# SQLite MCP Sidecar

Runs alongside an existing SQLite database to grant an AI agent safe HTTP access while guarding tables against rogue queries and accidental deletions.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed · ★ 1
- Author: xakpc
- License: Apache-2.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/xakpc/sqlite-mcp-sidecar
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/mcp/sqlite-mcp-sidecar

## What it does

This sidecar runs on .NET 10 as an independent background companion next to your SQLite database. It exposes eight possible tools over Streamable HTTP according to your permission flags. Results come back formatted in TOON rather than standard JSON, keeping token overhead minimal. It expects a database file that already exists and will intentionally refuse to initialize a blank one.

Its main protection targets mistakes made by an agent that already holds write privileges. Modifying records via `update` and `delete` skips raw SQL statements in favor of flat key-value filters connected by `AND`. Every mutation requires an explicit `maxRows` cap that accounts for triggers and `ON DELETE CASCADE` actions. Exceeding that ceiling triggers an immediate rollback. Idempotent retries rely on a required `requestId` key.

Mounting the storage volume inside Docker demands write permissions even under a strict schema and read configuration. Without write access to the directory, SQLite WAL mode fails when attempting to touch the `-shm` helper file. Scaling instances is unsafe: rate limits and deduplication memory reside strictly within a single operating process.

## Requirements
- Needs: Docker
- Environment variables: `SQLITE_SIDECAR_DB`, `SQLITE_SIDECAR_TOKEN`, `SQLITE_SIDECAR_PERMISSIONS` — keys and tokens: ask the human for the values, never commit them or put them in shared files.

## Install

### Claude Code (native platform)

**Install**
- The MCP registry has no launch command for it: see the repository README

## When to use it
- inspect live database structure without revealing raw table contents
- query rows using token-efficient TOON table formatting
- execute record updates with a mandatory boundary on affected rows
- perform live database backups while host services continue writing

## Example prompts
- Fetch the schema for user tables and indexes from the production database
- Query the orders table for records where status equals failed
- Update the task row with id 54 to status done with a row limit of 1

## Similar
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89609
- [Scrapling MCP Server](https://affpapa.org/en/nevibecode/mcp/scrapling-mcp-server.md) — MCP server · ★ 89899
- [MCP Toolbox for Databases](https://affpapa.org/en/nevibecode/mcp/googleapis-mcp-toolbox-for-databases.md) — MCP server · ★ 16730
- [PostHog MCP Server](https://affpapa.org/en/nevibecode/mcp/posthog-mcp-server.md) — MCP server · ★ 40459
- [dbx](https://affpapa.org/en/nevibecode/mcp/dbx.md) — MCP server · ★ 27844
- [Metabase](https://affpapa.org/en/nevibecode/mcp/metabase.md) — MCP server · ★ 49863

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md