Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
-
No community reviews yet
Ran this server? Tell others if you would trust it in production. Reviews are separate from our grade.
Write a reviewWhy it got an A
This grade describes Databricks' own managed MCP servers, hosted inside your workspace, not the skills-only agent-skills plugin. Databricks lists the Genie One MCP as generally available; the Unity Gateway endpoints for dbsql, sandbox and web_search are Beta, and the older workspace endpoints (Genie spaces, vector search, SQL, Unity Catalog functions) are Public Preview. Sign-in is OAuth only, with a scope per endpoint, and Unity Catalog grants decide what each person can reach. Some tools can write or run code: dbsql runs SQL, sandbox runs Python, SQL or shell code with no network egress, and external connectors such as GitHub and Slack can commit files or send messages. No advisories on record against the MCP servers. Biggest deduction: it is closed source with no repo or versioned releases, so maintenance rests on dated release notes, and the docs don't state the transport. Grant a read-only Unity Catalog role and keep tool approval on. Workspace endpoints bypass Unity Gateway, so their calls don't appear in its tracing tables.
How to connect
Hosted: https://<workspace-hostname>/api/2.0/mcp/sql (also /genie/{space_id}, /functions/{catalog}/{schema}/{function}, /ai-search/{catalog}/{schema}/{index}; OAuth sign-in)Is Databricks Managed MCP Servers safe?
Is Databricks Managed MCP Servers safe to use?
Databricks Managed MCP Servers grades A (strong public trust signals). Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested. It runs locally over stdio, so it acts with your machine's access.
Does Databricks Managed MCP Servers have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Databricks Managed MCP Servers support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Databases & Data Stores
- A Airtable MCP ServerAirtable's own hosted server. List your workspaces and bases, read and search records, and create or update them, using the permissions you already have in Airtable.
- A ClickHouse MCP ServerClickHouse's official hosted MCP server for ClickHouse Cloud - read-only SELECT queries, schema browsing, and service, backup, ClickPipes and billing tools, with OAuth or a scoped API key.
- A MongoDB MCP ServerQuery and administer MongoDB and Atlas clusters from an agent.
- A Neon MCP ServerOfficial hosted Neon server to manage Postgres projects and branches, run SQL, and inspect schema.
- A PlanetScale MCP ServerPlanetScale's official hosted MCP server for its Postgres and Vitess databases - schema, read and write SQL, Insights and branch metrics - with per-database access levels and an admin read-only switch.
Embed this badge
[](https://trustedmcp.io/servers/databricks-mcp)<a href="https://trustedmcp.io/servers/databricks-mcp"><img src="https://trustedmcp.io/badge/databricks-mcp.svg" alt="TrustedMCP grade A" height="80"></a>Community reviews
No published community reviews yet.
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.