Back to Browse

Dataparity MCP Server

Developer ToolsUse Caution4.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

Cross-database data diff and reconciliation for AI agents, with a portable row hash

About

Cross-database data diff and reconciliation for AI agents, with a portable row hash

Security Report

4.0
Use Caution4.0High Risk

Dataparity is a read-only cross-database diff tool with credentials sourced from config or environment variables and no bundled network exfiltration. The main concern is that the MCP dataparity_diff tool passes the model-supplied `where` argument directly into raw SQL for both sides, which contradicts the README's read-only and never-reaches-the-model claims and creates a prompt-injection path to arbitrary SQL reads. The score is held below 7.0 because of this exposure, though the rest of the visible code is clean. Supply chain analysis found 2 known vulnerabilities in dependencies (1 critical, 0 high severity). Package verification found 1 issue.

6 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

What You'll Need

Set these up before or after installing:

DATAPARITY_PROD_CONNECTION_STRINGRequired
DATAPARITY_MYSQL_PASSWORDRequired

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-arif-js-dataparity": {
      "env": {
        "DATAPARITY_MYSQL_PASSWORD": "your-dataparity-mysql-password-here",
        "DATAPARITY_PROD_CONNECTION_STRING": "your-dataparity-prod-connection-string-here"
      },
      "args": [
        "-y",
        "dataparity"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!