← MCP Registry Integrity Report
com.googleapis.sqladmin/mcp
Verdict: CRITICAL findings present. Endpoint https://sqladmin.googleapis.com/mcp. Tools now: 15 (15 ever seen). Changes recorded: 15. Findings: 25 high, 13 low, 1 critical. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
clone_instance · create_backup · create_instance · create_user · execute_sql · execute_sql_readonly · get_instance · get_operation · import_data · list_instances · list_users · postgres_upgrade_precheck · restore_backup · update_instance · update_user
Findings (51)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | get_instance | model_directed_instruction | high | /TLS is enforced in database connections. If you must use the `require_ssl` flag for backward compatibility, then only |
| 2026-10-22 | get_instance | secret_material_reference | high | PEM representation of the replica's private key. The corresponding public key is encoded in the client's certifi |
| 2026-10-22 | get_instance | url_in_description | low | https://tools.ietf.org/html/rfc3339 |
| 2026-10-22 | create_instance | model_directed_instruction | high | tag values that are bound to this instance. You must represent each item in the map as: `"" : ""`. For example, a sin |
| 2026-10-22 | create_instance | secret_material_reference | high | Password that encrypts the private key |
| 2026-10-22 | create_instance | url_in_description | low | https://tools.ietf.org/html/rfc3339 |
| 2026-10-22 | create_instance | cross_tool_reference | high | references sibling tool 'execute_sql' |
| 2026-10-22 | execute_sql | secret_material_reference | high | et to `ALLOW_DATA_API`. * For built_in users password_secret_version must be set. * Otherwise, for IAM users, for a My |
| 2026-10-22 | execute_sql | url_in_description | low | https://google.github.io/sqlcommenter/ |
| 2026-10-22 | execute_sql | cross_tool_reference | high | references sibling tool 'get_instance' |
| 2026-10-22 | execute_sql_readonly | secret_material_reference | high | ame of the Secret Manager secret holding the password for the user to log into the database. The secret should be crea |
| 2026-10-22 | execute_sql_readonly | url_in_description | low | https://google.github.io/sqlcommenter/ |
| 2026-10-22 | execute_sql_readonly | cross_tool_reference | high | references sibling tool 'get_instance' |
| 2026-10-22 | get_operation | model_directed_instruction | high | lectQuery` property. `SQL Server instances:` You must specify one database to be exported, and the `fileType` must be |
| 2026-10-22 | get_operation | secret_material_reference | high | Password that encrypts the private key |
| 2026-10-22 | get_operation | url_in_description | low | https://tools.ietf.org/html/rfc3339 |
| 2026-10-22 | get_operation | cross_tool_reference | high | references sibling tool 'create_user' |
| 2026-10-22 | create_user | model_directed_instruction | high | lectQuery` property. `SQL Server instances:` You must specify one database to be exported, and the `fileType` must be |
| 2026-10-22 | create_user | secret_material_reference | high | mitations: * To create a built-in user with password, use the `password_secret_version` field to provide password usi |
| 2026-10-22 | create_user | url_in_description | low | https://tools.ietf.org/html/rfc3339 |
| 2026-10-22 | create_user | cross_tool_reference | high | references sibling tool 'execute_sql' |
| 2026-10-22 | update_user | model_directed_instruction | high | ts status until the operation completes. * Before calling the `update_user` tool, always check the existing configuration of t |
| 2026-10-22 | update_user | secret_material_reference | high | Password that encrypts the private key |
| 2026-10-22 | update_user | url_in_description | low | https://tools.ietf.org/html/rfc3339 |
| 2026-10-22 | update_user | cross_tool_reference | high | references sibling tool 'get_operation' |
| 2026-10-22 | clone_instance | model_directed_instruction | high | s deleted. If this instance is deleted, then you must set the timestamp. |
| 2026-10-22 | clone_instance | secret_material_reference | high | Password that encrypts the private key |
