{ "data": { "similar": [ { "grade": "A", "json": "https://www.anchorterminal.com/tools/mongodb-mcp.json", "name": "MongoDB MCP Server", "score": 80.2, "shared": [ "db.document", "db.admin" ], "slug": "mongodb-mcp" }, { "grade": "BB", "json": "https://www.anchorterminal.com/tools/supabase-mcp.json", "name": "Supabase API + MCP", "score": 74, "shared": [ "db.sql", "db.admin" ], "slug": "supabase-mcp" }, { "grade": "BB", "json": "https://www.anchorterminal.com/tools/neon-mcp.json", "name": "Neon MCP Server", "score": 72.5, "shared": [ "db.sql", "db.admin" ], "slug": "neon-mcp" }, { "grade": "BB", "json": "https://www.anchorterminal.com/tools/dbhub.json", "name": "DBHub", "score": 70.4, "shared": [ "db.sql", "db.admin" ], "slug": "dbhub" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/planetscale-mcp.json", "name": "PlanetScale MCP Server", "score": 69.6, "shared": [ "db.sql", "db.admin" ], "slug": "planetscale-mcp" }, { "grade": "F", "json": "https://www.anchorterminal.com/tools/postgres-mcp-pro.json", "name": "Postgres MCP Pro", "score": 37, "shared": [ "db.sql", "db.admin" ], "slug": "postgres-mcp-pro" } ], "tool": { "slug": "mcp-toolbox-databases", "name": "MCP Toolbox for Databases", "vendor": "Google", "vendorUrl": "https://mcp-toolbox.dev", "kind": "mcp", "category": "data", "summary": "MCP Toolbox for Databases is Google's open-source MCP server for more than 30 data sources, among them BigQuery, AlloyDB, Cloud SQL, Spanner and PostgreSQL. It runs as a binary or container with prebuilt or custom tools from tools.yaml.", "url": "https://www.anchorterminal.com/tools/mcp-toolbox-databases", "markdownUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases.json", "dns": "mcp-toolbox-databases.grade.anchorterminal.com", "repo": "https://github.com/googleapis/mcp-toolbox", "license": "Apache-2.0", "transports": [ "stdio", "streamable-http" ], "packages": [ { "registry": "npm", "name": "@toolbox-sdk/server" }, { "registry": "pypi", "name": "toolbox-core" }, { "registry": "npm", "name": "@toolbox-sdk/core" } ], "auth": "mixed", "authNotes": "Toolbox holds the source credentials (database users and passwords from environment variables, or Google Application Default Credentials and IAM for Google sources). Clients need nothing by default. Optional MCP authorisation makes Toolbox an OAuth 2.1 resource server that validates JWT bearer tokens against a configured authorisation server and required scopes, and publishes protected-resource metadata. authServices can also bind tool parameters to a signed-in user's claims. The HTTP server listens on 127.0.0.1 by default, but --allowed-origins and --allowed-hosts default to *.", "pricing": "free", "pricingNotes": "Free and Apache-2.0, run on your own machine or your own Cloud Run service. Google Cloud sources bill for their own usage (BigQuery queries, Cloud SQL instances); Toolbox itself has no price.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "Self-hosted MCP server with nothing to buy (checked 2026-11-06).", "endpoints": [] }, "toolCount": 29, "popularity": { "githubStars": 16818, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://mcp-toolbox.dev/", "llmsTxt": "https://mcp-toolbox.dev/llms.txt", "registryName": "io.github.googleapis/mcp-toolbox", "capabilities": [ "db.sql", "db.document", "db.admin" ], "tags": [ "self-hosted", "free", "open-source", "mcp", "stdio", "http", "mcp-registry", "llms-txt", "google-cloud", "bigquery", "postgres", "toolsets", "read-only-mode", "opentelemetry", "go" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 77.7, "grade": "BB", "agentReady": true, "rank": 27, "ranked": true, "rankOf": 1486, "categoryRank": 2, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 82, "maintenance": 95, "payments": 60, "reliability": 80, "schema": 85, "security": 75, "transparency": 64 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 80, "points": 16, "reason": "Scored as local software the owner runs. A Go binary, a container in Artifact Registry and @toolbox-sdk/server on npm, with install paths per platform (20). Tests, lint, conformance and nightly tier-report workflows in the repository; the pass state wasn't read (15). 432 open issues and pull requests on a repository with 16,818 stars and releases every two weeks, triaged with labels, though the backlog is large (15). Semantic versioning with a published policy, release-please CHANGELOG and an UPGRADING.md (15). 1.x since well before this check, v1.16.0 now (15). 20 + 15 + 15 + 15 + 15 = 80.", "checked": "2026-11-06" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 85, "points": 13.81, "reason": "Every tool's parameters are typed in tools.yaml and published as JSON Schema over MCP (25). mcp-toolbox.dev serves llms.txt (10). Prebuilt descriptions vary from one line (\"Use this tool to execute a single SQL statement.\") to detailed, and few say when not to use a tool (12). Typed parameters with required flags; execute_sql takes free SQL (12). Many examples, samples and codelabs; error responses are thinly documented (11). Semver, a dated CHANGELOG and versioned docs (15). 25 + 10 + 12 + 12 + 11 + 15 = 85.", "checked": "2026-11-06" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 82, "points": 13.33, "reason": "The PostgreSQL prebuilt set lists 29 tools (15), split into five toolsets a client can load one at a time, and write tools disappear in read-only mode (plus 8). Results are bounded per tool, some prebuilt tools take limits, and BigQuery tools compact empty schema fields (14). Errors come back as tool errors; paths are sanitised from file errors since 1.15.0 (12). readOnlyHint and destructiveHint are set per tool and switch with the source's read-only state (18). Prebuilt sets need only environment variables, and SDKs exist in Python, JavaScript, Go and Java (15). 