# motherduck

> motherduck is an officially published MCP server from MotherDuck. Anomity scores its risk at 70 out of 100 (high). It matches 2 dangerous capability combinations.

- **Canonical URL:** https://catalog.anomity.ai/mcp/motherduck
- **Kind:** MCP server
- **Publisher:** MotherDuck
- **Trust level:** official
- **Risk score:** 70/100 (high)
- **Last updated:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/mcp/motherduck

## Why it scored 70

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |
| 3 high-risk capabilities: database:write, filesystem:write, credentials:access | +30 | critical |  |
| Credential theft risk (high) | +15 | high | Filesystem write combined with credentials access can plant persistent credential stealers. |
| Database exfiltration risk (high) | +15 | high | Database read combined with outbound network can exfiltrate production data. |

Clamped result: **70/100**, band **high**.

## Capabilities

| Capability | Name | Security implication |
| --- | --- | --- |
| `database:read` | Database read | Reads from connected databases. Useful for query and analytics agents; risky when combined with outbound network. |
| `database:write` | Database write | Writes to connected databases. High-impact; combined with outbound network is treated as exfiltration-class. |
| `filesystem:read` | Filesystem read | Can read files on the host system. Used for context, indexing, or analysis. |
| `filesystem:write` | Filesystem write | Can create, edit, or delete files on the host system. High-impact capability — anything from helpful edits to planting persistence. |
| `network:outbound` | Outbound network | Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access. |
| `credentials:access` | Credentials access | Reads provider API keys, OAuth tokens, or other secrets from the host keychain or environment. |

## Dangerous combinations matched

### Credential theft risk (high)

Filesystem write combined with credentials access can plant persistent credential stealers.

Capabilities: `filesystem:write`, `credentials:access`

### Database exfiltration risk (high)

Database read combined with outbound network can exfiltrate production data.

Capabilities: `database:read`, `network:outbound`

## Related MCP servers

- [airtable-community](https://catalog.anomity.ai/mcp/airtable-community) — risk 75 (high)
- [couchbase](https://catalog.anomity.ai/mcp/couchbase) — risk 75 (high)
- [mysql-benborla](https://catalog.anomity.ai/mcp/mysql-benborla) — risk 75 (high)
- [neo4j-labs](https://catalog.anomity.ai/mcp/neo4j-labs) — risk 75 (high)
- [snowflake-labs](https://catalog.anomity.ai/mcp/snowflake-labs) — risk 75 (high)
- [task-master](https://catalog.anomity.ai/mcp/task-master) — risk 75 (high)

---

Source: Anomity Security Database (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json