This server gives Claude direct access to SQLCipher 4 encrypted databases, the kind used by MoneyMoney, Signal, WhatsApp, KeePass, and 1Password for local storage. It exposes the full set of database operations: schema inspection (tables, columns, indexes), arbitrary SQL queries, and CRUD operations with built-in SQL injection protection. You pass it a database path and passphrase, optionally encrypted with AES-256-GCM and stored in macOS Keychain. Custom cipher profiles let you override the default SQLCipher 4 settings (page size, KDF iterations, HMAC algorithm). Runs via stdio using Java 21 and a modified SQLite JDBC driver, or pull the Docker image if you'd rather not manage dependencies.
claude mcp add --transport stdio rosch100-mcp-encrypted-sqlite -- docker run -i --rm ghcr.io/rosch100/mcp-encrypted-sqlite:0.4.1