23 + 14 + 12 + 18 + 15 = 82.", "checked": "2026-11-06" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 75, "points": 13.13, "reason": "Source credentials stay in Toolbox, Google sources use IAM, and optional MCP authorisation validates OAuth 2.1 JWTs with required scopes. --allowed-origins and --allowed-hosts default to *, which the CLI docs themselves call unsafe even on localhost, though the default bind is 127.0.0.1 (20). Read-only mode is enforced at the engine, write tools are suppressed, and custom tools can fix SQL and bind parameters to the signed-in user (18). The security docs cover prompt injection and screening through Model Armor (12). OpenTelemetry traces and metrics per call when exported (10). Google's vulnerability intake with a stated response time and GitHub advisories (15). 20 + 18 + 12 + 10 + 15 = 75.", "checked": "2026-11-06" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 60, "points": 7.5, "reason": "Free, self-hosted, nothing to buy, so 20 + 20 + 20. No payment protocol (0).", "checked": "2026-11-06" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 95, "points": 8.31, "reason": "v1.16.0 on 5 November 2026, one day before this check (30). Eight releases from v1.10.0 (27 August) to v1.16.0 in the 90 days (20). Pull requests merge daily and new tools land in each fortnightly release, though 432 issues and pull requests are open (20). io.github.googleapis/mcp-toolbox is in the official registry at 1.16.0 (15). Release automation, lint, tests and conformance workflows (10). 30 + 20 + 20 + 15 + 10 = 95.", "checked": "2026-11-06" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 64, "points": 5.6, "note": "editorial 77, provenance 50", "reason": "Apache-2.0 (30). A self-hosted server; data goes only to the configured sources and to a telemetry exporter if one is set. There is no data-handling statement of its own (15). A versioning policy defining breaking changes, UPGRADING.md and a notice for the repository rename; prebuilt tool removals are listed in the changelog (16). Telemetry is off unless --telemetry-otlp or --telemetry-gcp is set, and the docs say so (16). 30 + 15 + 16 + 16 = 77.", "checked": "2026-11-06" } ], "assessment": { "date": "2026-11-06", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "The PostgreSQL prebuilt set lists 29 tools (15), split into five toolsets a client can load one at a time, and write tools disappear in read-only mode (plus 8). Results are bounded per tool, some prebuilt tools take limits, and BigQuery tools compact empty schema fields (14). Errors come back as tool errors; paths are sanitised from file errors since 1.15.0 (12). readOnlyHint and destructiveHint are set per tool and switch with the source's read-only state (18). Prebuilt sets need only environment variables, and SDKs exist in Python, JavaScript, Go and Java (15). 23 + 14 + 12 + 18 + 15 = 82.", "maintenance": "v1.16.0 on 5 November 2026, one day before this check (30). Eight releases from v1.10.0 (27 August) to v1.16.0 in the 90 days (20). Pull requests merge daily and new tools land in each fortnightly release, though 432 issues and pull requests are open (20). io.github.googleapis/mcp-toolbox is in the official registry at 1.16.0 (15). Release automation, lint, tests and conformance workflows (10). 30 + 20 + 20 + 15 + 10 = 95.", "payments": "Free, self-hosted, nothing to buy, so 20 + 20 + 20. No payment protocol (0).", "reliability": "Scored as local software the owner runs. A Go binary, a container in Artifact Registry and @toolbox-sdk/server on npm, with install paths per platform (20). Tests, lint, conformance and nightly tier-report workflows in the repository; the pass state wasn't read (15). 432 open issues and pull requests on a repository with 16,818 stars and releases every two weeks, triaged with labels, though the backlog is large (15). Semantic versioning with a published policy, release-please CHANGELOG and an UPGRADING.md (15). 1.x since well before this check, v1.16.0 now (15). 20 + 15 + 15 + 15 + 15 = 80.", "schema": "Every tool's parameters are typed in tools.yaml and published as JSON Schema over MCP (25). mcp-toolbox.dev serves llms.txt (10). Prebuilt descriptions vary from one line (\"Use this tool to execute a single SQL statement.\") to detailed, and few say when not to use a tool (12). Typed parameters with required flags; execute_sql takes free SQL (12). Many examples, samples and codelabs; error responses are thinly documented (11). Semver, a dated CHANGELOG and versioned docs (15). 25 + 10 + 12 + 12 + 11 + 15 = 85.", "security": "Source credentials stay in Toolbox, Google sources use IAM, and optional MCP authorisation validates OAuth 2.1 JWTs with required scopes. --allowed-origins and --allowed-hosts default to *, which the CLI docs themselves call unsafe even on localhost, though the default bind is 127.0.0.1 (20). Read-only mode is enforced at the engine, write tools are suppressed, and custom tools can fix SQL and bind parameters to the signed-in user (18). The security docs cover prompt injection and screening through Model Armor (12). OpenTelemetry traces and metrics per call when exported (10). Google's vulnerability intake with a stated response time and GitHub advisories (15). 20 + 18 + 12 + 10 + 15 = 75.", "transparency": "Apache-2.0 (30). A self-hosted server; data goes only to the configured sources and to a telemetry exporter if one is set. There is no data-handling statement of its own (15). A versioning policy defining breaking changes, UPGRADING.md and a notice for the repository rename; prebuilt tool removals are listed in the changelog (16). Telemetry is off unless --telemetry-otlp or --telemetry-gcp is set, and the docs say so (16). 