Mcp Encrypted Sqlite
This server gives Claude direct access to SQLCipher 4 encrypted databases, the kind used by MoneyMoney, Signal, WhatsApp, KeePass, and 1Password for local storage. It exposes the full set of database operations: schema inspection (tables, columns, indexes), arbitrary SQL queries, and CRUD operations with built-in SQL injection protection. You pass it a database path and passphrase, optionally encrypted with AES-256-GCM and stored in macOS Keychain. Custom cipher profiles let you override the default SQLCipher 4 settings (page size, KDF iterations, HMAC algorithm). Runs via stdio using Java 21 and a modified SQLite JDBC driver, or pull the Docker image if you'd rather not manage dependencies.
- tools
- 7
- auth
- Secret needed
- transport
- STDIO
- env vars
- 2
- last updated
- Nov 30, 2025
Tools
7 toolsPublic tool metadata for what this MCP can expose to an agent.
list_tablesList all tables in the database. By default only table names, with `include_columns=true` also column details.
List all tables in the database. By default only table names, with `include_columns=true` also column details.
No parameter schema in public metadata yet.
get_table_dataRead data from a table with optional filtering, column selection, and pagination.
Read data from a table with optional filtering, column selection, and pagination.
No parameter schema in public metadata yet.
execute_sqlExecute arbitrary SQL statements (SELECT, INSERT, UPDATE, DELETE, DDL).
Execute arbitrary SQL statements (SELECT, INSERT, UPDATE, DELETE, DDL).
No parameter schema in public metadata yet.
insert_or_updatePerform UPSERT operations (INSERT or UPDATE on conflict).
Perform UPSERT operations (INSERT or UPDATE on conflict).
No parameter schema in public metadata yet.
delete_rowsDelete rows from a table based on filters.
Delete rows from a table based on filters.
No parameter schema in public metadata yet.
get_table_schemaRetrieves detailed schema information for a table (columns, indexes, foreign keys, constraints).
Retrieves detailed schema information for a table (columns, indexes, foreign keys, constraints).
No parameter schema in public metadata yet.
list_indexesLists all indexes of a table.
Lists all indexes of a table.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
DB_PATH*Path to the encrypted SQLite database file (inside container: /data/database.sqlite)
DB_PASSPHRASE*secretPassphrase for decrypting the database (or use encrypted: prefix for encrypted passphrases)
Readme
Encrypted SQLite MCP Server
MCP server for encrypted SQLite databases
A Model Context Protocol (MCP) server for working with encrypted SQLite databases using SQLCipher. This server provides tools to read database structures, query tables, and perform CRUD operations on encrypted SQLite databases.
Compatible with all MCP clients (Cursor, Claude Desktop, and others).
Works with encrypted databases from: MoneyMoney, 1Password, Signal, WhatsApp, Firefox, Telegram, KeePass, and other applications using SQLCipher encryption.
Features
Details
- Repository
- github.com/rosch100/mcp-encrypted-sqlite
- Website
- github.com/rosch100/mcp-encrypted-sqlite
- Category
- Databases
- Package
ghcr.io/rosch100/mcp-encrypted-sqlite:0.4.1- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active
More from rosch100
Related Databases MCP servers
View all
Microsoft Access Databaseunmateria/mcp-accessRead and edit Microsoft Access databases (.accdb/.mdb) - forms, VBA, tables, queries. Windows.61stars
Neo4j Mcp Canaryneo4j-labs/neo4j-mcp-canaryNeo4j MCP Canary — The canary goes first so the rest of us know what's coming3stars
SQL Sentinel MCP Servertkmawarire/sql-sentinelSQL Server monitoring and diagnostics for AI agents using Extended Events. No ODBC drivers required.3stars