Introducing the SQL MCP Server

Proposed session for SQLBits 2026

TL; DR

This session shows how SQL MCP Server lets language models safely work with your company’s data without bypassing security or operational controls. You’ll see how an open source, enterprise-scale MCP server exposes governed access to SQL and other databases, and how the same high-scale engine used by Microsoft Fabric enables both developer productivity and production-ready agent workflows.

Session Details

Modern apps use language models, but how do those models safely interoperate with your company’s backend data without putting the business at risk? SQL MCP Server answers that question.

SQL MCP Server is Microsoft’s open source MCP server for secure access to SQL Server, Azure SQL, PostgreSQL, Cosmos DB, and MySQL, running in the cloud or on premises at enterprise scale. It provides a feature-rich database API designed to help models understand and work with your data while enforcing permissions, policies, and operational boundaries.

Built on the same high-scale engine that powers Microsoft Fabric’s own GraphQL API, SQL MCP Server is designed for both scale and developer productivity. With a rich inner loop and a cross-platform command line, it works just as well for enterprise workloads as it does for engineers innovating on the ground.

3 things you'll get out of this session

Understand how SQL MCP Server gives models safe, governed access to enterprise data. See how one backend supports both traditional apps and agent-driven workflows. Learn how to stand up, configure, and reason about MCP at production scale.