MCP Server settings


MCP Server settings expose the Mini DBA Console Model Context Protocol endpoint and API keys used by compatible MCP clients. This lets approved tools query estate-wide Mini DBA performance and historical monitoring data through the console.

Mini DBA MCP server settings

What you can see

  • MCP Endpoint URL.
  • Managed MCP API keys stored by the console.
  • A 14-day trial key button where trial access is enabled.
  • Copy buttons for the endpoint and newly-created keys.
  • Key revoke controls where available.
  • Available MCP tools exposed by the console endpoint.

Manage MCP keys

  1. Open Settings.
  2. Select MCP Server.
  3. Copy the MCP endpoint URL into your MCP client configuration.
  4. Create a 14-day trial key, or sign in as console administrator and create a persistent key.
  5. Copy the new key immediately. Mini DBA stores only a salted hash and cannot show the raw key again.
  6. Paste the key into the MCP client's bearer-token/API-key setting.

Managed keys are stored in mcp-api-keys.json beside minidba-engines.json. This file is the only supported MCP key store, so trial access, persistent keys, rotation, and revocation all use the same path.

Trial keys expire after 14 days by default. Persistent keys do not expire until revoked.

Rate limiting

The console rate-limits MCP requests per API key before the request reaches the MCP tool layer. Trial keys default to 30 requests per minute. Persistent keys default to 300 requests per minute. When a key exceeds its limit, the console returns HTTP 429 Too Many Requests with a Retry-After header.

Rate limits are held in memory by the running console process. This is suitable for the current single-instance console/App Service deployment. If the console is scaled out to multiple instances, use a shared limiter such as Redis or another distributed store so the same key is limited globally across every instance.

Security recommendations

  • Treat MCP API keys like credentials.
  • Create separate keys per client where possible.
  • Remove keys that are no longer used.
  • Avoid sharing keys in tickets, screenshots, chat, or documentation.
  • Use trial keys for demo users and short evaluations, not for long-running automation.

MCP access guidance

The console MCP endpoint allows approved clients to query Mini DBA monitoring data across connected engines. Use it only for trusted tools and users who should have access to database performance and history. Create separate API keys per client or automation where possible so unused access can be removed without disrupting everything.

Before enabling an MCP client, confirm the network path, endpoint URL, key storage method, and data exposure policy. Monitoring data may include server names, database names, query text, timings, and operational history. Treat that data as sensitive, especially in customer or production environments.

If a client cannot connect, check the endpoint URL, API key, console status, engine connection status, firewall rules, web proxy requirements, and Service Log. Remove keys that are no longer in use.

MCP Server settings FAQ

Should I share one API key across all clients?

No. Separate keys make rotation, auditing, and revocation easier.

What data can MCP clients access?

Approved clients can query Mini DBA monitoring and historical performance data exposed by the MCP endpoint.

What if an API key is exposed?

Delete or rotate the key immediately and review any clients or logs that may have used it.

Related pages