| 2026-10-22 | clone_instance | url_in_description | low | https://tools.ietf.org/html/rfc1035 |
| 2026-10-22 | clone_instance | cross_tool_reference | high | references sibling tool 'get_operation' |
| 2026-10-22 | update_instance | model_directed_instruction | high | lectQuery` property. `SQL Server instances:` You must specify one database to be exported, and the `fileType` must be |
| 2026-10-22 | update_instance | secret_material_reference | high | Password that encrypts the private key |
| 2026-10-22 | update_instance | url_in_description | low | https://cloud.google.com/sql/docs/mysql/flags |
| 2026-10-22 | update_instance | cross_tool_reference | high | references sibling tool 'get_operation' |
| 2026-10-22 | list_users | secret_material_reference | high | Read-only password status. |
| 2026-10-22 | create_backup | model_directed_instruction | high | lectQuery` property. `SQL Server instances:` You must specify one database to be exported, and the `fileType` must be |
| 2026-10-22 | create_backup | secret_material_reference | high | Password that encrypts the private key |
| 2026-10-22 | create_backup | url_in_description | low | https://tools.ietf.org/html/rfc3339 |
| 2026-10-22 | create_backup | cross_tool_reference | high | references sibling tool 'create_user' |
| 2026-10-22 | restore_backup | model_directed_instruction | high | lectQuery` property. `SQL Server instances:` You must specify one database to be exported, and the `fileType` must be |
| 2026-10-22 | restore_backup | secret_material_reference | high | Password that encrypts the private key |
| 2026-10-22 | restore_backup | url_in_description | low | https://tools.ietf.org/html/rfc3339 |
| 2026-10-22 | restore_backup | cross_tool_reference | high | references sibling tool 'get_instance' |
| 2026-10-22 | import_data | exfiltration_pattern | critical | u can make the actual `import_data` call. To upload the file to Cloud Storage, you can use the `gcloud` or `gsutil` commands. B |
| 2026-10-22 | import_data | model_directed_instruction | high | lectQuery` property. `SQL Server instances:` You must specify one database to be exported, and the `fileType` must be |
| 2026-10-22 | import_data | secret_material_reference | high | Password that encrypts the private key |
| 2026-10-22 | import_data | url_in_description | low | https://tools.ietf.org/html/rfc3339 |
| 2026-10-22 | import_data | cross_tool_reference | high | references sibling tool 'get_instance' |
| 2026-10-22 | postgres_upgrade_precheck | model_directed_instruction | high | lectQuery` property. `SQL Server instances:` You must specify one database to be exported, and the `fileType` must be |
| 2026-10-22 | postgres_upgrade_precheck | secret_material_reference | high | Password that encrypts the private key |
| 2026-10-22 | postgres_upgrade_precheck | url_in_description | low | https://tools.ietf.org/html/rfc3339 |
| 2026-10-22 | postgres_upgrade_precheck | cross_tool_reference | high | references sibling tool 'get_operation' |
Change history (15)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | list_instances | mutated | medium |
| 2026-10-22 18:17 | get_instance | mutated | high |
| 2026-10-22 18:17 | create_instance | mutated | high |
| 2026-10-22 18:17 | execute_sql | mutated | high |
| 2026-10-22 18:17 | execute_sql_readonly | mutated | high |
| 2026-10-22 18:17 | get_operation | mutated | high |
| 2026-10-22 18:17 | create_user | mutated | high |
| 2026-10-22 18:17 | update_user | mutated | high |
| 2026-10-22 18:17 | clone_instance | mutated | high |
| 2026-10-22 18:17 | update_instance | mutated | high |
| 2026-10-22 18:17 | list_users | mutated | high |
| 2026-10-22 18:17 | create_backup | mutated | high |
| 2026-10-22 18:17 | restore_backup | mutated | high |
| 2026-10-22 18:17 | import_data | mutated | critical |
| 2026-10-22 18:17 | postgres_upgrade_precheck | mutated | high |
Probe history
10-22 18:17 OK (15) · 08-13 18:17 OK (15)
Run or depend on com.googleapis.sqladmin/mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).