# MCP Toolbox for Databases (slim)

> MCP Toolbox for Databases is Google's open-source MCP server for more than 30 data sources, among them BigQuery, AlloyDB, Cloud SQL, Spanner and PostgreSQL. It runs as a binary or container with prebuilt or custom tools from tools.yaml.

- Full: https://www.anchorterminal.com/tools/mcp-toolbox-databases.md (~5,900 tokens) · this version ~1,330 tokens · JSON https://www.anchorterminal.com/tools/mcp-toolbox-databases.json · canonical https://www.anchorterminal.com/tools/mcp-toolbox-databases
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-07 · pricing https://www.anchorterminal.com/tools/mcp-toolbox-databases#pricing · reviews https://www.anchorterminal.com/tools/mcp-toolbox-databases#reviews
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

**BB · 77.7/100 · rank #27 of 1486 · #2 in Databases & files · agent-ready · confidence medium**


Assessment: One self-hosted server reaches 57 source types, with engine-level read-only locks, toolsets, optional OAuth 2.1 and fortnightly semver releases under Apache-2.0. Prebuilt sets list 9 to 41 tools, origin and host checks default to any, and 432 issues and pull requests are open.

## Facts

- Kind: MCP server · vendor: Google · category: Databases & files · legal entity: Google LLC · provenance 50/100
- Local only (stdio, Streamable HTTP): npm `@toolbox-sdk/server`, pypi `toolbox-core`, npm `@toolbox-sdk/core`
- Auth: OAuth or key · pricing: Free · x402: no · licence: Apache-2.0
- Benchmark probes: not run yet, so Performance is pending
- Surface listed: The Toolbox server (binary, container and @toolbox-sdk/server), read from a shallow clone of googleapis/mcp-toolbox (README, CHANGELOG, SECURITY.md, prebuilt configs, docs and source), mcp-toolbox.dev and the MCP registry on 6 November 2026. Nothing was installed or run
- Two ways to use it: Prebuilt generic tools (list_tables, execute_sql and the like) for coding agents, or custom tools with fixed SQL, parameters and authorised parameters for production agents
- Sources: Google Cloud (BigQuery, AlloyDB, Cloud SQL, Spanner, Bigtable, Firestore, Dataplex, Looker, Cloud Storage and more) and others such as PostgreSQL, MySQL, SQL Server, Oracle, MongoDB, Neo4j, Redis, Snowflake, ClickHouse, Elasticsearch and SQLite
- Observability: OpenTelemetry traces and metrics, exported only when --telemetry-otlp or --telemetry-gcp is set
- Security options: MCP authorisation as an OAuth 2.1 resource server, authorised parameters bound to user claims, read-only mode, Model Armor screening, --allowed-hosts and --allowed-origins

- Scores: Reliability 80, Performance pending, Schema & documentation 85, Agent ergonomics 82, Security & auth 75, Payments & pricing 60, Task success pending, Maintenance & community 95, Transparency & trust 64 · total over the 7 assessed categories
- Why: Reliability, Scored as local software the owner runs. · Schema & documentation, Every tool's parameters are typed in tools.yaml and published as JSON Schema over MCP (25). · Agent ergonomics, The PostgreSQL prebuilt set lists 29 tools (15), split into five toolsets a client can load one at a time, and write tools disappear in read… · Security & auth, Source credentials stay in Toolbox, Google sources use IAM, and optional MCP authorisation validates OAuth 2.1 JWTs with required scopes. · Payments & pricing, Free, self-hosted, nothing to buy, so 20 + 20 + 20. No payment protocol (0). · Maintenance & community, v1.16.0 on 5 November 2026, one day before this check (30). · Transparency & trust, Apache-2.0 (30).
- Sources: 9, open questions: 3, both in the full twin
- Capabilities: db.sql, db.document, db.admin
- JSON: https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/mcp-toolbox-databases.svg` or a link to https://www.anchorterminal.com/tools/mcp-toolbox-databases from a page on mcp-toolbox.dev or one of its subdomains, or the README at the root of github.com/googleapis/mcp-toolbox, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.
- Support: Discord https://discord.gg/Dmm69peqjh; https://mcp-toolbox.dev/; more in the full twin

## Before you call it

1. Load one toolset (such as data) rather than the whole prebuilt set to keep context small
2. Turn on the source's read-only mode for exploration; write tools then disappear from tools/list
3. Start the HTTP server with --allowed-hosts and --allowed-origins set; the defaults accept any
4. Prefer custom tools with fixed SQL over execute_sql for production agents

## Connect

```bash
npx @toolbox-sdk/server --prebuilt postgres --stdio
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/mcp-toolbox-databases

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| MongoDB MCP Server | A | 80.2 | db.document, db.admin | https://www.anchorterminal.com/tools/mongodb-mcp.min.md |
| Supabase API + MCP | BB | 74 | db.sql, db.admin | https://www.anchorterminal.com/tools/supabase-mcp.min.md |
| Neon MCP Server | BB | 72.5 | db.sql, db.admin | https://www.anchorterminal.com/tools/neon-mcp.min.md |
| DBHub | BB | 70.4 | db.sql, db.admin | https://www.anchorterminal.com/tools/dbhub.min.md |
| PlanetScale MCP Server | B | 69.6 | db.sql, db.admin | https://www.anchorterminal.com/tools/planetscale-mcp.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)