{
  "name": "io.github.googleapis/mcp-toolbox",
  "description": "MCP Toolbox for Databases (formerly GenAI Toolbox) is the official open-source MCP server from the `googleapis` GitHub organization that wraps an enterprise database stack behind one MCP. A single Go binary speaks Postgres, MySQL, SQL Server, Oracle, MongoDB, Redis, Elasticsearch, CockroachDB, ClickHouse, Couchbase, Neo4j, Snowflake, Trino, AlloyDB, BigQuery, Cloud SQL, Spanner, and Firestore. Tools are defined declaratively in a `tools.yaml` config — start with the prebuilt `list_tables` / `execute_sql` / schema-exploration tools, then layer in custom NL2SQL or RAG tools per data source as the agent matures.",
  "status": "active",
  "version": "latest",
  "_meta": {
    "com.top-mcps/lastVerified": "2026-06-15",
    "com.top-mcps/score": {
      "value": 92,
      "rubricVersion": "2026-04",
      "lastComputed": "2026-06-22T09:44:49.010Z",
      "methodology": "https://top-mcps.com/about/methodology"
    },
    "com.top-mcps/stats": {
      "fetchedAt": "2026-06-22T09:44:48.771Z",
      "githubStars": 15627,
      "lastCommitAt": "2026-06-16T09:08:46Z"
    }
  },
  "repository": {
    "url": "https://github.com/googleapis/mcp-toolbox",
    "source": "github"
  },
  "homepage": "https://googleapis.github.io/mcp-toolbox/",
  "author": {
    "name": "Google (googleapis)"
  },
  "packages": [
    {
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "identifier": "install",
      "version": "latest",
      "transport": {
        "type": "stdio"
      },
      "runtimeArguments": [
        {
          "type": "positional",
          "value": "mcp-toolbox"
        },
        {
          "type": "positional",
          "value": "&&"
        },
        {
          "type": "positional",
          "value": "toolbox"
        },
        {
          "type": "positional",
          "value": "--tools-file"
        },
        {
          "type": "positional",
          "value": "tools.yaml"
        }
      ]
    }
  ],
  "capabilities": {
    "security": {
      "scope": "read-write",
      "sandbox": "Tools are explicitly declared in `tools.yaml`. Only the queries you define are callable by the agent — there is no implicit `execute_sql` unless you add it. Connections use the DB host's native auth (Postgres roles, BigQuery IAM, MongoDB users, etc.).",
      "gotchas": [
        "A generic `execute_sql` tool in `tools.yaml` is the same risk surface as direct DB access — only add it for read-only DB users on dev/staging.",
        "IAM-bound Google Cloud sources inherit the service account or user credentials of the running binary — scope the binary's identity tightly, not your personal account.",
        "The streamable-HTTP endpoint (`:5000/mcp`) binds to localhost by default; if you expose it on a network, gate it behind auth at the network or proxy layer."
      ]
    }
  },
  "_links": {
    "html": "https://top-mcps.com/mcp/google-mcp-toolbox",
    "markdown": "https://top-mcps.com/mcp/google-mcp-toolbox.md",
    "methodology": "https://top-mcps.com/about/methodology"
  }
}