Mcp Server Motherduck — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Server Motherduck (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A local MCP server implementation that interacts with DuckDB and MotherDuck databases, providing SQL analytics capabilities to AI Assistants and IDEs.
This repository contains the self-hosted/local MCP server implementation. If you're looking for MotherDuck's hosted/remote MCP option, see the MotherDuck MCP docs.
<img src="https://cursor.com/deeplink/mcp-install-dark.svg" alt="Install in Cursor">
The server provides one prompt:
duckdb-motherduck-initial-prompt: A prompt to initialize a connection to DuckDB or MotherDuck and start working with itThe server offers one tool:
query: Execute a SQL query on the DuckDB or MotherDuck databasequery (string, required): The SQL query to executeAll interactions with both DuckDB and MotherDuck are done through writing SQL queries.
Result Limiting: Query results are automatically limited to prevent using up too much context:
--max-rows)--max-chars)The MCP server supports the following parameters:
| Parameter | Type | Default | Description |
|---|---|---|---|
--transport | Choice | stdio | Transport type. Options: stdio, sse, stream |
--port | Integer | 8000 | Port to listen on for sse and stream transport mode |
--host | String | 127.0.0.1 | Host to bind the MCP server for sse and stream transport mode |
--db-path | String | md: | Path to local DuckDB database file, MotherDuck database, or S3 URL (e.g., s3://bucket/path/to/db.duckdb) |
--motherduck-token | String | None | Access token to use for MotherDuck database connections (uses motherduck_token env var by default) |
--read-only | Flag | False | Flag for connecting to DuckDB or MotherDuck in read-only mode. For DuckDB it uses short-lived connections to enable concurrent access |
--home-dir | String | None | Home directory for DuckDB (uses HOME env var by default) |
--saas-mode | Flag | False | Flag for connecting to MotherDuck in SaaS mode. (disables filesystem and write permissions for local DuckDB) |
--json-response | Flag | False | Enable JSON responses for HTTP stream. Only supported for stream transport |
--max-rows | Integer | 1024 | Maximum number of rows to return from queries. |
--max-chars | Integer | 50000 | Maximum number of characters in query results. |
--query-timeout | Integer | -1 | Query execution timeout in seconds. Set to -1 to disable timeout (default). |
# Connect to local DuckDB file in read-only mode
uvx mcp-server-motherduck --db-path /path/to/local.db --read-only
# Connect to MotherDuck with token
uvx mcp-server-motherduck --db-path md: --motherduck-token YOUR_TOKEN
# Connect to local DuckDB file in read-only mode
uvx mcp-server-motherduck --db-path /path/to/local.db --read-only
# Connect to MotherDuck in SaaS mode for enhanced security with stream transport mode
uvx mcp-server-motherduck --transport stream --db-path md: --motherduck-token YOUR_TOKEN --saas-mode
# Customize result truncation limits
uvx mcp-server-motherduck --db-path md: --motherduck-token YOUR_TOKEN --max-rows 2048 --max-chars 100000
# Enable query timeout (5 minutes)
uvx mcp-server-motherduck --db-path md: --motherduck-token YOUR_TOKEN --query-timeout 300uv installed, you can install it using pip install uv or brew install uvIf you plan to use the MCP with Claude Desktop or any other MCP comptabile client, the client need to be installed.
mcp.json file to which you add the following configuration:{
"mcpServers": {
"mcp-server-motherduck": {
"command": "uvx",
"args": [
"mcp-server-motherduck",
"--db-path",
"md:",
"--motherduck-token",
"<YOUR_MOTHERDUCK_TOKEN_HERE>"
]
}
}
}For the quickest installation, click one of the "Install with UV" buttons at the top.
#### Manual Installation
Add the following JSON block to your User Settings (JSON) file in VS Code. You can do this by pressing Ctrl + Shift + P and typing Preferences: Open User Settings (JSON).
{
"mcp": {
"inputs": [
{
"type": "promptString",
"id": "motherduck_token",
"description": "MotherDuck Token",
"password": true
}
],
"servers": {
"motherduck": {
"command": "uvx",
"args": [
"mcp-server-motherduck",
"--db-path",
"md:",
"--motherduck-token",
"${input:motherduck_token}"
]
}
}
}
}Optionally, you can add it to a file called .vscode/mcp.json in your workspace. This will allow you to share the configuration with others.
