SQL Server MCP (Model Context Protocol) Server

This is a Model Context Protocol (MCP) server that connects to one or more SQL Server databases; designed to be used by Visual Studio Code as a Copilot Agent.

🚨 Recent Updates (November 2025)

Version 1.0.9.5 - Documentation Standardization & Tool Naming Consistency

Important: This version includes comprehensive documentation updates and tool naming standardization. All MCP tools now use consistent mssql_ prefixed names. Key improvements include:

• Standardized Tool Names: All tools now use mssql_ prefix (e.g., mssql_execute_query, mssql_get_table_metadata)
• Updated Documentation: All documentation files synchronized with actual implementation
• Enhanced Examples: C# client examples and console applications updated with correct tool names
• Test Suite Updates: All tests updated and passing with new tool naming conventions
• API Reference: Complete API documentation refresh with accurate tool specifications

Migration Note: While tool functionality remains unchanged, documentation and examples have been updated for consistency. See the RELEASE_NOTES.md for complete details.

---

🚨 Security Updates (November 2025)

Important: This project received significant security enhancements in November 2025. Please review the Security Update Documentation for:

• Enhanced multi-tier API key authentication system
• Role-based access control (master, admin, user keys)
• Connection-level security restrictions
• Encrypted API key storage
• Comprehensive test coverage for security features

Migration Required: Existing installations must configure authentication. See the Migration Guide for details.

Overview

This project implements an MCP server for SQL Server database connectivity, enabling VS Code and Copilot to interact with SQL databases via the Model Context Protocol.

Features include:

• SQL query execution
• Database metadata retrieval (tables, views, stored procedures, functions)
• Detailed schema information including primary/foreign keys
• Multi-key API authentication system with master and user-specific keys
• Connection string encryption with AES-256
• Key rotation and security management
• API key usage tracking and analytics
• Async/await for all database operations
• Robust logging with Serilog
• Clean architecture with separation of concerns
• Dependency injection for testable components
• Strongly-typed models for database metadata

How This Works

See How This Works for an overview of communication between Copilot, the LLM and this MSSQL Model Context Protocol Server.

API Endpoints

This server provides three types of MCP endpoints:

1. Standard MCP Endpoints: Accessible via the ModelContextProtocol.AspNetCore library