Back to Browse

The Nothing MCP Server

Developer ToolsModerate7.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Mr. Decoupler: a private seam between AI and any database. No SQL, only views you approve.

About

Mr. Decoupler: a private seam between AI and any database. No SQL, only views you approve.

Security Report

7.2
Moderate7.2Low Risk

The Nothing is a read-only database decoupling MCP server whose design deliberately limits the AI to schema metadata and human-approved views, with SQL-injection-resistant view handling, read-only transactions, and token auth enforced for HTTP mode with a data source. The main concerns are the naive regex-based read-only check in assertReadOnly, the truncated backend.js preventing full review of the remaining adapters, and the fact that the connection string is stored in plaintext in .env/env vars and passed to the subprocess, which are reasonable but worth noting. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

7 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

database

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Optional. Connection string (postgres://, mysql://, mariadb://, mssql://) or SQLite/CSV/TSV/JSONL path. If unset, uses DATABASE_URL or auto-detects in the project folder.Required

Environment variable: THE_NOTHING_DB

Optional. Path to a JSON file of read-only views you approve.Optional

Environment variable: THE_NOTHING_VIEWS

Optional. Row cap per view (default 50).Optional

Environment variable: THE_NOTHING_MAX_ROWS

Optional. Set to off to remove the read_view tool (resources only).Optional

Environment variable: THE_NOTHING_VIEW_TOOL

Optional. Set to off to disable auto-detecting DATABASE_URL, .env or a data file in the project folder.Optional

Environment variable: THE_NOTHING_AUTODETECT

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-meador793-the-nothing": {
      "env": {
        "THE_NOTHING_DB": "your-the-nothing-db-here",
        "THE_NOTHING_VIEWS": "your-the-nothing-views-here",
        "THE_NOTHING_MAX_ROWS": "your-the-nothing-max-rows-here",
        "THE_NOTHING_VIEW_TOOL": "your-the-nothing-view-tool-here",
        "THE_NOTHING_AUTODETECT": "your-the-nothing-autodetect-here"
      },
      "args": [
        "-y",
        "the-nothing-mcp"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!