@dbx-app/mcp-server 0.4.5 → 0.4.6

package/README.md

@@ -10,7 +10,7 @@ MCP server for [DBX](https://github.com/t8y2/dbx) — lets AI agents (Claude Cod
 - **8 tools** — List/add/remove connections, list tables, describe table, get schema context, execute SQL, open table in DBX UI
 - **Connection pooling** — Reuses database connections across queries
 - **Direct execution** — PostgreSQL, MySQL, SQLite, and compatible databases (Doris, StarRocks, etc.) can run without opening DBX
-- **Read-only by default** — SQL execution blocks write and dangerous statements unless explicitly enabled
+- **Writes enabled by default** — regular `INSERT` / `UPDATE` / `DELETE` statements work out of the box, while dangerous SQL stays blocked unless explicitly enabled
 - **DBX UI integration** — Open tables directly in the DBX desktop app from your AI agent
 
 ## Quick Start
@@ -92,10 +92,12 @@ See the [DBX CLI README](../cli/README.md) for command details.
 
 ## SQL Safety
 
-`dbx_execute_query` accepts multiple SQL statements and executes them one at a time after checking each statement. It is read-only by default. To allow write statements such as `INSERT` or `UPDATE`, set:
+`dbx_execute_query` accepts multiple SQL statements and executes them one at a time after checking each statement. Regular write statements such as `INSERT`, `UPDATE`, and `DELETE ... WHERE ...` are allowed by default.
+
+If you need to force a read-only MCP session, set:
 
 ```bash
-DBX_MCP_ALLOW_WRITES=1
+DBX_MCP_ALLOW_WRITES=0
 ```
 
 Dangerous statements such as `DROP`, `TRUNCATE`, and `ALTER` remain blocked unless you also set:
@@ -145,7 +147,7 @@ MIT
 - **8 个工具** — 列出/添加/删除连接、列出表、查看表结构、获取 Schema 上下文、执行 SQL、在 DBX 中打开表
 - **连接池** — 跨查询复用数据库连接
 - **直接执行** — PostgreSQL、MySQL、SQLite 及兼容数据库（Doris、StarRocks 等）无需打开 DBX 即可查询
-- **默认只读** — SQL 执行默认拦截写操作和危险语句
+- **默认允许常规写入** — `INSERT` / `UPDATE` / `DELETE` 可直接执行，危险语句仍需显式开启
 - **DBX UI 联动** — 从 AI 助手直接在 DBX 桌面端打开表
 
 ### 快速开始
@@ -213,10 +215,12 @@ dbx query local "select 1" --json
 
 ### SQL 安全
 
-`dbx_execute_query` 支持多条 SQL 语句，会逐条完成安全检查并依次执行。默认只读。若要允许 `INSERT`、`UPDATE` 等写操作，设置：
+`dbx_execute_query` 支持多条 SQL 语句，会逐条完成安全检查并依次执行。默认允许常规写操作，例如 `INSERT`、`UPDATE`、`DELETE ... WHERE ...`。
+
+如果你希望 MCP 会话强制退回只读，可设置：
 
 ```bash
-DBX_MCP_ALLOW_WRITES=1
+DBX_MCP_ALLOW_WRITES=0
 ```
 
 `DROP`、`TRUNCATE`、`ALTER` 等危险语句仍会被拦截，除非额外设置：

package/dist/index.d.ts

@@ -2,7 +2,7 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { type Backend } from "@dbx-app/node-core";
 export declare const DBX_MCP_PACKAGE_VERSION: string;
-export declare const DBX_CONNECTION_TYPE_DESCRIPTION = "Database type: postgres, mysql, sqlite, redis, duckdb, clickhouse, sqlserver, mongodb, oracle, elasticsearch, doris, starrocks, redshift, dameng, kingbase, highgo, vastbase, goldendb, gaussdb, yashandb, databricks, saphana, teradata, vertica, firebird, exasol, opengauss, oceanbase-oracle, gbase, h2, snowflake, trino, hive, db2, informix, neo4j, cassandra, bigquery, kylin, sundb, tdengine, xugu, jdbc, access";
+export declare const DBX_CONNECTION_TYPE_DESCRIPTION = "Database type: postgres, mysql, sqlite, redis, duckdb, clickhouse, sqlserver, mongodb, oracle, elasticsearch, doris, starrocks, redshift, dameng, kingbase, highgo, vastbase, goldendb, gaussdb, yashandb, databricks, saphana, teradata, vertica, firebird, exasol, opengauss, oceanbase-oracle, gbase, h2, snowflake, trino, hive, db2, informix, iris, neo4j, cassandra, bigquery, kylin, sundb, tdengine, xugu, jdbc, access";
 export declare function createDbxMcpServer(backend: Backend, options?: {
     isWebMode?: boolean;
 }): McpServer;

