Most database MCP servers hand an agent a SQL socket and rely on prompting for safety. This one blocks writes at the server and meters queries per key, which turns 'the agent can query production' from a policy into a limit. The schema tool matters more than it looks: without it a model guesses column names, and the query fails for reasons that have nothing to do with the question.
Ai2sql's hosted endpoint. It holds the database connections; the agent asks for a query and gets rows back. Writes are blocked by default, so a bad prompt cannot change data.
- run_query — execute a read-only query against any connected database
- describe_schema — tables, columns and relationships, so generated SQL fits the real model
- list_connections — enumerate the databases the current key can reach
An API key sent as a bearer token; keys are scoped and metered individually. Plans start at $9/mo for 100 queries and 10 tables, with a 7-day trial; Oracle, MongoDB and BigQuery come in at the $24 tier.
Paste a URL with a key — add the endpoint to your client