@modelcontextprotocol/server-sqlite

Anthropic's official reference MCP server for SQLite databases. Gives agents full read-write SQL access to local SQLite database files, including schema inspection and query execution.

Evaluated Mar 06, 2026 (0d ago) vcurrent
Homepage ↗ Repo ↗ Databases sqlite sql database mcp anthropic official local embedded
⚙ Agent Friendliness
87
/ 100
Can an agent use this?
🔒 Security
76
/ 100
Is it safe for agents?
⚡ Reliability
84
/ 100
Does it work consistently?

Score Breakdown

⚙ Agent Friendliness

MCP Quality
87
Documentation
85
Error Messages
82
Auth Simplicity
100
Rate Limits
85

🔒 Security

TLS Enforcement
80
Auth Strength
65
Scope Granularity
65
Dep. Hygiene
90
Secret Handling
88

No access control within the database — full read-write. Secure by keeping the MCP server process on localhost only. Do not expose over network without additional auth layer.

⚡ Reliability

Uptime/SLA
80
Version Stability
88
Breaking Changes
88
Error Recovery
80
AF Security Reliability

Best When

You need a simple, zero-config local database for agent state. Read-write unlike the Postgres server. Ideal for prototyping and single-machine deployments.

Avoid When

Multiple agents write concurrently, data exceeds ~10GB, or you need cross-machine access.

Use Cases

  • Agents with persistent local state storage (no external DB required)
  • Data analysis on local SQLite files (e.g., browser history, app databases)
  • Prototyping agent-powered data workflows before scaling to PostgreSQL
  • Building agent tools that need a lightweight embedded database
  • Reading and querying data exported to SQLite from other sources

Not For

  • Production workloads with concurrent writes (SQLite has write serialization)
  • Large datasets (>10GB practical limit for SQLite)
  • Multi-machine deployments (SQLite file is single-machine local)

Interface

REST API
No
GraphQL
No
gRPC
No
MCP Server
Yes
SDK
No
Webhooks
No

Authentication

Methods: none
OAuth: No Scopes: No

No authentication. Database file path specified at startup. Anyone with access to the MCP server has full read-write access to the database.

Pricing

Model: open_source
Free tier: Yes
Requires CC: No

MIT licensed, free. Requires Python runtime. SQLite is bundled with Python standard library.

Agent Metadata

Pagination
none
Idempotent
Partial
Retry Guidance
Not documented

Known Gotchas

  • No row limit on queries — large tables returned in full can exhaust context window
  • Concurrent writes from multiple agents will serialize (SQLite WAL mode helps but doesn't eliminate blocking)
  • Transactions not automatically committed — if MCP server crashes mid-transaction, data is rolled back
  • No connection pooling — each request creates/uses a new connection
  • SQLite type system is flexible (type affinity) — agents may get unexpected column types

Alternatives

Full Evaluation Report

Detailed scoring breakdown, competitive positioning, security analysis, and improvement recommendations for @modelcontextprotocol/server-sqlite.

$99

Scores are editorial opinions as of 2026-03-06.

5178
Packages Evaluated
26151
Need Evaluation
173
Need Re-evaluation
Community Powered