mcp-db-analyzer 0.2.4 → 0.2.6

package/README.md

@@ -376,6 +376,13 @@ Analyze PostgreSQL VACUUM maintenance status. Checks dead tuple ratios, vacuum s
 - **Connection analysis**: `analyze_connections` is PostgreSQL/MySQL only. Not available for SQLite databases.
 - **Vacuum analysis**: `analyze_vacuum` is PostgreSQL only. For MySQL, use `OPTIMIZE TABLE` or `analyze_table_bloat`.
 
+## Part of the MCP Java Backend Suite
+
+- [mcp-spring-boot-actuator](https://www.npmjs.com/package/mcp-spring-boot-actuator) — Spring Boot health, metrics, and bean analysis
+- [mcp-jvm-diagnostics](https://www.npmjs.com/package/mcp-jvm-diagnostics) — Thread dump and GC log analysis
+- [mcp-redis-diagnostics](https://www.npmjs.com/package/mcp-redis-diagnostics) — Redis memory, slowlog, and client diagnostics
+- [mcp-migration-advisor](https://www.npmjs.com/package/mcp-migration-advisor) — Flyway/Liquibase migration risk analysis
+
 ## License
 
 MIT

package/build/analyzers/query.js

@@ -10,7 +10,9 @@ export async function explainQuery(sql, analyze = false) {
     // EXPLAIN ANALYZE actually executes the query, so we must reject anything
     // that could modify data — including CTEs with write operations.
     if (analyze) {
-        const upperSql = sql.trim().toUpperCase();
+        // Strip single-quoted string literals before scanning for DML keywords so that
+        // a query like `SELECT ... WHERE status = 'DELETE me'` is not falsely rejected.
+        const upperSql = sql.trim().toUpperCase().replace(/'[^']*'/g, "''");
         const DML_KEYWORDS = ["INSERT", "UPDATE", "DELETE", "DROP", "ALTER", "TRUNCATE", "CREATE", "GRANT", "REVOKE", "COPY"];
         const containsDml = DML_KEYWORDS.some((kw) => upperSql.includes(kw + " ") || upperSql.includes(kw + "\n") || upperSql.includes(kw + "\t") || upperSql.endsWith(kw));
         if (containsDml) {
@@ -235,6 +237,16 @@ function collectWarnings(node) {
     if (node["Sort Method"] === "external merge") {
         warnings.push(`**Disk sort** detected. Increase \`work_mem\` or add an index to avoid sorting.`);
     }
+    // Stale statistics: actual rows deviate significantly from planner estimate
+    if (node["Actual Rows"] !== undefined &&
+        node["Plan Rows"] > 0 &&
+        node["Actual Rows"] > 0) {
+        const ratio = node["Actual Rows"] / node["Plan Rows"];
+        if (ratio > 10 || ratio < 0.1) {
+            const relation = node["Relation Name"] ?? node["Node Type"];
+            warnings.push(`**Stale statistics** on \`${relation}\`: planner estimated ${node["Plan Rows"]} rows but got ${node["Actual Rows"]} (${ratio > 1 ? ratio.toFixed(0) + "× over" : (1 / ratio).toFixed(0) + "× under"}estimate). Run \`ANALYZE ${node["Relation Name"] ?? ""}\` to refresh table statistics.`);
+        }
+    }
     if (node.Plans) {
         for (const child of node.Plans) {
             warnings.push(...collectWarnings(child));

