v2.3.0

What's new

🔐 MCP server security hardening — per-install bearer token, Host/Origin request validation (closes a DNS-rebinding / malicious-webpage localhost-probing gap), a connection allow-list replacing "every open connection is reachable via MCP," and per-connection time-bounded write grants replacing the global write toggle. Also fixed a SQL-injection-style bypass in run_query's Redshift schema parameter and a read-only classifier gap around SELECT ... INTO disguised writes.

✨ DynamoDB PartiQL query mode — write real SQL-like statements (SELECT * FROM "table" WHERE ...) instead of building filters through the GUI, via AWS's native PartiQL support. Context-aware autocomplete (table names only right after FROM/INTO; attributes learned per-table from key schema and prior results). Cmd/Ctrl+Enter to run.

🛡️ Production safety for PartiQL — destructive PartiQL (DELETE/UPDATE) on a production-tagged connection now routes through the same confirmation dialog as SQL writes.

🐛 Fixed — a null-vs-empty-array bug that could freeze the app when opening a DynamoDB table with no GSIs; MCP tool responses returning a bare JSON array (rejected by strict MCP clients); silent result truncation on large DynamoDB PartiQL queries (now shows a warning).

Downloads

Platform	File
macOS (Intel + Apple Silicon, universal)	DBConnect-macOS.dmg
macOS (portable ZIP)	DBConnect-mac.zip
Windows x64 (installer)	DBConnect-Windows-Setup.exe
Windows x64 (portable ZIP)	DBConnect-Windows.zip

Or via Homebrew: brew install --cask shubhesh07/db-connect/db-connect

SHA256

acdb909eea847cfba4cb70cea7ca929f0fe8c8101b332e0c92ab61ae286edd8e  DBConnect-macOS-v2.3.0.dmg
655356bda7922b2ae93fe704365534320a773af8d754f342bfcbeb6621c929c9  DBConnect-mac-v2.3.0.zip
a51b0cc24e89615e6df189f87c64d1a15bfe457e78a35a5491983895364a35d0  DBConnect-Windows-Setup-v2.3.0.exe
3cc470c9347e9abb915b373b17d2a4354e686ca6342b4eea2f4babbfa11c2e0a  DBConnect-Windows-v2.3.0.zip