over execute_sql for production agents\n\n### Redis MCP\n\n1. Pass the connection with `--url` or explicit flags. The `redis-mcp-server` command overrides `REDIS_HOST`, `REDIS_PORT`, `REDIS_DB`, `REDIS_SSL` and `REDIS_CLUSTER_MODE` with its own defaults when flags are absent\n2. Use `scan_keys` with the returned cursor until it is 0. `scan_all_keys`, `hgetall`, `smembers` and `json_get` return everything they match with no limit\n3. Read failures from the text. Tools return strings such as `Error ...` or an `error` key in place of an MCP error result\n4. Keep the `subscription_id` from `subscribe` or `psubscribe` and pass it to `read_messages` and `unsubscribe`. Idle subscriptions close after 300 seconds\n5. Connect as a Redis ACL user limited to the keys and command categories needed, since the server has no read-only switch and `delete` runs without confirmation\n\n## Questions\n\n### Which is better for AI agents, MCP Toolbox for Databases or Redis MCP?\n\nMCP Toolbox for Databases scores 77.7 (BB) on agent readiness against Redis MCP's 54.9 (C), and leads in 5 of 7 scored categories. Redis MCP leads on transparency \u0026 trust.\n\n### Do MCP Toolbox for Databases and Redis MCP need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call MCP Toolbox for Databases and Redis MCP without installing anything?\n\nMCP Toolbox for Databases runs on your own machine, with no hosted endpoint listed. Redis MCP runs on your own machine, with no hosted endpoint listed.\n\n### Are MCP Toolbox for Databases and Redis MCP open source?\n\nYes. MCP Toolbox for Databases is open source (Apache-2.0). Redis MCP is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp.json, and with the fewest tokens: https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"mcp-toolbox-databases\", \"b\": \"redis-mcp\"}`. From a terminal: `anchor compare mcp-toolbox-databases redis-mcp`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases.json and https://www.anchorterminal.com/api/v1/tools/redis-mcp.json\n\n## Other comparisons with MCP Toolbox for Databases or Redis MCP\n\n- [Redis MCP vs Supabase API + MCP](https://www.anchorterminal.com/compare/redis-mcp-vs-supabase-mcp.md)\n- [ClickHouse MCP Server vs MCP Toolbox for Databases](https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-mcp-toolbox-databases.md)\n- [DBHub vs MCP Toolbox for Databases](https://www.anchorterminal.com/compare/dbhub-vs-mcp-toolbox-databases.md)\n- [MCP Toolbox for Databases vs Neon MCP Server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp.md)\n- [MCP Toolbox for Databases vs ObsessionDB](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb.md)\n- [MCP Toolbox for Databases vs PlanetScale MCP Server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-planetscale-mcp.md)\n- [MCP Toolbox for Databases vs Postgres MCP Pro](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-mcp-pro.md)\n- [MCP Toolbox for Databases vs PostgreSQL (archived MCP reference server)](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived.md)\n- [MCP Toolbox for Databases vs Snowflake-managed MCP server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-snowflake-managed.md)\n- [MCP Toolbox for Databases vs Supabase API + MCP](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-supabase-mcp.md)\n- [ClickHouse MCP Server vs Redis MCP](https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-redis-mcp.md)\n- [DBHub vs Redis MCP](https://www.anchorterminal.com/compare/dbhub-vs-redis-mcp.md)\n- [Neon MCP Server vs Redis MCP](https://www.anchorterminal.com/compare/neon-mcp-vs-redis-mcp.md)\n- [ObsessionDB vs Redis MCP](https://www.anchorterminal.com/compare/obsessiondb-vs-redis-mcp.md)\n- [PlanetScale MCP Server vs Redis MCP](https://www.anchorterminal.com/compare/planetscale-mcp-vs-redis-mcp.md)\n- [Postgres MCP Pro vs Redis MCP](https://www.anchorterminal.com/compare/postgres-mcp-pro-vs-redis-mcp.md)\n- [PostgreSQL (archived MCP reference server) vs Redis MCP](https://www.anchorterminal.com/compare/postgres-reference-server-archived-vs-redis-mcp.md)\n- [Redis MCP vs Snowflake-managed MCP server](https://www.anchorterminal.com/compare/redis-mcp-vs-snowflake-managed.md)\n- [MCP Toolbox for Databases vs MongoDB MCP Server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-mongodb-mcp.md)\n- [MongoDB MCP Server vs Redis MCP](https://www.anchorterminal.com/compare/mongodb-mcp-vs-redis-mcp.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "MCP Toolbox for Databases vs Redis MCP", "url": "" } ], "description": "MCP Toolbox for Databases scores 77.7 (BB) to Redis MCP's 54.9 (C) for document databases. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "MCP Toolbox for Databases BB 77.7", "Redis MCP C 54.9", "scores" ], "h1": "MCP Toolbox for Databases vs Redis MCP", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/mcp-toolbox-databases-vs-redis-mcp", "published": "2026-10-01", "section": "tools", "title": "MCP Toolbox for Databases vs Redis MCP for AI agents (2026)", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp" }, "tokens": { "markdown": 5150, "slim": 3180 }, "version": 1 }