0.5.0npm · dbatools-mcp-server · latest release
Observed 2026-08-21T18:58:15.978Z using mcpSecurity-inventory. Protocol 2025-06-18.
| Tool | Category | Risk |
|---|---|---|
check_dbatools_environmentVerify that PowerShell and the dbatools module are installed and report the help-index status.Input schema{
"$schema": "http://json-schema.org/draft-07/schema#",
"type": "object",
"properties": {}
} | — | — |
get_dbatools_command_helpGet the full normalized help for a specific dbatools command, including parameters and examples sourced from comment-based help.Input schema{
"type": "object",
"properties": {
"commandName": {
"type": "string",
"maxLength": 100,
"description": "Exact command name, e.g. Get-DbaDatabase"
}
},
"required": [
"commandName"
],
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
} | — | — |
invoke_dbatools_commandExecute a dbatools command via PowerShell and return structured JSON output.
SAFETY: For any destructive or change command (Remove, Drop, Disable, Reset, etc.), always explain the consequences to the user and ask for explicit confirmation before running. Only proceed with confirm:true if the user has clearly confirmed their intent. Respect DBATOOLS_SAFE_MODE: never bypass safety checks. For any command that modifies or deletes data, double-check with the user before proceeding. Show the exact command and output for transparency. Non-readonly commands require confirm:true when safe mode is enabled.Input schema{
"type": "object",
"properties": {
"commandName": {
"type": "string",
"maxLength": 100,
"description": "Exact dbatools command name to execute, e.g. Get-DbaDatabase"
},
"parameters": {
"type": "object",
"additionalProperties": {},
"default": {},
"description": "Key-value map of parameters. Strings, numbers, and booleans map directly to PowerShell parameters. For SQL authentication pass SqlCredential as an object: { \"username\": \"sa\", \"password\": \"secret\" }. Example: { \"SqlInstance\": \"localhost,2022\", \"SqlCredential\": { \"username\": \"sa\", \"password\": \"P@ssw0rd\" } }"
},
"confirm": {
"type": "boolean",
"default": false,
"description": "Set to true to allow execution of change/destructive commands (required when safeMode is on)"
},
"selectProperties": {
"type": "array",
"items": {
"type": "string",
"pattern": "^[A-Za-z][A-Za-z0-9]*$",
"maxLength": 100
},
"minItems": 1,
"maxItems": 50,
"description": "List of property names to select from the output (e.g. ['Name', 'Status', 'SizeMB']). Use this to reduce output size for commands that return complex objects like SMO database or login objects. When omitted, all properties are returned."
}
},
"required": [
"commandName"
],
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
} | — | — |
list_dbatools_commandsSearch and list dbatools commands. Filter by verb, noun, keyword, or risk level.Input schema{
"type": "object",
"properties": {
"verb": {
"type": "string",
"maxLength": 50,
"description": "PowerShell verb (e.g. Get, Set, New, Remove, Test)"
},
"noun": {
"type": "string",
"maxLength": 100,
"description": "Noun fragment to match (e.g. Database, Login, AgentJob)"
},
"keyword": {
"type": "string",
"maxLength": 200,
"description": "Keyword to search in name, synopsis, and description"
},
"riskLevel": {
"type": "string",
"enum": [
"readonly",
"change",
"destructive"
],
"description": "Filter by risk tier"
},
"limit": {
"type": "integer",
"minimum": 1,
"maximum": 200,
"default": 50,
"description": "Maximum number of results (default 50, max 200)"
}
},
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
} | — | — |
No completed comparison is available.
| Risk | Change | Subject |
|---|---|---|
| No material changes recorded. | ||
| Severity | Finding | Advisory |
|---|---|---|
| No confirmed vulnerability is published for this version. | ||
Artifact SHA-256: b0885a4040d47e1ff13a5485b7e896649eeebbcf0580ac3ff7b60ab2cc16b493
Scanner: mcp-proof-engine 0.1.0.