package/build/analyzers/schema.js

@@ -187,13 +187,16 @@ export async function inspectTable(tableName, schema = "public") {
     return lines.join("\n");
 }
 async function inspectTableSqlite(tableName) {
-    const cols = await query(`PRAGMA table_info("${tableName}")`);
+    // Escape double-quote characters so a table name containing `"` (e.g. `weird"table`)
+    // does not break the PRAGMA queries or the row-count SELECT.
+    const escaped = tableName.replace(/"/g, '""');
+    const cols = await query(`PRAGMA table_info("${escaped}")`);
     if (cols.rows.length === 0) {
         return `Table '${tableName}' not found.`;
     }
     const lines = [`## Table: main.${tableName}\n`];
     // Row count
-    const countResult = await query(`SELECT count(*) as cnt FROM "${tableName}"`);
+    const countResult = await query(`SELECT count(*) as cnt FROM "${escaped}"`);
     lines.push(`- **Rows**: ${countResult.rows[0]?.cnt ?? 0}`);
     lines.push("");
     lines.push("### Columns\n");
@@ -203,7 +206,7 @@ async function inspectTableSqlite(tableName) {
         lines.push(`| ${col.cid + 1} | ${col.name} | ${col.type || 'ANY'} | ${col.notnull ? 'NO' : 'YES'} | ${col.dflt_value ?? '-'} | ${col.pk ? 'YES' : '-'} |`);
     }
     // Foreign keys
-    const fks = await query(`PRAGMA foreign_key_list("${tableName}")`);
+    const fks = await query(`PRAGMA foreign_key_list("${escaped}")`);
     if (fks.rows.length > 0) {
         lines.push("\n### Foreign Keys\n");
         lines.push("| Column | References |");
@@ -213,13 +216,13 @@ async function inspectTableSqlite(tableName) {
         }
     }
     // Indexes
-    const indexes = await query(`PRAGMA index_list("${tableName}")`);
+    const indexes = await query(`PRAGMA index_list("${escaped}")`);
     if (indexes.rows.length > 0) {
         lines.push("\n### Indexes\n");
         lines.push("| Name | Unique | Columns |");
         lines.push("|------|--------|---------|");
         for (const idx of indexes.rows) {
-            const idxCols = await query(`PRAGMA index_info("${idx.name}")`);
+            const idxCols = await query(`PRAGMA index_info("${idx.name.replace(/"/g, '""')}")`);
             const colNames = idxCols.rows.map(c => c.name).join(", ");
             lines.push(`| ${idx.name} | ${idx.unique ? 'YES' : 'NO'} | ${colNames} |`);
         }

package/build/analyzers/slow-queries.js

@@ -119,6 +119,20 @@ async function analyzeMysqlSlowQueries(limit) {
             const truncated = r.DIGEST_TEXT.length > 80 ? r.DIGEST_TEXT.slice(0, 77) + "..." : r.DIGEST_TEXT;
             sections.push(`| ${i + 1} | ${r.AVG_TIMER_WAIT.toFixed(1)}ms | ${r.SUM_TIMER_WAIT.toFixed(0)}ms | ${r.COUNT_STAR} | \`${truncated.replace(/\|/g, "\\|")}\` |`);
         }
+        // Recommendations
+        sections.push("");
+        sections.push("### Recommendations");
+        const highCallSlow = result.rows.filter((r) => r.COUNT_STAR > 100 && r.AVG_TIMER_WAIT > 100);
+        if (highCallSlow.length > 0) {
+            sections.push(`- **${highCallSlow.length} high-impact queries** — called >100 times with >100ms avg. Prioritize these for optimization.`);
+        }
+        const fewRowsSlow = result.rows.filter((r) => r.AVG_TIMER_WAIT > 50 && r.SUM_ROWS_SENT / Math.max(r.COUNT_STAR, 1) < 10);
+        if (fewRowsSlow.length > 0) {
+            sections.push(`- **${fewRowsSlow.length} queries returning few rows but slow** — likely missing indexes. Use \`explain_query\` to check.`);
+        }
+        if (highCallSlow.length === 0 && fewRowsSlow.length === 0) {
+            sections.push("- No critical patterns detected. Monitor trends over time.");
+        }
         return sections.join("\n");
     }
     catch {

package/build/index.js

@@ -1,7 +1,10 @@
 #!/usr/bin/env node
+import { createRequire } from "module";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
+const require = createRequire(import.meta.url);
+const { version: PKG_VERSION } = require("../package.json");
 import { listTables, inspectTable } from "./analyzers/schema.js";
 import { analyzeIndexUsage, findMissingIndexes } from "./analyzers/indexes.js";
 import { explainQuery } from "./analyzers/query.js";
@@ -15,7 +18,7 @@ import { closePool, initDriver, setConnectionTimeoutMs } from "./db.js";
 import { formatToolError } from "./errors.js";
 // Handle --help
 if (process.argv.includes("--help") || process.argv.includes("-h")) {
-    console.log(`mcp-db-analyzer v0.1.0 — MCP server for database analysis
+    console.log(`mcp-db-analyzer v${PKG_VERSION} — MCP server for database analysis
 
 Usage:
   mcp-db-analyzer [options]
@@ -68,7 +71,7 @@ function detectDriver() {
 }
 const server = new McpServer({
     name: "mcp-db-analyzer",
-    version: "0.1.0",
+    version: PKG_VERSION,
 });
 // Shared Zod parameter for connection timeout
 const timeoutParam = z

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "mcp-db-analyzer",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "description": "MCP server for PostgreSQL, MySQL, and SQLite schema analysis, index optimization, and query plan inspection",
+  "mcpName": "io.github.dmitriusan/mcp-db-analyzer",
   "author": "Dmytro Lisnichenko",
   "type": "module",
   "main": "./build/index.js",