30 + 15 + 16 + 16 = 77." }, "sources": [ { "what": "repository and README", "url": "https://github.com/googleapis/mcp-toolbox", "seen": "2026-11-06" }, { "what": "CHANGELOG", "url": "https://github.com/googleapis/mcp-toolbox/blob/main/CHANGELOG.md", "seen": "2026-11-06" }, { "what": "SECURITY.md", "url": "https://github.com/googleapis/mcp-toolbox/blob/main/SECURITY.md", "seen": "2026-11-06" }, { "what": "read-only security docs", "url": "https://github.com/googleapis/mcp-toolbox/blob/main/docs/en/documentation/configuration/security/read-only.md", "seen": "2026-11-06" }, { "what": "CLI reference", "url": "https://github.com/googleapis/mcp-toolbox/blob/main/docs/en/reference/cli.md", "seen": "2026-11-06" }, { "what": "MCP authorisation docs", "url": "https://github.com/googleapis/mcp-toolbox/blob/main/docs/en/documentation/configuration/toolbox_mcp_auth.md", "seen": "2026-11-06" }, { "what": "docs site llms.txt", "url": "https://mcp-toolbox.dev/llms.txt", "seen": "2026-11-06" }, { "what": "toolbox-core release feed", "url": "https://pypi.org/rss/project/toolbox-core/releases.xml", "seen": "2026-11-06" }, { "what": "MCP registry entries", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=googleapis", "seen": "2026-11-06" } ], "openQuestions": [ "unchecked: whether the tests workflow passes on the default branch.", "Our reader fetched https://pypi.org/pypi/toolbox-core/json once on 6 November, a path PyPI's robots.txt disallows. The version it gave (1.4.0) was re-read from the allowed release feed https://pypi.org/rss/project/toolbox-core/releases.xml, which is the source used.", "unchecked: GA status per source; the minor-version policy mentions beta functions, and per-source stability labels weren't read." ] }, "negative": 0, "verdict": "One self-hosted server reaches 57 source types, with engine-level read-only locks, toolsets, optional OAuth 2.1 and fortnightly semver releases under Apache-2.0. Prebuilt sets list 9 to 41 tools, origin and host checks default to any, and 432 issues and pull requests are open.", "bestFor": "Agents and coding assistants that need one server across Google Cloud data services and common databases, or production agents with curated SQL tools.", "strengths": [ "57 source types and 39 prebuilt configurations, from BigQuery and AlloyDB to PostgreSQL, MySQL, MongoDB and Snowflake", "Read-only mode locks the database session, hides write tools and sets readOnlyHint", "Custom tools in tools.yaml fix SQL and bind parameters to the signed-in user's claims", "Optional MCP authorisation as an OAuth 2.1 resource server with protected-resource metadata", "v1.16.0 on 5 November 2026 after eight releases in 90 days, in the MCP registry" ], "weaknesses": [ "--allowed-origins and --allowed-hosts default to *, which the docs call unsafe", "Prebuilt PostgreSQL set lists 29 tools and AlloyDB 41 unless a toolset is chosen", "432 open issues and pull requests", "Some prebuilt descriptions are a single line with no guidance on when not to use the tool" ], "agentNotes": [ "Load one toolset (such as data) rather than the whole prebuilt set to keep context small", "Turn on the source's read-only mode for exploration; write tools then disappear from tools/list", "Start the HTTP server with --allowed-hosts and --allowed-origins set; the defaults accept any", "Prefer custom tools with fixed SQL over execute_sql for production agents" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 77.7 } ], "editorialScores": { "ergonomics": 82, "maintenance": 95, "payments": 60, "reliability": 80, "schema": 85, "security": 75, "transparency": 77 }, "provenanceScore": 50, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-06", "grade": "BB", "kind": "listed", "method": "0.7", "score": 77.7 } ] }, "connect": { "install": "npx @toolbox-sdk/server --prebuilt postgres --stdio", "config": { "mcpServers": { "postgres": { "args": [ "-y", "@toolbox-sdk/server", "--prebuilt", "postgres", "--stdio" ], "command": "npx", "env": { "POSTGRES_DATABASE": "mydb", "POSTGRES_HOST": "localhost", "POSTGRES_PASSWORD": "password", "POSTGRES_USER": "user" } } } } }, "letme": { "capability": "https://letme.dev/db.sql", "tool": "https://letme.dev/mcp-toolbox-databases" }, "notable": [ "Renamed from Gen AI Toolbox for Databases; the repository moved from googleapis/genai-toolbox to googleapis/mcp-toolbox and the old registry entry io.github.googleapis/genai-toolbox stops at 0.31.0 (README; https://registry.modelcontextprotocol.io/v0/servers?search=googleapis)", "57 source types and 39 prebuilt configurations; the PostgreSQL prebuilt set has 29 tools in five toolsets (data, monitor, health, view-config and replication), BigQuery 9, Cloud Storage 14 and AlloyDB for PostgreSQL 41 (internal/prebuiltconfigs/tools)", "Read-only protection in three layers, engine-level session locks, suppression of write tools and readOnlyHint annotations set from the source's read-only state (docs/en/documentation/configuration/security/read-only.md)", "v1.16.0 on 5 November 2026, with eight minor and patch releases since 27 August under release-please and a semver policy covering the CLI, manifests and prebuilt toolsets (CHANGELOG.md)", "Security reports go to Google's g.co/vulnz with a five-working-day response and GitHub Security Advisories for disclosure (SECURITY.md)", "SDKs in Python (toolbox-core 1.4.0), JavaScript (@toolbox-sdk/core 1.2.0), Go and Java, with integrations for ADK, LangChain and LlamaIndex (README)" ], "area": "developer", "details": [ { "label": "Surface listed", "value": "The Toolbox server (binary, container and @toolbox-sdk/server), read from a shallow clone of googleapis/mcp-toolbox (README, CHANGELOG, SECURITY.md, prebuilt configs, docs and source), mcp-toolbox.dev and the MCP registry on 6 November 2026. Nothing was installed or run" }, { "label": "Two ways to use it", "value": "Prebuilt generic tools (list_tables, execute_sql and the like) for coding agents, or custom tools with fixed SQL, parameters and authorised parameters for production agents" }, { "label": "Sources", "value": "Google Cloud (BigQuery, AlloyDB, Cloud SQL, Spanner, Bigtable, Firestore, Dataplex, Looker, Cloud Storage and more) and others such as PostgreSQL, MySQL, SQL Server, Oracle, MongoDB, Neo4j, Redis, Snowflake, ClickHouse, Elasticsearch and