Hi there,
Week two. The site now lists 67 MCP servers and AI agents across the data stack (up from 63), and 36 of them have been checked by hand against their docs. Here's what changed.
New this week
DBHub (Bytebase, SQL Server + more): a small multi-database server with just two tools by default (execute_sql and search_objects). Works with SQL Server, Postgres, MySQL, MariaDB, Oracle and SQLite. Heads up: execute_sql can write unless you set readonly = true for the tool in its TOML config. Read the review
OntoBricks (Databricks Labs): turns Unity Catalog tables into a knowledge graph and exposes it to agents over MCP as a separate Databricks App. You can switch tools off per domain. It's a Labs project, so there's no formal Databricks support. Read the review
PerformanceMonitor (Erik Darling, SQL Server): a free SQL Server monitor with a built-in MCP server. Agents can ask about waits, blocking, Query Store and plans. The tools answer from the monitor's own collected data, and no MCP tool runs SQL the agent wrote against your servers. Read the review
PerformanceStudio (Erik Darling, SQL Server): a free execution plan analyzer with an opt-in MCP server (13 tools). It runs on localhost only. It finds plan warnings and missing indexes, compares plans, and pulls top Query Store queries. Read the review
Notable releases
Tableau MCP (official): six releases since Oct 10, now at v4.27.2. Knowledge writes now have their own switch, separate from reads (v4.25.4). If you use scaffold-data-app, it needs the new tableau:packages:read scope, so existing users have to sign in again (v4.22.3). Read the review
pbix-mcp (community, Power BI): moved to v0.9.143. Read the review
Warnings
Copycat repos: since Oct 14, at least 22 new GitHub repos have shown up under random accounts. They copy Aaronontheweb/mssql-mcp's README word for word. Another 21 are near-identical "dbt-llm-agent" repos. We haven't proven they're malicious, but install from the original maintainer and check the owner before you run anything. See the original
powerbi-report-mcp is gone: the GitHub repo now returns a 404. We've flagged its listing until it comes back. See the listing
Databricks deadline, 12 days left: the legacy /api/2.0/mcp/genie endpoint shuts down Oct 31, 2026. Move to the Databricks managed MCP servers. Read the review
Tip of the week: read-only mode isn't a permission model
A server's "read-only" switch is a guardrail, not a permission. DBHub's own docs say it plainly: for agents, always connect with a least-privilege, read-only database user, and don't point a read-only tool at an admin login. On SQL Server, that means a dedicated login for the agent that's only in db_datareader on the databases it needs. Or for monitoring tools like PerformanceMonitor, give it VIEW SERVER STATE and nothing more. If the server's switch fails, the database still says no.
Your turn
Browse all 67 servers at dataagentstack.com/servers. Hit reply and tell me which servers you use, or which ones you want reviewed next.
Thanks,
Steve