Read-only MCP server for exposing database schema metadata without row data.
Connect Runs on your machine
claude mcp add secure-schema -e DATABASE_URL=<DATABASE_URL> -e DATABASE_SCHEMA=<DATABASE_SCHEMA> -e ALLOWED_TABLES=<ALLOWED_TABLES> -e SECURE_SCHEMA_ENV=<SECURE_SCHEMA_ENV> -e FASTMCP_CHECK_FOR_UPDATES=<FASTMCP_CHECK_FOR_UPDATES> -e FASTMCP_SHOW_SERVER_BANNER=<FASTMCP_SHOW_SERVER_BANNER> -- uvx mcp-secure-schema==1.0.1{
"mcpServers": {
"secure-schema": {
"command": "uvx",
"args": [
"mcp-secure-schema==1.0.1"
],
"env": {
"DATABASE_URL": "<DATABASE_URL>",
"DATABASE_SCHEMA": "<DATABASE_SCHEMA>",
"ALLOWED_TABLES": "<ALLOWED_TABLES>",
"SECURE_SCHEMA_ENV": "<SECURE_SCHEMA_ENV>",
"FASTMCP_CHECK_FOR_UPDATES": "<FASTMCP_CHECK_FOR_UPDATES>",
"FASTMCP_SHOW_SERVER_BANNER": "<FASTMCP_SHOW_SERVER_BANNER>"
}
}
}
}{
"mcpServers": {
"secure-schema": {
"command": "uvx",
"args": [
"mcp-secure-schema==1.0.1"
],
"env": {
"DATABASE_URL": "<DATABASE_URL>",
"DATABASE_SCHEMA": "<DATABASE_SCHEMA>",
"ALLOWED_TABLES": "<ALLOWED_TABLES>",
"SECURE_SCHEMA_ENV": "<SECURE_SCHEMA_ENV>",
"FASTMCP_CHECK_FOR_UPDATES": "<FASTMCP_CHECK_FOR_UPDATES>",
"FASTMCP_SHOW_SERVER_BANNER": "<FASTMCP_SHOW_SERVER_BANNER>"
}
}
}
}{
"servers": {
"secure-schema": {
"type": "stdio",
"command": "uvx",
"args": [
"mcp-secure-schema==1.0.1"
],
"env": {
"DATABASE_URL": "<DATABASE_URL>",
"DATABASE_SCHEMA": "<DATABASE_SCHEMA>",
"ALLOWED_TABLES": "<ALLOWED_TABLES>",
"SECURE_SCHEMA_ENV": "<SECURE_SCHEMA_ENV>",
"FASTMCP_CHECK_FOR_UPDATES": "<FASTMCP_CHECK_FOR_UPDATES>",
"FASTMCP_SHOW_SERVER_BANNER": "<FASTMCP_SHOW_SERVER_BANNER>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
DATABASE_URLRequired, secret | SQLAlchemy database URL used for schema inspection. |
DATABASE_SCHEMAOptional | Optional default schema or catalog namespace. In production it is locked and tool arguments cannot override it. |
ALLOWED_TABLESOptional | Optional comma-separated table/view allowlist. When set, only listed tables and views are visible. |
SECURE_SCHEMA_ENVOptional | Set to production to require ALLOWED_TABLES during startup. |
FASTMCP_CHECK_FOR_UPDATESOptional | Set to off to disable FastMCP startup update checks. |
FASTMCP_SHOW_SERVER_BANNEROptional | Set to false to suppress the FastMCP startup banner. |
Details
| Package | [email protected] (PYPI, stdio) |
| First published | 4 Jul 2026 |
| Last updated | 4 Jul 2026 |
| Registry name | io.github.Siddharth-coder13/secure-schema |
More databases servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.