SQLite" }, { "label": "Observability", "value": "OpenTelemetry traces and metrics, exported only when --telemetry-otlp or --telemetry-gcp is set" }, { "label": "Security options", "value": "MCP authorisation as an OAuth 2.1 resource server, authorised parameters bound to user claims, read-only mode, Model Armor screening, --allowed-hosts and --allowed-origins" } ], "provenance": { "legalEntity": "Google LLC", "domain": "mcp-toolbox.dev", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/googleapis/mcp-toolbox/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "Source files carry \"Copyright 2025 Google LLC\" under Apache-2.0, and the repository is in the googleapis organisation.", "SECURITY.md routes reports to g.co/vulnz with a five-working-day response and discloses through GitHub Security Advisories.", "mcp-toolbox.dev/robots.txt allows all crawlers and serves llms.txt. Its registration date wasn't found through RDAP.", "No terms or privacy policy specific to Toolbox, which sends nothing to Google unless GCP telemetry export or a Google source is configured." ], "score": 50, "checks": [ { "check": "Legal entity named", "value": "Google LLC", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "mcp-toolbox.dev, no registry record we could read", "points": 0, "max": 15, "state": "no" }, { "check": "Endpoint on the vendor's domain", "value": "mcp-toolbox.dev", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Privacy policy", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "5 named with their role, none with a public profile", "points": 7, "max": 10, "state": "part" }, { "check": "Support route", "value": "help pages, a community", "points": 5, "max": 5, "state": "ok" } ] }, "humans": { "slug": "mcp-toolbox-databases", "checked": "2026-11-06", "company": "Google Cloud", "people": [ { "name": "Larry Page", "role": "Co-founder, Google, left executive roles in December 2019 and sits on Alphabet's board", "founder": true, "bio": "Larry Page co-founded Google with Sergey Brin, whom he met at Stanford University in 1995, and co-created the PageRank search ranking algorithm. He was Google's chief executive from 1997 to 2001 and from 2011 to 2015, then led its parent Alphabet until December 2019. He remains on Alphabet's board.", "bioSources": [ "https://about.google/intl/ALL_en/our-story/", "https://en.wikipedia.org/wiki/Larry_Page" ], "page": "/people/larry-page/" }, { "name": "Sergey Brin", "role": "Co-founder, Google, left executive roles in 2019 and sits on Alphabet's board", "founder": true, "bio": "Sergey Brin co-founded Google with Larry Page, whom he met at Stanford University in 1995, and together they built the search engine that became Google. He was president of Alphabet, Google's parent company, until stepping down in 2019, and remains an Alphabet co-founder and board member.", "bioSources": [ "https://about.google/intl/ALL_en/our-story/", "https://en.wikipedia.org/wiki/Sergey_Brin" ], "page": "/people/sergey-brin/" }, { "name": "Sundar Pichai", "role": "CEO, Google and Alphabet", "bio": "Sundar Pichai has been chief executive of Google since 2015 and of its parent Alphabet since 2019. He joined Google in 2004 and led product management for its client software, including Chrome and ChromeOS, then took on Drive, Gmail, Maps and Android before being named product chief.", "bioSources": [ "https://en.wikipedia.org/wiki/Sundar_Pichai", "https://about.google/company-info/" ], "page": "/people/sundar-pichai/" }, { "name": "Thomas Kurian", "role": "CEO, Google Cloud", "bio": "Thomas Kurian has led Google Cloud as chief executive since 2019, after joining Google's cloud organisation in November 2018. Before that he spent more than twenty years at Oracle, rising to president of product development, in charge of Oracle Database, Fusion Middleware and its business applications.", "bioSources": [ "https://en.wikipedia.org/wiki/Thomas_Kurian", "https://en.wikipedia.org/wiki/Google_Cloud" ], "page": "/people/thomas-kurian/" }, { "name": "Demis Hassabis", "role": "Co-founder and CEO, Google DeepMind", "bio": "Demis Hassabis co-founded DeepMind, which started in 2010, and leads Google DeepMind, formed by bringing Google Brain and DeepMind together. He is also chief executive and co-founder of Isomorphic Labs, and shared the 2024 Nobel Prize in Chemistry with John Jumper for AI research on protein structure prediction.", "bioSources": [ "https://deepmind.google/about/", "https://en.wikipedia.org/wiki/Demis_Hassabis" ], "page": "/people/demis-hassabis/" } ], "peopleNote": "MCP Toolbox for Databases is published by Google in the googleapis GitHub organisation (source files carry Copyright Google LLC). The company-level people are copied from data/humans/google-secret-manager.json (checked 28 October 2026) with their sources. No product lead is named in the repository or on mcp-toolbox.dev, so none is added. Google is part of Alphabet, so no investors are listed.", "companySocial": { "linkedin": "https://www.linkedin.com/company/google", "x": "https://x.com/Google", "github": "https://github.com/googleapis" }, "support": { "urls": [ "https://mcp-toolbox.dev/" ], "community": [ { "label": "MCP Toolbox Discord", "url": "https://discord.gg/Dmm69peqjh", "kind": "discord" }, { "label": "mcp-toolbox issues", "url": "https://github.com/googleapis/mcp-toolbox/issues", "kind": "github" } ], "contactUrls": [ "https://g.co/vulnz" ] }, "sources": [ "https://about.google/intl/ALL_en/our-story/", "https://cloud.google.com/contact", "https://cloud.google.com/support-hub", "https://github.com/googleapis/mcp-toolbox", "https://mcp-toolbox.dev/", "https://www.linkedin.com/company/google", "https://x.com/Google" ], "ownership": { "status": "subsidiary", "parent": "Alphabet Inc.", "checked": "2026-11-06", "sources": [ "https://en.wikipedia.org/wiki/Google", "https://about.google/company-info/", "https://en.wikipedia.org/wiki/Google_Cloud" ] } }, "pageJsonUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.json", "live": { "slug": "mcp-toolbox-databases", "versions": [ { "registry": "github", "name": "googleapis/mcp-toolbox", "version": "v1.16.0", "released": "2026-11-05", "seenAt": "2026-11-06T23:43:21.921228545Z" }, { "registry": "mcp-registry", "name": "io.github.googleapis/mcp-toolbox", "version": "1.16.