Is MotherDuck and DuckDB safe to install?

MotherDuck · Data · stdio (local process)

Run SQL against local DuckDB or cloud MotherDuck databases.

–unrated exposureSource

unrated

Grade

–

Blast radius

–

Tools

–

Capabilities

Scan

AxioRank has not graded MotherDuck and DuckDB yet

AxioRank could not enumerate MotherDuck and DuckDB's surface (server process exited (2): - Use --db-path md: with a MotherDuck token for cloud database access). Many remote servers gate even a read-only handshake behind OAuth. This listing stays factual and updates when a scan succeeds.

View the source

Install

Add MotherDuck and DuckDB to your client

Drop this into your MCP client config (Claude Desktop, Cursor, and others).

mcp.json

{
  "mcpServers": {
    "motherduck": {
      "command": "uvx",
      "args": [
        "mcp-server-motherduck"
      ]
    }
  }
}

Embed

Show the grade in your README

Links back to this page and updates when the grade changes.

[![AxioRank MCP Security Index grade for MotherDuck and DuckDB](https://axiorank.com/api/badge/mcp/motherduck.svg)](https://axiorank.com/mcp-index/motherduck)

More Data servers

ACouchbase APinecone Developer AHugging Face AQdrant AAmazon Redshift AMySQL (benborla)

How it works

About this grade

The grade reflects the blast radius of what MotherDuck and DuckDB declares it can do, read-only, not whether it is secure or trustworthy, and not a judgment of the vendor. Maintain this server? Claim this listing or request a re-scan. See the methodology.

Email me this scorecard

Get the MotherDuck and DuckDB grade in your inbox.

Let your agents use MotherDuck and DuckDB safely

Route this server through AxioRank to allowlist its tools, hold risky calls for approval, and keep a signed audit trail of every action.

Start free