Let Claude Code read your production database — even a write disguised as SELECT gets refused

说明与用途

Claude Code 可以使用 dbboard-mcp 安全地读取生产数据库，dbboard-mcp 通过 SQL 解析和数据库只读模式强制只读访问，保护密码并限制结果。

问题

Enabling an AI agent to safely read from a production database without risking accidental writes.

结果

Agents can query production databases safely; write attempts are blocked by parsing and read‑only transactions, passwords stay in the OS keychain, and results are bounded.

工作流

• 1. Download dbboard-mcp for your OS.
• 2. Add the mcp to Claude with claude mcp add dbboard --scope user -- "<path>".
• 3. Configure database connections in the desktop app.
• 4. Use Claude to list tables, describe schemas, and run read queries.
• 5. Verify that write attempts are rejected by the parser or the database read‑only transaction.

证据

dbboard is an open-source desktop database client with an MCP server that gives Claude Code read-only access to Postgres, MySQL, Turso / libSQL, Cloudflare D1, MongoDB and Firestore — enforced by the database, not by a keyword filter.

来源

Passwords never reach the agent. They stay in the OS keychain.

来源

run_read_query DELETE FROM orders WHERE quantity = 1 → query failed: not a single read-only statement: only read-only SELECT / WITH / EXPLAIN statements are allowed

来源

Postgres refuses it, because the transaction itself is read-only.

来源