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "@toolbox-sdk/core", "version": "1.2.0", "seenAt": "2026-11-06T23:43:21.731206096Z" }, { "registry": "npm", "name": "@toolbox-sdk/server", "version": "1.16.0", "seenAt": "2026-11-06T23:43:19.586944944Z" }, { "registry": "pypi", "name": "toolbox-core", "version": "1.4.0", "released": "2026-09-01", "seenAt": "2026-11-06T23:43:20.432816729Z" } ], "githubStars": 16819, "npmWeekly": 37825, "pypiWeekly": 81244, "securityTxt": { "url": "https://mcp-toolbox.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:31.533747335Z" }, "llmsTxt": { "url": "https://mcp-toolbox.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:57.733544718Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/googleapis/mcp-toolbox/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:21:14.273833915Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a1a131225627" } ], "updatedAt": "2026-11-07T18:16:28.95801333Z" } }, "verify": { "accepts": "a page on mcp-toolbox.dev or one of its subdomains, or the README at the root of github.com/googleapis/mcp-toolbox", "badgeUrl": "https://www.anchorterminal.com/badges/mcp-toolbox-databases.svg", "body": { "slug": "mcp-toolbox-databases", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/mcp-toolbox-databases\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/mcp-toolbox-databases.svg\" alt=\"MCP Toolbox for Databases on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![MCP Toolbox for Databases on Anchor Terminal](https://www.anchorterminal.com/badges/mcp-toolbox-databases.svg)](https://www.anchorterminal.com/tools/mcp-toolbox-databases)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/mcp-toolbox-databases\"\u003eMCP Toolbox for Databases on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/mcp-toolbox-databases", "json": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.md", "mcp": "https://www.anchorterminal.com/mcp", "pricing": "https://www.anchorterminal.com/tools/mcp-toolbox-databases#pricing", "reviews": "https://www.anchorterminal.com/tools/mcp-toolbox-databases#reviews", "slim": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.min.md" }, "markdown": "## Overview\n\n**Grade BB · 77.7/100 · rank #27 of 1486 · #2 in Databases \u0026 files · agent-ready · confidence medium**\n\n\n## Assessment\n\nOne self-hosted server reaches 57 source types, with engine-level read-only locks, toolsets, optional OAuth 2.1 and fortnightly semver releases under Apache-2.0. Prebuilt sets list 9 to 41 tools, origin and host checks default to any, and 432 issues and pull requests are open.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | Google (https://mcp-toolbox.dev) |\n| Kind | MCP server |\n| Category | Databases \u0026 files (https://www.anchorterminal.com/categories/data) |\n| Transport | stdio, Streamable HTTP |\n| Auth | OAuth or key · Toolbox holds the source credentials (database users and passwords from environment variables, or Google Application Default Credentials and IAM for Google sources). Clients need nothing by default. Optional MCP authorisation makes Toolbox an OAuth 2.1 resource server that validates JWT bearer tokens against a configured authorisation server and required scopes, and publishes protected-resource metadata. authServices can also bind tool parameters to a signed-in user's claims. The HTTP server listens on 127.0.0.1 by default, but --allowed-origins and --allowed-hosts default to *. |\n| Pricing | Free (Free · OSS) · Free and Apache-2.0, run on your own machine or your own Cloud Run service. Google Cloud sources bill for their own usage (BigQuery queries, Cloud SQL instances); Toolbox itself has no price. |\n| x402 | No · Self-hosted MCP server with nothing to buy (checked 2026-11-06). |\n| Licence | Apache-2.0 |\n| Tools exposed | 29 |\n| Packages | npm: `@toolbox-sdk/server`; pypi: `toolbox-core`; npm: `@toolbox-sdk/core` |\n| MCP registry name | `io.github.googleapis/mcp-toolbox` |\n| Source | https://github.com/googleapis/mcp-toolbox |\n| Docs | https://mcp-toolbox.dev/ |\n| llms.txt | https://mcp-toolbox.dev/llms.txt |\n| Last release | 2026-11-05 |\n| GitHub stars | 16,818 (as of 2026-11-06) |\n| Surface listed | The Toolbox server (binary, container and @toolbox-sdk/server), read from a shallow clone of googleapis/mcp-toolbox (README, CHANGELOG, SECURITY.md, prebuilt configs, docs and source), mcp-toolbox.dev and the MCP registry on 6 November 2026. Nothing was installed or run |\n| Two ways to use it | Prebuilt generic tools (list_tables, execute_sql and the like) for coding agents, or custom tools with fixed SQL, parameters and authorised parameters for production agents |\n| Sources | Google Cloud (BigQuery, AlloyDB, Cloud SQL, Spanner, Bigtable, Firestore, Dataplex, Looker, Cloud Storage and more) and others such as PostgreSQL, MySQL, SQL Server, Oracle, MongoDB, Neo4j, Redis, Snowflake, ClickHouse, Elasticsearch and SQLite |\n| Observability | OpenTelemetry traces and metrics, exported only when --telemetry-otlp or --telemetry-gcp is set |\n| Security options | MCP authorisation as an OAuth 2.1 resource server, authorised parameters bound to user claims, read-only mode, Model Armor screening, --allowed-hosts and --allowed-origins |\n| Capabilities | db.sql, db.document, db.admin |\n| Tags | self-hosted, free, open-source, mcp, stdio, http, mcp-registry, llms-txt, google-cloud, bigquery, postgres, toolsets, read-only-mode, opentelemetry, go |\n| JSON | https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases.json |\n\n## Score breakdown (methodology v0.7, October 2026 research run)\n\nAssessed 2026-11-06 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 80 | 16.0 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 85 | 13.8 |\n| Agent ergonomics | 13% | 16.2 | 82 | 13.3 |\n| Security \u0026 auth | 14% | 17.5 | 75 | 13.1 |\n| Payments \u0026 pricing | 10% | 12.5 | 60 | 7.5 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 95 | 8.3 |\n| Transparency \u0026 trust (editorial 77, provenance 50) | 7% | 8.8 | 64 | 5.6 |\n| Negative events | up to −15 | up to −15 | none recorded | 0 |\n| **Total** | | | | **77.7 → BB** |\n\n### Why each score\n\n- Reliability 80 (checked 2026-11-06): Scored as local software the owner runs. A Go binary, a container in Artifact Registry and @toolbox-sdk/server on npm, with install paths per platform (20). Tests, lint, conformance and nightly tier-report workflows in the repository; the pass state wasn't read (15). 