{
"inputs": [
{
"type": "promptString",
"id": "motherduck_token",
"description": "MotherDuck Token",
"password": true
}
],
"servers": {
"motherduck": {
"command": "uvx",
"args": [
"mcp-server-motherduck",
"--db-path",
"md:",
"--motherduck-token",
"${input:motherduck_token}"
]
}
}
}claude_desktop_config.json:{
"mcpServers": {
"mcp-server-motherduck": {
"command": "uvx",
"args": [
"mcp-server-motherduck",
"--db-path",
"md:",
"--motherduck-token",
"<YOUR_MOTHERDUCK_TOKEN_HERE>"
]
}
}
}Important Notes:
YOUR_MOTHERDUCK_TOKEN_HERE with your actual MotherDuck tokenClaude Code supports MCP servers through CLI commands or JSON configuration. Here are two ways to set it up:
#### Option 1: Using CLI Commands
Add the MotherDuck MCP server directly using the Claude Code CLI:
claude mcp add mcp-server-motherduck uvx mcp-server-motherduck -- --db-path md: --motherduck-token <YOUR_MOTHERDUCK_TOKEN_HERE>#### Option 2: Using JSON Configuration
Add the server using a JSON configuration:
claude mcp add-json mcp-server-motherduck '{
"command": "uvx",
"args": [
"mcp-server-motherduck",
"--db-path",
"md:",
"--motherduck-token",
"<YOUR_MOTHERDUCK_TOKEN_HERE>"
]
}'Scoping Options:
--local (default) for project-specific configuration--project to share the configuration with your team via .mcp.json--user to make the server available across all your projectsImportant Notes:
YOUR_MOTHERDUCK_TOKEN_HERE with your actual MotherDuck token${MOTHERDUCK_TOKEN} if you've set the environment variableIf the MCP server is exposed to third parties and should only have read access to data, we recommend using a read scaling token and running the MCP server in SaaS mode.
Read Scaling Tokens are special access tokens that enable scalable read operations by allowing up to 4 concurrent read replicas, improving performance for multiple end users while restricting write capabilities. Refer to the Read Scaling documentation to learn how to create a read-scaling token.
SaaS Mode in MotherDuck enhances security by restricting it's access to local files, databases, extensions, and configurations, making it ideal for third-party tools that require stricter environment protection. Learn more about it in the SaaS Mode documentation.
Secure Configuration
{
"mcpServers": {
"mcp-server-motherduck": {
"command": "uvx",
"args": [
"mcp-server-motherduck",
"--db-path",
"md:",
"--motherduck-token",
"<YOUR_READ_SCALING_TOKEN_HERE>",
"--saas-mode"
]
}
}
}To connect to a local DuckDB, instead of using the MotherDuck token, specify the path to your local DuckDB database file or use :memory: for an in-memory database.
In-memory database:
{
"mcpServers": {
"mcp-server-motherduck": {
"command": "uvx",
"args": [
"mcp-server-motherduck",
"--db-path",
":memory:"
]
}
}
}Local DuckDB file:
{
"mcpServers": {
"mcp-server-motherduck": {
"command": "uvx",
"args": [
"mcp-server-motherduck",
"--db-path",
"/path/to/your/local.db"
]
}
}
}Local DuckDB file in readonly mode:
{
"mcpServers": {
"mcp-server-motherduck": {
"command": "uvx",
"args": [
"mcp-server-motherduck",
"--db-path",
"/path/to/your/local.db",
"--read-only"
]
}
}
}Note: readonly mode for local file-backed DuckDB connections also makes use of short lived connections. Each time the query MCP tool is used a temporary, reaodnly connection is created + query is executed + connection is closed. This feature was motivated by a workflow where DBT was for modeling data within duckdb and then an MCP client (Windsurf/Cline/Claude/Cursor) was used for exploring the database. The short lived connections allow each tool to run and then release their connection, allowing the next tool to connect.
You can connect to DuckDB databases stored on Amazon S3 by providing an S3 URL as the database path. The server will automatically configure the necessary S3 credentials from your environment variables.
{
"mcpServers": {
"mcp-server-motherduck": {
"command": "uvx",
"args": [
"mcp-server-motherduck",
"--db-path",
"s3://your-bucket/path/to/database.duckdb"
],
"env": {
"AWS_ACCESS_KEY_ID": "<your_key>",
"AWS_SECRET_ACCESS_KEY": "<your_secret>",
"AWS_DEFAULT_REGION": "<your_region>"
}
}
}
}Note: For S3 connections:
AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, and optionally AWS_DEFAULT_REGION)AWS_SESSION_TOKEN environment variable (and optionally AWS_DEFAULT_REGION) to automatically use DuckDB's credential_chain provider.Once configured, you can e.g. ask Claude to run queries like:
The server can run in SSE mode in two ways:
Run the server directly in SSE mode using the --transport sse flag:
uvx mcp-server-motherduck --transport sse --port 8000 --db-path md: --motherduck-token <your_motherduck_token>This will start the server listening on the specified port (default 8000) and you can point your clients directly to this endpoint.
Alternatively, you can run SSE mode using supergateway:
npx -y supergateway --stdio "uvx mcp-server-motherduck --db-path md: --motherduck-token <your_motherduck_token>"Both methods allow you to point your clients such as Claude Desktop, Cursor to the SSE endpoint.
To run the server from a local development environment, use the following configuration:
{
"mcpServers": {
"mcp-server-motherduck": {
"command": "uv",
"args": [
"--directory",
"/path/to/your/local/mcp-server-motherduck",
"run",
"mcp-server-motherduck",
"--db-path",
"md:",
"--motherduck-token",
"<YOUR_MOTHERDUCK_TOKEN_HERE>"
]
}
}
}--home-dir parameter is set correctlyuvx command is available in your PATHspawn uvx ENOENT errors, try specifying the full path to uvx (output of which uvx)This MCP server is licensed under the MIT License. This means you are free to use, modify, and distribute the software, subject to the terms and conditions of the MIT License. For more details, please see the LICENSE file in the project repository.
## mcp-name: io.github.motherduckdb/mcp-server-motherduck
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.