mbentham/SqlAugur

SQL Server MCP v1.0.0

First stable release of SQL Server MCP — a .NET 10.0 Model Context Protocol server providing AI assistants with safe, read-only access to SQL Server databases.

Core Tools

• execute_query — Run validated SELECT queries with AST-based query validation (blocks INSERT/UPDATE/DELETE/DROP/EXEC, SELECT INTO, OPENROWSET, linked servers)
• list_servers / list_databases — Discover configured servers and their databases
• get_plantuml_diagram — Generate PlantUML ER diagrams with smart FK cardinality detection
• get_schema_overview — Concise Markdown schema overview (tables, columns, keys, constraints)
• describe_table — Detailed single-table description (columns, indexes, FKs, constraints)
• get_estimated_query_plan / get_actual_query_plan — XML query plan retrieval

DBA Diagnostic Tools (opt-in via EnableDbaTools)

• First Responder Kit — sp_Blitz, sp_BlitzFirst, sp_BlitzCache, sp_BlitzIndex, sp_BlitzWho, sp_BlitzLock
• DarlingData — sp_PressureDetector, sp_QuickieStore, sp_HealthParser, sp_LogHunter, sp_HumanEventsBlockViewer, sp_IndexCleanup, sp_QueryReproBuilder
• sp_WhoIsActive — Active session monitoring

Key Features

• AST-based query validation using TSql170Parser — correctly handles comments, string literals, and nested constructs that regex approaches miss
• Progressive tool discovery — tools organized into core/DBA/diagnostic toolsets to minimize AI context window cost
• Rate limiting — configurable concurrency and throughput limits on all tool executions
• Compact mode — compact parameter on diagram and schema overview tools shows only PK/FK columns for high-level relationship maps
• Schema filtering — includeSchema / excludeSchemas parameters on diagram and overview tools
• Comprehensive test suite — unit tests + integration tests using Testcontainers with SQL Server 2025

Security

• All tools are read-only with parameterized queries
• Whitelisted stored procedure execution with blocked output/logging parameters
• PlantUML and Markdown output sanitization
• No sensitive data in stdout (reserved for MCP protocol); logging routed to stderr