Faucet logo

Faucet

Claimed

by faucetdb

Faucet is an open-source, single-binary server that turns any SQL database into a secure, governed REST API with role-based access control and native MCP support for applications and AI agents.

Set up this server

Compare serversMy Stack

01 / Choose your client

02 / Before you connect

Authentication is not specified. Check the project instructions before connecting.

Install the runtime required by the project and make it available to your client.

Project instructions

Use names from the project instructions, separated by commas. Enter names only, never secret values.

03 / Add the configuration

Source: generated from public install instructions

claude mcp add --transport stdio 'faucet' -- 'npx' '-y' 'mcp-remote' 'http://localhost:8080/mcp' '--header' 'X-API-Key:YOUR_API_KEY'

Run in your terminal after replacing any placeholders.

04 / Check it in your client

Open your client’s MCP settings and confirm the server connects and lists its tools. A copied configuration does not confirm a working connection.

ai-agentsapi-generatorclaudedatabasegolangllmmariadbmcpmcp-servermodel-context-protocolmysqlopenapioraclepostgresqlrbacrest-apiself-hostedsnowflakesql-serversqlite

More in Databases

Browse the full directory

Badge

Show this listing on your README and website

Get verified and your listing links back to your site with a do-follow link. The badge is optional while first-100 launch spots remain.

MCPVault: claimedGet the embed code

Security profile

Exposure: Extensive

Reaches several sensitive areas at once. Read the list before installing.

What this server can reach, from a static read of the shipped code. Nothing was executed and nothing here is a verdict: a browser tool has to run commands and an API wrapper has to call its API. Decide what fits your setup.

NVIDIA SkillSpector v2.11.0, MCPVault MCP-server policy. Scanned 3 days ago @ 6c374ae.

Detected

  • Talks to external services1 places

    Makes outbound requests. The hosts are listed so you can see where data goes.

    api.github.com

  • Runs shell commands10 places

    Spawns processes on your machine. Expected for command, browser and build tools.

  • Reads or writes other agents' configuration1 places

    Touches folders such as ~/.claude, ~/.codex or ~/.cursor, which hold settings and sometimes keys.

  • Accesses credential files5 places

    References SSH keys, cloud credential files or token stores.

  • Reads local configuration files4 places

    Loads a .env, .npmrc or config file. Normal for a server that needs an API key.

  • Uses elevated privileges1 places

    sudo, the Docker socket or a privileged container appear in shipped code.

  • Installs itself to run later1 places

    Writes startup entries, cron jobs or state files that outlive the session.

  • Contains instructions aimed at AI agents3 places

    Text in code or agent-facing files that steers a model. Worth reading before you trust it.

  • Runs unpinned packages at runtime1 places

    Executes npx or uvx without a version, so a compromised upstream release would run.

Not detected: reads environment variables in bulk, sends conversation content outward, matches a known malicious pattern.

Dependencies with known advisories

  • picomatch 2.3.1 High, CVE-2026-33672, CVE-2026-33671
  • browserslist 4.28.1 High, CVE-2026-73088, CVE-2026-73089
  • nanoid 3.3.11 High, CVE-2026-67214, CVE-2026-67213, CVE-2026-73086
  • picomatch 4.0.3 High, CVE-2026-33672, CVE-2026-33671
  • postcss 8.5.6 High, CVE-2026-45623, GHSA-FXQJ-RQCC-2CMP, GHSA-QX2V-QP2M-JG93
  • rollup 4.57.1 High, GHSA-MW96-CPMX-2VGC
  • source-map-js 1.2.1 High, GHSA-68FV-2MGG-JV7Q
  • vite 7.3.1 High, GHSA-4W7W-66W2-5VF9, GHSA-587H-7WMJ-H5PM, GHSA-698V-4R3X-3VCV

3 more in the owner dashboard.

Left out of the profile

45 pattern matches in documentation, configuration or CI files were recorded but are not part of the profile, because they do not run when the server does. The owner dashboard lists them.

How the profile works Maintainers see file, line and a fix for each item in their dashboard.

8 of 8 tools

Documented tools (8)

From project documentation. A server handshake does not verify each tool’s description or behavior.

faucet_delete

Delete records

faucet_describe_table

Get column names, types, and constraints

faucet_insert

Insert new records

faucet_list_services

List all connected databases

faucet_list_tables

List tables in a database

faucet_query

Query records with filters, ordering, pagination

faucet_raw_sql

Execute raw SQL (admin only)

faucet_update

Update existing records

Tool change history

Compared across complete checks of the same configuration. Tools were listed, not invoked. Input-schema changes are not measured here.

No complete tool checks yet.

FAQ

Questions about Faucet MCP Server

How do I connect Faucet MCP Server to Claude?
Run `claude mcp add faucet -- npx -y mcp-remote http://localhost:8080/mcp --header X-API-Key:YOUR_API_KEY` in Claude Code, or add the same command and arguments under mcpServers in Cursor's mcp.json or Claude Desktop's claude_desktop_config.json, then restart the client. The blocks above are ready to paste.
Is Faucet MCP Server free?
The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
What can Faucet MCP Server do?
Faucet MCP Server documents 8 tools to the agent, including faucet_delete, faucet_describe_table, faucet_insert. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.