MCP100 IndexHost
WatchlistFirst-party MCP

GoNavi

by Syngnat

Reviewed October 5, 2026

HostSoftware & Technology

Watchlist tracking

Reviewed for relevance and future tracking value.

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Follow database-driver and built-in MCP transport changes as GoNavi expands

Reviewed · Documentation review; complete setup workflow not independently tested

Best fit

Developers and operators exploring and editing heterogeneous data systems.

What we know

A desktop database workbench with schema-aware AI, SQL editing, data grids, transactions, audit and MCP connections.

Maintenance / activity evidence

  • Observed (UTC)🔁 sync(driver-release): 合并 PR 1410 已发布驱动指纹闸门按数据源描述表声明的平台比对

Tracking evidence observed Oct 5, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: high.

Activity source · commits ↗Activity source · releases ↗

Verification gaps / watch-outs

  • Installation and comprehensive security have not been independently audited.
  • Configured datasource privileges. Writes: CRUD; Transaction submit/rollback; AI-generated SQL execution.
  • Database/provider auth; optional web password
  • Sensitive access: Database records, Connection secrets
  • The host can read and write multiple data systems; database credentials and experimental web exposure require tight controls.
Security source · repository notice ↗

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

2,062 repository stars

Stars observed Oct 6, 2026.

All limitations / Review context

Which databases and MCP transport modes does the current host support?

The bounded assessment reviewed the official README, repository notices, security policy path, and security page for known material public-tracking blockers. No such blocker was identified. This is a public-tracking assessment, not an installation safety certification.

  • The host can read and write multiple data systems; database credentials and experimental web exposure require tight controls.
  • Configured datasource privileges.
  • Database/provider auth; optional web password
  • Database schemas/results and AI context may be processed.
  • Reviewed write actions: CRUD; Transaction submit/rollback; AI-generated SQL execution
  • Sensitive access: Database records, Connection secrets
  • Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
  • A project-specific SECURITY.md policy was not available at the fetched official path; the review remains limited to published repository notices.
  • No installation, runtime, client matrix, or complete tool-contract audit was performed in this review.
  • The fetched official SECURITY.md path returned HTTP 404; it was not treated as positive evidence.
  • Experimental web-server mode expands network exposure.
  • Database permissions and AI-provider behavior vary by connection.

Original activity observations

  • 2026-10-05T12:32:45Z: 🔁 sync(driver-release): 合并 PR 1410 已发布驱动指纹闸门按数据源描述表声明的平台比对
Technical identity
github.com/syngnat/gonavi
Exact implementation source
https://github.com/syngnat/gonavi ↗
Reviewed resource type
Host
Repository identity
Syngnat/GoNavi

Evidence & Sources

Evidence basis
Recorded source evidence
Setup runtime verification
Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed · Latest source observation

  • GitHub repository ↗

    syngnat/gonavi

    Recorded repository material and project history.

    Includes references whose attribution is not established.