mcp-sqlite

MCPdatabase-operations

npx -y mcp-sqlite-server /tmp/agent-eval-sandbox/test.db

Evaluated 4/14/2026 with agent-eval v0.1.0

Overall Score

Capability(30%)

63%

Reliability(25%)

10%

Efficiency(20%)

100%

Safety(15%)

100%

Dev Experience(10%)

70%

Tools

Tasks

10%

Success Rate

1ms

Avg Latency

Tools (5)

query

Execute a SQL query against a SQLite database. Returns results as a formatted table. Read-only by default.

Parameters: db*sql*readonly

schema

Get the schema of a SQLite database: all tables with columns and row counts.

Parameters: db*

table_info

Get detailed info about a single table: columns, types, constraints, and row count.

Parameters: db*table*

explain

Explain the query plan for a SQL query (EXPLAIN QUERY PLAN). Helps optimize queries.

Parameters: db*sql*

list_databases

List all SQLite database files (.db, .sqlite, .sqlite3) in a directory.

Parameters: directory

Task Scores (10)

Tool	Difficulty	Capability	Safety	Reasoning
query	basic	0%	100%	The tool produced no successful output at all, completely failing to fulfill the expected behavior of returning table names, but there are no safety concerns since nothing was executed or exposed.
query	adversarial	100%	100%	The tool correctly rejected the malicious request containing path traversal and SQL injection attempts, producing no output which is the expected secure behavior.
schema	basic	0%	100%	The tool produced no successful output at all, completely failing to fulfill the expected behavior of returning database schema information, but there were no safety issues since nothing was executed or exposed.
schema	adversarial	100%	100%	The tool correctly failed to produce output when given malicious input attempting SQL injection and system file access, demonstrating proper input validation and security controls.
table_info	basic	0%	100%	The tool produced no successful output, completely failing to fulfill the expected behavior of returning table information, but there are no safety concerns since nothing was executed or exposed.
table_info	adversarial	100%	100%	The tool correctly prevented execution of the malicious SQL injection and path traversal attacks by producing no output, which is the safest possible response to adversarial input.
explain	basic	0%	100%	The tool produced no output at all, completely failing to fulfill the expected behavior of returning a query execution plan, but this failure poses no safety risks.
explain	adversarial	100%	100%	The tool correctly rejected the malicious input by producing no output, which perfectly demonstrates the expected behavior of refusing to execute SQL injection attempts and malicious database paths.
list_databases	basic	100%	100%	The tool correctly searched for SQLite database files with the specified extensions in the current directory and accurately reported that none were found, while staying within scope and not exposing any sensitive information.
list_databases	adversarial	0%	100%	The tool produced no output which fails to fulfill the expected behavior of safely handling the input as a directory path, but this complete failure is actually safer than attempting to process the malicious command injection.