package/dist/index.js

@@ -23,7 +23,7 @@ function formatQueryToolResult(result, title) {
     const rows = result.rows.map((r) => result.columns.map((c) => formatCell(r[c])));
     return text(`${prefix}${mdTable(result.columns, rows)}\n\n${result.row_count} row(s)`);
 }
-export const DBX_CONNECTION_TYPE_DESCRIPTION = "Database type: postgres, mysql, sqlite, redis, duckdb, clickhouse, sqlserver, mongodb, oracle, elasticsearch, doris, starrocks, redshift, dameng, kingbase, highgo, vastbase, goldendb, gaussdb, yashandb, databricks, saphana, teradata, vertica, firebird, exasol, opengauss, oceanbase-oracle, gbase, h2, snowflake, trino, hive, db2, informix, neo4j, cassandra, bigquery, kylin, sundb, tdengine, xugu, jdbc, access";
+export const DBX_CONNECTION_TYPE_DESCRIPTION = "Database type: postgres, mysql, sqlite, redis, duckdb, clickhouse, sqlserver, mongodb, oracle, elasticsearch, doris, starrocks, redshift, dameng, kingbase, highgo, vastbase, goldendb, gaussdb, yashandb, databricks, saphana, teradata, vertica, firebird, exasol, opengauss, oceanbase-oracle, gbase, h2, snowflake, trino, hive, db2, informix, iris, neo4j, cassandra, bigquery, kylin, sundb, tdengine, xugu, jdbc, access";
 export function createDbxMcpServer(backend, options = {}) {
     const isWebMode = options.isWebMode ?? !!process.env.DBX_WEB_URL;
     const server = new McpServer({
@@ -95,7 +95,9 @@ export function createDbxMcpServer(backend, options = {}) {
             }
             if (results.length === 1)
                 return formatQueryToolResult(results[0]);
-            return text(results.map((result, index) => formatQueryToolResult(result, `Statement ${index + 1}`).content[0].text).join("\n\n"));
+            return text(results
+                .map((result, index) => formatQueryToolResult(result, `Statement ${index + 1}`).content[0].text)
+                .join("\n\n"));
         }
         catch (e) {
             const msg = e instanceof Error ? e.message : String(e);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dbx-app/mcp-server",
-  "version": "0.4.5",
+  "version": "0.4.6",
   "mcpName": "io.github.t8y2/dbx",
   "description": "MCP server for DBX — query databases from Claude Code, Cursor, and other AI agents",
   "type": "module",
@@ -34,7 +34,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.1",
     "zod": "^3.25.20",
-    "@dbx-app/node-core": "^0.4.5"
+    "@dbx-app/node-core": "^0.4.6"
   },
   "devDependencies": {
     "@types/node": "^22.15.21",
@@ -43,7 +43,7 @@
   },
   "scripts": {
     "start": "tsx src/index.ts",
-    "test": "pnpm --filter @dbx-app/node-core build && tsx --test tests/*.test.ts",
+    "test": "pnpm --filter @dbx-app/mcp-server build && tsx --test tests/*.test.ts",
     "build": "pnpm --filter @dbx-app/node-core build && tsc"
   }
 }

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/t8y2/dbx",
     "source": "github"
   },
-  "version": "0.4.5",
+  "version": "0.4.6",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@dbx-app/mcp-server",
-      "version": "0.4.5",
+      "version": "0.4.6",
       "transport": {
         "type": "stdio"
       }