Secure Schema MCP MCP Server

Name: Secure Schema MCP MCP Server
Author: io.github.Siddharth-coder13

io.github.Siddharth-coder13/secure-schema

Repository Registry

What is the Secure Schema MCP MCP server?

Read-only MCP server for exposing database schema metadata without row data.

How to install Secure Schema MCP

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

DATABASE_URL
required
secret
SQLAlchemy database URL used for schema inspection.
DATABASE_SCHEMA
Optional default schema or catalog namespace. In production it is locked and tool arguments cannot override it.
ALLOWED_TABLES
Optional comma-separated table/view allowlist. When set, only listed tables and views are visible.
SECURE_SCHEMA_ENV
Set to production to require ALLOWED_TABLES during startup.
FASTMCP_CHECK_FOR_UPDATES
Set to off to disable FastMCP startup update checks.
FASTMCP_SHOW_SERVER_BANNER
Set to false to suppress the FastMCP startup banner.

Claude Desktop

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "secure-schema": {
      "command": "uvx",
      "args": [
        "mcp-secure-schema"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>",
        "DATABASE_SCHEMA": "<YOUR_DATABASE_SCHEMA>",
        "ALLOWED_TABLES": "<YOUR_ALLOWED_TABLES>",
        "SECURE_SCHEMA_ENV": "<YOUR_SECURE_SCHEMA_ENV>",
        "FASTMCP_CHECK_FOR_UPDATES": "<YOUR_FASTMCP_CHECK_FOR_UPDATES>",
        "FASTMCP_SHOW_SERVER_BANNER": "<YOUR_FASTMCP_SHOW_SERVER_BANNER>"
      }
    }
  }
}

Cursor

~/.cursor/mcp.json

{
  "mcpServers": {
    "secure-schema": {
      "command": "uvx",
      "args": [
        "mcp-secure-schema"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>",
        "DATABASE_SCHEMA": "<YOUR_DATABASE_SCHEMA>",
        "ALLOWED_TABLES": "<YOUR_ALLOWED_TABLES>",
        "SECURE_SCHEMA_ENV": "<YOUR_SECURE_SCHEMA_ENV>",
        "FASTMCP_CHECK_FOR_UPDATES": "<YOUR_FASTMCP_CHECK_FOR_UPDATES>",
        "FASTMCP_SHOW_SERVER_BANNER": "<YOUR_FASTMCP_SHOW_SERVER_BANNER>"
      }
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "secure-schema": {
      "command": "uvx",
      "args": [
        "mcp-secure-schema"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>",
        "DATABASE_SCHEMA": "<YOUR_DATABASE_SCHEMA>",
        "ALLOWED_TABLES": "<YOUR_ALLOWED_TABLES>",
        "SECURE_SCHEMA_ENV": "<YOUR_SECURE_SCHEMA_ENV>",
        "FASTMCP_CHECK_FOR_UPDATES": "<YOUR_FASTMCP_CHECK_FOR_UPDATES>",
        "FASTMCP_SHOW_SERVER_BANNER": "<YOUR_FASTMCP_SHOW_SERVER_BANNER>"
      }
    }
  }
}

VS Code

.vscode/mcp.json

{
  "servers": {
    "secure-schema": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "mcp-secure-schema"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>",
        "DATABASE_SCHEMA": "<YOUR_DATABASE_SCHEMA>",
        "ALLOWED_TABLES": "<YOUR_ALLOWED_TABLES>",
        "SECURE_SCHEMA_ENV": "<YOUR_SECURE_SCHEMA_ENV>",
        "FASTMCP_CHECK_FOR_UPDATES": "<YOUR_FASTMCP_CHECK_FOR_UPDATES>",
        "FASTMCP_SHOW_SERVER_BANNER": "<YOUR_FASTMCP_SHOW_SERVER_BANNER>"
      }
    }
  }
}

Claude Code

claude mcp add secure-schema --env DATABASE_URL=<YOUR_DATABASE_URL> --env DATABASE_SCHEMA=<YOUR_DATABASE_SCHEMA> --env ALLOWED_TABLES=<YOUR_ALLOWED_TABLES> --env SECURE_SCHEMA_ENV=<YOUR_SECURE_SCHEMA_ENV> --env FASTMCP_CHECK_FOR_UPDATES=<YOUR_FASTMCP_CHECK_FOR_UPDATES> --env FASTMCP_SHOW_SERVER_BANNER=<YOUR_FASTMCP_SHOW_SERVER_BANNER> -- uvx mcp-secure-schema