432 open issues and pull requests on a repository with 16,818 stars and releases every two weeks, triaged with labels, though the backlog is large (15). Semantic versioning with a published policy, release-please CHANGELOG and an UPGRADING.md (15). 1.x since well before this check, v1.16.0 now (15). 20 + 15 + 15 + 15 + 15 = 80.\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 85 (checked 2026-11-06): Every tool's parameters are typed in tools.yaml and published as JSON Schema over MCP (25). mcp-toolbox.dev serves llms.txt (10). Prebuilt descriptions vary from one line (\"Use this tool to execute a single SQL statement.\") to detailed, and few say when not to use a tool (12). Typed parameters with required flags; execute_sql takes free SQL (12). Many examples, samples and codelabs; error responses are thinly documented (11). Semver, a dated CHANGELOG and versioned docs (15). 25 + 10 + 12 + 12 + 11 + 15 = 85.\n- Agent ergonomics 82 (checked 2026-11-06): The PostgreSQL prebuilt set lists 29 tools (15), split into five toolsets a client can load one at a time, and write tools disappear in read-only mode (plus 8). Results are bounded per tool, some prebuilt tools take limits, and BigQuery tools compact empty schema fields (14). Errors come back as tool errors; paths are sanitised from file errors since 1.15.0 (12). readOnlyHint and destructiveHint are set per tool and switch with the source's read-only state (18). Prebuilt sets need only environment variables, and SDKs exist in Python, JavaScript, Go and Java (15). 23 + 14 + 12 + 18 + 15 = 82.\n- Security \u0026 auth 75 (checked 2026-11-06): Source credentials stay in Toolbox, Google sources use IAM, and optional MCP authorisation validates OAuth 2.1 JWTs with required scopes. --allowed-origins and --allowed-hosts default to *, which the CLI docs themselves call unsafe even on localhost, though the default bind is 127.0.0.1 (20). Read-only mode is enforced at the engine, write tools are suppressed, and custom tools can fix SQL and bind parameters to the signed-in user (18). The security docs cover prompt injection and screening through Model Armor (12). OpenTelemetry traces and metrics per call when exported (10). Google's vulnerability intake with a stated response time and GitHub advisories (15). 20 + 18 + 12 + 10 + 15 = 75.\n- Payments \u0026 pricing 60 (checked 2026-11-06): Free, self-hosted, nothing to buy, so 20 + 20 + 20. No payment protocol (0).\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 95 (checked 2026-11-06): v1.16.0 on 5 November 2026, one day before this check (30). Eight releases from v1.10.0 (27 August) to v1.16.0 in the 90 days (20). Pull requests merge daily and new tools land in each fortnightly release, though 432 issues and pull requests are open (20). io.github.googleapis/mcp-toolbox is in the official registry at 1.16.0 (15). Release automation, lint, tests and conformance workflows (10). 30 + 20 + 20 + 15 + 10 = 95.\n- Transparency \u0026 trust 64 (checked 2026-11-06): Apache-2.0 (30). A self-hosted server; data goes only to the configured sources and to a telemetry exporter if one is set. There is no data-handling statement of its own (15). A versioning policy defining breaking changes, UPGRADING.md and a notice for the repository rename; prebuilt tool removals are listed in the changelog (16). Telemetry is off unless --telemetry-otlp or --telemetry-gcp is set, and the docs say so (16). 30 + 15 + 16 + 16 = 77.\n\nFix list, everything this grade says the listing lacks, the biggest gain first (16 items). What it covers is at https://www.anchorterminal.com/fixes/mcp-toolbox-databases.md (JSON https://www.anchorterminal.com/fixes/mcp-toolbox-databases.json). The whole list for a coding agent comes from `POST https://www.anchorterminal.com/api/v1/fix-list` with `{\"listing\": \"mcp-toolbox-databases\", \"plan\": \"read\"}`, free while the beta runs\n\n### What we couldn't check\n\n- unchecked: whether the tests workflow passes on the default branch.\n- Our reader fetched https://pypi.org/pypi/toolbox-core/json once on 6 November, a path PyPI's robots.txt disallows. The version it gave (1.4.0) was re-read from the allowed release feed https://pypi.org/rss/project/toolbox-core/releases.xml, which is the source used.\n- unchecked: GA status per source; the minor-version policy mentions beta functions, and per-source stability labels weren't read.