
Security News
How AI Agents Expand the Software Supply Chain Attack Surface
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.
@connorbritain/mssql-mcp-writer
Advanced tools
MCP server for Microsoft SQL Server with read and data operations - no DDL/schema changes
Model Context Protocol server for Microsoft SQL Server with read and data operations.
Full data manipulation capabilities (INSERT, UPDATE, DELETE) with preview/confirm safeguards, but no DDL operations. Ideal for data engineers and ETL workflows where you need to modify data but want to prevent schema changes.
This package is a thin wrapper around @connorbritain/mssql-mcp-core, which contains all shared logic, tools, and governance features. The wrapper selects the "writer" tier and delegates to the core's startMcpServer() function. This design enables:
"we only allow mssql-mcp-writer in staging" is a compile-time guaranteeThe core library handles all SQL Server connections, tool dispatch, audit logging, and governance enforcement.
| Package | npm | Tools | Use Case |
|---|---|---|---|
| mssql-mcp-reader | @connorbritain/mssql-mcp-reader | 14 read-only | Analysts, auditors, safe exploration |
| mssql-mcp-writer (this) | @connorbritain/mssql-mcp-writer | 17 (reader + data ops) | Data engineers, ETL developers |
| mssql-mcp-server | @connorbritain/mssql-mcp-server | 20 (all tools) | DBAs, full admin access |
Config Builder — Visual wizard to generate your mcp_config.json and environments.json files.
| Category | Tools |
|---|---|
| Discovery | search_schema, describe_table, list_table, list_databases, list_environments |
| Profiling | profile_table, inspect_relationships, inspect_dependencies, explain_query |
| Data Read | read_data (SELECT only) |
| Data Write | insert_data, update_data, delete_data (with preview/confirm) |
| Scripts | list_scripts, run_script |
| Operations | test_connection, validate_environment_config |
Not included: create_table, create_index, drop_table (DDL operations)
npm install -g @connorbritain/mssql-mcp-writer@latest
{
"mcpServers": {
"mssql": {
"command": "npx",
"args": ["@connorbritain/mssql-mcp-writer@latest"],
"env": {
"SERVER_NAME": "127.0.0.1",
"DATABASE_NAME": "mydb",
"SQL_AUTH_MODE": "sql",
"SQL_USERNAME": "app_user",
"SQL_PASSWORD": "YourPassword123"
}
}
}
}
| Variable | Required | Notes |
|---|---|---|
SERVER_NAME | Yes | SQL Server hostname/IP |
DATABASE_NAME | Yes | Target database |
SQL_AUTH_MODE | sql, windows, or aad (default: aad) | |
SQL_USERNAME / SQL_PASSWORD | Required for sql/windows modes | |
READONLY | true disables write tools | |
ENVIRONMENTS_CONFIG_PATH | Path to multi-environment JSON config | |
SCRIPTS_PATH | Path to named SQL scripts directory | |
AUDIT_LOG_PATH | Custom audit log path |
All packages in the MSSQL MCP family share:
allowedTools, deniedTools, allowedSchemas, deniedSchemas, requireApproval${secret:NAME} placeholders for secure credential handlingupdate_data and delete_data show affected rows before executionFull documentation, configuration examples, and governance details are available in the main repository:
MSSQL MCP Server Documentation
MIT License. See LICENSE for details.
Repository: https://github.com/ConnorBritain/mssql-mcp-writer Issues: https://github.com/ConnorBritain/mssql-mcp-writer/issues npm: https://www.npmjs.com/package/@connorbritain/mssql-mcp-writer
FAQs
MCP server for Microsoft SQL Server with read and data operations - no DDL/schema changes
The npm package @connorbritain/mssql-mcp-writer receives a total of 402 weekly downloads. As such, @connorbritain/mssql-mcp-writer popularity was classified as not popular.
We found that @connorbritain/mssql-mcp-writer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.

Security News
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.