MCP SQL Server Windows Auth

Wrapper package for @executeautomation/database-server that enables Windows Integrated Authentication via the msnodesqlv8 driver.

Why This Exists

The base MCP database server uses the default mssql driver (tedious), which does not support Windows Integrated Authentication. The msnodesqlv8 driver does, so this package installs it and applies a patch at runtime to use a trusted connection when no SQL login is supplied.

Project Contents

• Patch details and rationale: WINDOWS_AUTH_REPORT.md
• No source fork required; patch is applied at runtime

Prereqs

• Windows with SQL Server running locally.
• TCP/IP enabled for the target instance.
• A known TCP port for the instance (fixed port recommended).
• Windows account has access to the target database.

Install

npm i -g @shadypixel/mssql-mcp

Run

npx -y @shadypixel/mssql-mcp --sqlserver --server "localhost" --port 1433 --database TestDB

Keep this terminal open while your MCP client connects.

MCP Config Example (Codex)

[mcp_servers.sqlserver]
command = "npx"
args = ["-y", "@shadypixel/mssql-mcp", "--sqlserver", "--server", "localhost", "--port", "1433", "--database", "TestDB"]

MCP Config Example (VS Code)

If your MCP client in VS Code reads a JSON config, the same command can be expressed like this:

{
	"mcpServers": {
		"sqlserver": {
			"command": "npx",
			"args": [
				"-y",
				"@shadypixel/mssql-mcp",
				"--sqlserver",
				"--server",
				"localhost",
				"--port",
				"1433",
				"--database",
				"TestDB"
			]
		}
	}
}

MCP Config Example (Code)

If your MCP client expects a minimal JSON block, use:

{
	"command": "npx",
	"args": [
		"-y",
		"@shadypixel/mssql-mcp",
		"--sqlserver",
		"--server",
		"localhost",
		"--port",
		"1433",
		"--database",
		"TestDB"
	]
}

Troubleshooting

• Login failed for user '': The patch did not apply. Re-run the command or reinstall the package.
• Connection timeouts: Confirm the instance is listening on the port and TCP/IP is enabled.
• TLS/cert errors: TrustServerCertificate=Yes in the connection string should handle local self-signed certs.

References

• MCP database server: https://www.npmjs.com/package/@executeautomation/database-server
• MCP database server repo: https://github.com/executeautomation/database-server
• node-mssql docs (msnodesqlv8 + Windows auth): https://www.npmjs.com/package/mssql
• msnodesqlv8 package: https://www.npmjs.com/package/msnodesqlv8
• Context7 MCP (docs retrieval): https://github.com/upstash/context7-mcp