Mssql Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mssql Mcp (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
這是一個自定義的 Model Context Protocol (MCP) 伺服器,用於連接 Microsoft SQL Server。它可以讓您的 AI 助手(如 Claude Desktop 或 Cursor)直接查詢資料庫結構、讀取資料或執行 SQL 指令。
此 MCP 伺服器需要 Microsoft ODBC Driver 17 或 18 for SQL Server 來支援 Always Encrypted 功能。
下載連結:https://learn.microsoft.com/en-us/sql/connect/odbc/download-odbc-driver-for-sql-server
安裝後,可以在命令提示字元執行以下指令確認:
odbcad32在「驅動程式」標籤中應該可以看到「ODBC Driver 17 for SQL Server」或「ODBC Driver 18 for SQL Server」。
在當前目錄下執行:
npm install複製 .env.example 為 .env,並填入您的資料庫連線資訊:
cp .env.example .env編輯 .env 檔案:
DB_USER=sa
DB_PASSWORD=您的密碼
DB_SERVER=localhost
DB_DATABASE=您的資料庫名稱
DB_PORT=1433
DB_ENCRYPT=true
DB_TRUST_SERVER_CERTIFICATE=true編輯您的 Claude Desktop 設定檔 (通常位於 %APPDATA%\Claude\claude_desktop_config.json),新增以下內容:
{
"mcpServers": {
"mssql": {
"command": "node",
"args": ["D:/MCP/MSSQL_MCP/index.js"]
}
}
}此 MCP 伺服器提供以下功能:
mssql://{schema}/{table}: 讀取指定資料表的前 100 筆資料。mssql://dbo/Usersschema (篩選架構), limit (限制筆數)tableName (例如 "dbo.Users")query (例如 "SELECT * FROM Users WHERE ID = 1").env 檔案提交到版本控制系統。此 MCP 伺服器使用 Node.js 的 mssql 套件(基於 Tedious 驅動),目前無法解密 SQL Server Always Encrypted 欄位。
查詢包含 Always Encrypted 欄位的資料表時,加密欄位會顯示為 [ENCRYPTED - Always Encrypted column cannot be decrypted by Node.js mssql driver]。
如需查詢加密欄位的實際內容,請使用:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.