
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
A simple STDIO MCP server that executes raw SQL queries against SQL Server, SQLite, PostgreSQL, MySQL, and MariaDB. Use at your own risk. Always manually approve queries.
Raw SQL MCP is a STDIO MCP server for executing raw SQL against SQL Server.
[!IMPORTANT] Use it carefully. The server does not protect you from destructive queries, expensive queries, SQL injection, missing pagination, or unsafe data exposure. Always review and approve queries before running them.

Run the server with dnx:
dnx RawSqlMcp
For a specific version:
dnx RawSqlMcp@0.0.2
Package: RawSqlMcp on NuGet
Connection strings are configured with environment variables under RawSqlMcp__ConnectionStrings__.
Configure the default SQL Server connection string:
export RawSqlMcp__ConnectionStrings__Default="Server=localhost,1433;Database=master;User Id=sa;Password=Your_password123;TrustServerCertificate=True"
Add more named databases by changing the final segment:
export RawSqlMcp__ConnectionStrings__Reporting="Server=localhost,1433;Database=Reporting;User Id=sa;Password=Your_password123;TrustServerCertificate=True"
Optional command timeout, in seconds:
export RawSqlMcp__CommandTimeout=30
Register the server in an MCP client as a STDIO server:
{
"servers": {
"raw-sql-mcp": {
"command": "dnx",
"args": ["RawSqlMcp"],
"env": {
"RawSqlMcp__ConnectionStrings__Default": "Server=localhost,1433;Database=master;User Id=sa;Password=Your_password123;TrustServerCertificate=True"
}
}
}
}
The server exposes tools for listing configured database names, reading SQL Server schema metadata, and executing raw, parameterized, and scalar SQL queries.

FAQs
A simple STDIO MCP server that executes raw SQL queries against SQL Server, SQLite, PostgreSQL, MySQL, and MariaDB. Use at your own risk. Always manually approve queries.
We found that RawSqlMcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.