Project · MCP · Oracle · AI agents
oraclemcp
An MCP (Model Context Protocol) server that gives AI agents access to Oracle Database without the risk: read-only by default, a fail-closed SQL guard, OAuth 2.1, and a tamper-evident audit trail. Pure Rust, engine-free, stdio and streamable HTTP.
- Author
- Dipl.-Ing. Muhammed Durakovic
- Registry
- Listed in the official MCP registry as
io.github.MuhDur/oraclemcp - Crate
oraclemcpon crates.io- Source
- github.com/MuhDur/oraclemcp
- Driver
- Built on the original pure-Rust Oracle driver — no Instant Client
The problem
Connecting an LLM agent to a production database is easy. Making sure it can never drop a table, exfiltrate a schema or run an unbounded query is not. Most database MCP servers trust the model; oraclemcp does not.
How it stays safe
- Read-only by default — write capabilities require explicit, confirmation-gated operating levels.
- Fail-closed SQL guard — statements that cannot be proven safe are rejected, not attempted.
- Least privilege — governed access per tool and per operating level.
- OAuth 2.1 for remote use over streamable HTTP.
- Tamper-evident audit trail — every statement an agent runs can be reviewed afterwards.