Field-by-field comparison
Compare the evidence before choosing an MCP.
Each signal stays separate, missing facts remain visible, and the column order follows your selection.
| Evidence field | Atlan Data CatalogWatchlist candidate | Google MCP Toolbox for DatabasesMCP100 Selected |
|---|---|---|
| Task fit | ||
| Best for |
|
|
| Not ideal for |
|
|
| Avoid when |
|
|
| Provenance | ||
| Provenance details | First-party MCP endpoint:https: · Publisher source ↗ | First-party MCP Google · Publisher source ↗ |
| Maintenance | ||
| Maintenance details | Stale Repo: Not documented Package: Not documented | Repo: Aug 14, 2026 Package: Aug 14, 2026 |
| Popularity evidence | ||
| GitHub stars | Not documented | 16,173 GitHub stars · checked 2026-08-14T18:46:26.000Z |
| Package downloads / 30 days | No reliable download data | 61,660 package downloads / 30 days · checked 2026-08-14T18:46:26.000Z |
| External adoption evidence | Not documented |
|
| Client coverage | ||
| Client coverage details | Not documented | Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio |
| Client coverage note | Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server. | |
| Access and data | ||
| Authentication | Publisher supports authenticated tenant access via OAuth and supported API/service tokens. | Authentication depends on the database source and can include database username/password, Google Cloud IAM, or other source-specific mechanisms. Use a dedicated read-only identity and secret manager or protected environment variables. |
| Cost | Atlan plan/entitlement and AI-provider costs apply. | The Apache-licensed Toolbox and npm server have no documented MCP usage fee. Database services, Google Cloud resources, network transfer, observability backends, hosting, and the AI client may incur normal charges. |
| Permissions | Inherits Atlan persona/role/domain permissions; service-account tokens are tied to a defined persona according to publisher docs. | Effective permissions come from each configured database identity and the enabled prebuilt or custom tools. Generic prebuilt sets can include schema discovery and execute_sql; custom tools can constrain statements, parameters, and accessible sources. |
| Data handling | Atlan states MCP retrieval is real-time without an intermediate MCP cache and that MCP itself does not send customer data to an LLM; the connected AI client/provider still receives whatever tool results the user sends into that conversation. | The Toolbox process connects directly to configured databases and returns selected schemas, rows, query results, and errors to the MCP client. Credentials may be supplied through environment variables or configuration; integrated cloud authentication and OpenTelemetry are available. |
| Limitations | ||
| Tradeoffs |
|
|
| Risk context | Sensitive enterprise metadata and any authorized curation writes remain the key governance concerns. | Generic SQL tools can expose or mutate large amounts of data and retrieved database text can carry prompt-injection content. Prefer a non-production replica, read-only credentials, allow-listed custom parameterized tools, query limits, audit logs, and no secrets in config. This review does not claim MCP100 execution testing. |
| Evidence date | ||
| Editorial review | 2026-09-13T00:00:00Z | 2026-07-24 |
| Candidate evidence | 2026-09-13T00:00:00Z | 2026-08-14T18:46:26.000Z |
Popularity, maintenance, fit, permissions, and client support are independent evidence fields.
Read the evidence method →