M
MCP Directory CURATED DIRECTORY
911 MCP servers indexed
中文
← Back to directory
COMPARE UP TO 4 SERVERS

Compare MCP servers

Compare scores, permissions, risks, and fit in one decision-focused table.

DimensionBigQuery MCP ServerSecure, read-only access to BigQuery for LLMs.DBHubBytebase's official, minimalist two-tool database MCP server
FMRS62 / 100 · C74 / 100 · B
Reliability8 / 2013 / 20
Security and permissions16 / 2013 / 20
Maintenance10 / 2016 / 20
Documentation15 / 2015 / 20
Setup experience13 / 2017 / 20
Best for
  • Developers and analysts who want to query BigQuery quickly via AI assistants
  • Organizations that need to prevent AI agents from modifying data
  • Environments with sensitive data that require field-level access restrictions
  • Scenarios wanting the smallest possible tool count and lowest context-window overhead for database access
  • Cases needing to grant non-technical teammates safe, read-only database access
Not for
  • Scenarios requiring write, update, or delete operations
  • Users who need unrestricted access to all columns
  • Strict security environments that cannot tolerate data leaving the network (since results are sent to LLM providers)
  • Scenarios needing database administration operations (creating indexes, altering schema) rather than just querying (DBHub is positioned as a query tool, not a DBA management tool)
Required permissions
  • BigQuery read permissions (e.g., roles/bigquery.user or roles/bigquery.dataViewer)
  • For service account auth, access to the service account key file
  • For advanced features, permission to list datasets and tables, and run dry-run queries
  • Requires a database connection string (DSN), which may contain sensitive credentials
  • execute_sql can run arbitrary SQL (including writes) by default — must be constrained via read-only mode or the underlying database account's own permissions
Risks and side effects
  • Data exfiltration: query results are sent to LLM providers (Anthropic, OpenAI) and may leave your network
  • Despite field restrictions, AI agents may attempt to infer data through crafted queries
  • Misconfiguration may weaken restrictions, e.g., incorrectly setting preventedFields or maximum bytes billed
  • Under default settings, if the connected database account has write access, execute_sql could let the assistant perform an unintended write or delete — pair with a read-only database account in production
  • The DSN contains a plaintext password — pay attention to the access permissions on wherever the config is stored
Supported clientsClaude Desktop, Claude CodeClaude Desktop, Claude Code, VS Code, Cursor, Zed
Tools02