M
MCP Directory CURATED DIRECTORY
693 MCP servers indexed
中文
← Back to directory
COMPARE UP TO 4 SERVERS

Compare MCP servers

Compare scores, permissions, risks, and fit in one decision-focused table.

DimensionAirtable MCP ServerGive AI systems read and write access to your Airtable databasesMCP ClickHouseConnect ClickHouse to your AI assistantsMCP Toolbox for DatabasesGoogle's official database MCP toolbox — define AI-accessible database tools via config
FMRS44 / 100 · D79 / 100 · B74 / 100 · B
Reliability6 / 2012 / 2013 / 20
Security and permissions3 / 2018 / 2013 / 20
Maintenance7 / 2017 / 2017 / 20
Documentation15 / 2017 / 2016 / 20
Setup experience13 / 2015 / 2015 / 20
Best for
  • Teams looking to integrate Airtable data into AI workflows
  • Individual developers who want to use natural language to operate Airtable data
  • Scenarios requiring rapid prototyping or automation
  • Teams already using ClickHouse who want AI assistants to access data directly.
  • Scenarios requiring fast, read-only data queries and schema exploration.
  • Teams that want precise control over which database operations an AI can perform, rather than open arbitrary SQL execution
  • Scenarios needing a unified MCP setup across multiple database engines
Not for
  • Teams requiring complex permission control or auditing (the server uses a single token)
  • Scenarios requiring real-time collaboration or complex data relationships
  • Users with high security requirements who cannot restrict network exposure
  • Scenarios requiring write access to the database without explicit opt-in.
  • Production environments with stringent security requirements that avoid default permission settings.
  • Lightweight cases that just want to run a few ad-hoc SQL queries without maintaining a tools.yaml config (a simpler single-database MCP may be a better fit)
Required permissions
  • Requires an Airtable personal access token
  • Token needs at least schema.bases:read and data.records:read scopes
  • Optional write scopes: schema.bases:write, data.records:write, data.recordComments:read, data.recordComments:write
  • Token must have access to target bases
  • Requires read-only access to ClickHouse database (default).
  • Optional: write access via CLICKHOUSE_ALLOW_WRITE_ACCESS.
  • Optional: destructive operations via CLICKHOUSE_ALLOW_DROP.
  • Database credentials (username/password/connection string) are supplied via env vars or config
  • A tool's actual permission is whatever SQL statement is defined in tools.yaml — designed for least privilege, but misconfiguration can still over-expose access
Risks and side effects
  • Token leakage could allow malicious reads/writes of data
  • HTTP mode has no built-in authentication and may be vulnerable to DNS rebinding attacks
  • Delete or update operations are irreversible; mistakes may cause data loss
  • Shared tokens may exceed intended access scope
  • If write access is enabled, AI might make unintended modifications.
  • If DROP access is enabled, data deletion could occur accidentally.
  • Credentials may be exposed via environment variables.
  • If tools.yaml defines SQL statements that allow unconstrained writes or deletes, the AI could accidentally modify data
  • The prebuilt toolsets (--prebuilt) favor convenience and may expose broader query capability than a specific business actually needs — use a custom tools.yaml in production
Supported clientsClaude Desktop, Claude Code, Cursor, Cline, VS CodeClaude DesktopClaude Code, Gemini CLI, Zed, Antigravity
Tools1540