\n\n### Sources\n\n- repository and README: \u003chttps://github.com/googleapis/mcp-toolbox\u003e (seen 2026-11-06)\n- CHANGELOG: \u003chttps://github.com/googleapis/mcp-toolbox/blob/main/CHANGELOG.md\u003e (seen 2026-11-06)\n- SECURITY.md: \u003chttps://github.com/googleapis/mcp-toolbox/blob/main/SECURITY.md\u003e (seen 2026-11-06)\n- read-only security docs: \u003chttps://github.com/googleapis/mcp-toolbox/blob/main/docs/en/documentation/configuration/security/read-only.md\u003e (seen 2026-11-06)\n- CLI reference: \u003chttps://github.com/googleapis/mcp-toolbox/blob/main/docs/en/reference/cli.md\u003e (seen 2026-11-06)\n- MCP authorisation docs: \u003chttps://github.com/googleapis/mcp-toolbox/blob/main/docs/en/documentation/configuration/toolbox_mcp_auth.md\u003e (seen 2026-11-06)\n- docs site llms.txt: \u003chttps://mcp-toolbox.dev/llms.txt\u003e (seen 2026-11-06)\n- toolbox-core release feed: \u003chttps://pypi.org/rss/project/toolbox-core/releases.xml\u003e (seen 2026-11-06)\n- MCP registry entries: \u003chttps://registry.modelcontextprotocol.io/v0/servers?search=googleapis\u003e (seen 2026-11-06)\n\n## Score history\n\nEvery move of a score since the listing was graded, newest first, with its cause. A score can't move without an entry here. JSON: https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases/history.json\n\n- 2026-11-06: graded 77.7 BB (methodology 0.7)\n\n## Who's behind it (provenance 50/100, checked 2026-11-06)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | Google LLC | 20/20 |\n| Domain age | mcp-toolbox.dev, no registry record we could read | 0/15 |\n| Endpoint on the vendor's domain | mcp-toolbox.dev | 15/15 |\n| Terms of service | not found | 0/10 |\n| Privacy policy | not found | 0/10 |\n| Status page | not found | 0/10 |\n| Changelog | published | 10/10 |\n| security.txt | not found | 0/10 |\n| People named | 5 named with their role, none with a public profile | 7/10 |\n| Support route | help pages, a community | 5/5 |\n\nSource files carry \"Copyright 2025 Google LLC\" under Apache-2.0, and the repository is in the googleapis organisation.\n\nSECURITY.md routes reports to g.co/vulnz with a five-working-day response and discloses through GitHub Security Advisories.\n\nmcp-toolbox.dev/robots.txt allows all crawlers and serves llms.txt. Its registration date wasn't found through RDAP.\n\nNo terms or privacy policy specific to Toolbox, which sends nothing to Google unless GCP telemetry export or a Google source is configured.\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service**. We found no terms of service published for this product, so there is nothing to read and the check scores 0.\n\n\n**Privacy policy**. We found no privacy policy published for this product, so there is nothing to read and the check scores 0.\n\n\n## Humans behind the project (researched 2026-11-06 from public pages, not part of the grade)\n\n### Key people\n\n- Larry Page, Co-founder, Google, left executive roles in December 2019 and sits on Alphabet's board\n- Sergey Brin, Co-founder, Google, left executive roles in 2019 and sits on Alphabet's board\n- Sundar Pichai, CEO, Google and Alphabet\n- Thomas Kurian, CEO, Google Cloud\n- Demis Hassabis, Co-founder and CEO, Google DeepMind\n- Note: MCP Toolbox for Databases is published by Google in the googleapis GitHub organisation (source files carry Copyright Google LLC). The company-level people are copied from data/humans/google-secret-manager.json (checked 28 October 2026) with their sources. No product lead is named in the repository or on mcp-toolbox.dev, so none is added. Google is part of Alphabet, so no investors are listed.\n- Google Cloud: LinkedIn https://www.linkedin.com/company/google X https://x.com/Google GitHub https://github.com/googleapis\n\n### Ownership and investors\n\n- Ownership: Part of Alphabet Inc.\n\n### Getting support\n\n- Discord: https://discord.gg/Dmm69peqjh\n- Help: https://mcp-toolbox.dev/\n- Community (mcp-toolbox issues): https://github.com/googleapis/mcp-toolbox/issues\n- Sources: https://about.google/intl/ALL_en/our-story/, https://cloud.google.com/contact, https://cloud.google.com/support-hub, https://github.com/googleapis/mcp-toolbox, https://mcp-toolbox.dev/, https://www.linkedin.com/company/google, https://x.com/Google\n\n## Live (updated 2026-11-07 18:16 UTC)\n\n- github `googleapis/mcp-toolbox` v1.16.0, released 2026-11-05\n- mcp-registry `io.github.googleapis/mcp-toolbox` 1.16.0\n- npm `@toolbox-sdk/core` 1.2.0\n- npm `@toolbox-sdk/server` 1.16.0\n- pypi `toolbox-core` 1.4.0, released 2026-09-01\n- security.txt: none\n- Watching changelog \u003chttps://raw.githubusercontent.com/googleapis/mcp-toolbox/main/CHANGELOG.md\u003e\n- Always current: https://www.anchorterminal.com/api/v1/live/mcp-toolbox-databases.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Strengths\n\n- 57 source types and 39 prebuilt configurations, from BigQuery and AlloyDB to PostgreSQL, MySQL, MongoDB and Snowflake\n- Read-only mode locks the database session, hides write tools and sets readOnlyHint\n- Custom tools in tools.yaml fix SQL and bind parameters to the signed-in user's claims\n- Optional MCP authorisation as an OAuth 2.1 resource server with protected-resource metadata\n- v1.16.0 on 5 November 2026 after eight releases in 90 days, in the MCP registry\n\n## Weaknesses\n\n- --allowed-origins and --allowed-hosts default to *, which the docs call unsafe\n- Prebuilt PostgreSQL set lists 29 tools and AlloyDB 41 unless a toolset is chosen\n- 432 open issues and pull requests\n- Some prebuilt descriptions are a single line with no guidance on when not to use the tool\n\n\n\n## Before you call it (notes for agents)\n\n1. Load one toolset (such as data) rather than the whole prebuilt set to keep context small\n2. Turn on the source's read-only mode for exploration; write tools then disappear from tools/list\n3. Start the HTTP server with --allowed-hosts and --allowed-origins set; the defaults accept any\n4. Prefer custom tools with fixed SQL over execute_sql for production agents\n\n## Connect\n\nInstall:\n\n```bash\nnpx @toolbox-sdk/server --prebuilt postgres --stdio\n```\n\nMCP client configuration:\n\n```json\n{\n \"mcpServers\": {\n \"postgres\": {\n \"args\": [\n \"-y\",\n \"@toolbox-sdk/server\",\n \"--prebuilt\",\n \"postgres\",\n \"--stdio\"\n ],\n \"command\": \"npx\",\n \"env\": {\n \"POSTGRES_DATABASE\": \"mydb\",\n \"POSTGRES_HOST\": \"localhost\",\n \"POSTGRES_PASSWORD\": \"password\",\n \"POSTGRES_USER\": \"user\"\n }\n }\n }\n}\n```\n\nThrough letme: https://letme.dev/mcp-toolbox-databases (letme picks it for db.sql, the top-graded tool for the job). letme answers with the pick and how to call it direct. How it works: https://www.anchorterminal.com/letme/index.md\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| MongoDB MCP Server | A | 80.2 | 13 | db.document, db.admin | no | https://www.anchorterminal.com/tools/mongodb-mcp.md |\n| Supabase API + MCP | BB | 74 | 94 | db.sql, db.admin | no | https://www.anchorterminal.com/tools/supabase-mcp.md |\n| Neon MCP Server | BB | 72.5 | 124 | db.sql, db.admin | no | https://www.anchorterminal.com/tools/neon-mcp.md |\n| DBHub | BB | 70.4 | 200 | db.sql, db.admin | no | https://www.anchorterminal.com/tools/dbhub.md |\n| PlanetScale MCP Server | B | 69.6 | 233 | db.sql, db.admin | no | https://www.anchorterminal.com/tools/planetscale-mcp.md |\n| Postgres MCP Pro | F | 37 | 1357 | db.sql, db.admin | no | https://www.anchorterminal.com/tools/postgres-mcp-pro.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- Renamed from Gen AI Toolbox for Databases; the repository moved from googleapis/genai-toolbox to googleapis/mcp-toolbox and the old registry entry io.github.googleapis/genai-toolbox stops at 0.31.0 (README; https://registry.modelcontextprotocol.io/v0/servers?search=googleapis)\n- 57 source types and 39 prebuilt configurations; the PostgreSQL prebuilt set has 29 tools in five toolsets (data, monitor, health, view-config and replication), BigQuery 9, Cloud Storage 14 and AlloyDB for PostgreSQL 41 (internal/prebuiltconfigs/tools)\n- Read-only protection in three layers, engine-level session locks, suppression of write tools and readOnlyHint annotations set from the source's read-only state (docs/en/documentation/configuration/security/read-only.md)\n- v1.16.0 on 5 November 2026, with eight minor and patch releases since 27 August under release-please and a semver policy covering the CLI, manifests and prebuilt toolsets (CHANGELOG.md)\n- Security reports go to Google's g.co/vulnz with a five-working-day response and GitHub Security Advisories for disclosure (SECURITY.md)\n- SDKs in Python (toolbox-core 1.4.0), JavaScript (@toolbox-sdk/core 1.2.0), Go and Java, with integrations for ADK, LangChain and LlamaIndex (README)\n\n- #2 of 16 in Best database, file and memory tools for AI agents: https://www.anchorterminal.com/best/data/index.md\n- All 97 databases comparisons: https://www.anchorterminal.com/compare/data/index.md\n\n## Compare\n\n- [ClickHouse MCP Server vs MCP Toolbox for Databases](https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-mcp-toolbox-databases.md): B 68.8 vs BB 77.7\n- [DBHub vs MCP Toolbox for Databases](https://www.anchorterminal.com/compare/dbhub-vs-mcp-toolbox-databases.md): BB 70.4 vs BB 77.7\n- [MCP Toolbox for Databases vs Neon MCP Server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp.md): BB 77.7 vs BB 72.5\n- [MCP Toolbox for Databases vs ObsessionDB](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb.md): BB 77.7 vs E 41.1\n- [MCP Toolbox for Databases vs PlanetScale MCP Server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-planetscale-mcp.md): BB 77.7 vs B 69.6\n- [MCP Toolbox for Databases vs Postgres MCP Pro](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-mcp-pro.md): BB 77.7 vs F 37\n- [MCP Toolbox for Databases vs PostgreSQL (archived MCP reference server)](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived.md): BB 77.7 vs F 18.6\n- [MCP Toolbox for Databases vs Snowflake-managed MCP server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-snowflake-managed.md): BB 77.7 vs D 52.7\n- [MCP Toolbox for Databases vs Supabase API + MCP](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-supabase-mcp.md): BB 77.7 vs BB 74\n- [MCP Toolbox for Databases vs MongoDB MCP Server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-mongodb-mcp.md): BB 77.7 vs A 80.2\n- [MCP Toolbox for Databases vs Redis MCP](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp.md): BB 77.7 vs C 54.9\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on mcp-toolbox.dev or one of its subdomains, or the README at the root of github.com/googleapis/mcp-toolbox. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"mcp-toolbox-databases\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/mcp-toolbox-databases\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/mcp-toolbox-databases.svg\" alt=\"MCP Toolbox for Databases on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![MCP Toolbox for Databases on Anchor Terminal](https://www.anchorterminal.com/badges/mcp-toolbox-databases.svg)](https://www.anchorterminal.com/tools/mcp-toolbox-databases)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/mcp-toolbox-databases\"\u003eMCP Toolbox for Databases on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say MCP Toolbox for Databases is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/mcp-toolbox-databases-dark.png\n- Light: https://www.anchorterminal.com/assets/share/mcp-toolbox-databases-light.png\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "Databases \u0026 files", "url": "https://www.anchorterminal.com/categories/data" }, { "name": "MCP Toolbox for Databases", "url": "" } ], "description": "MCP Toolbox for Databases is Google's open-source MCP server for more than 30 data sources, among them BigQuery, AlloyDB, Cloud SQL, Spanner and PostgreSQL. It runs as a binary or container with prebuilt or custom tools from tools.yaml.", "facts": [ "rank #27 of 1486", "OAuth or key auth", "0 desk reviews" ], "h1": "MCP Toolbox for Databases", "image": "https://www.anchorterminal.com/assets/og/tools-mcp-toolbox-databases.png", "path": "/tools/mcp-toolbox-databases", "published": "2026-10-01", "section": "tools", "title": "MCP Toolbox for Databases review: pricing, alternatives, grade BB", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/tools/mcp-toolbox-databases" }, "tokens": { "markdown": 5900, "slim": 1330 }, "version": 1 }