Connectors

SQL Server

Configuration options and limitations for the Microsoft SQL Server connector.

Configure the Connection

SQL Server 2017 and later are supported. The connector authenticates with a SQL username and password.

Connection Parameters

SettingRequiredDefaultDescription
HostYes—SQL Server hostname or IP address
PortYes1433Port SQL Server listens on
UserYes—SQL login username
PasswordYes—SQL login password
DatabaseNoLogin defaultDatabase to connect to
SSL ModeNoDon't require encryptionEncryption and certificate-validation policy
Additional CA CertificateNo—PEM or DER CA certificate, or PEM bundle, accepted in addition to the default trusted roots

Omit the database name or leave it empty to use the SQL login's default database.

URI Connection Strings

Monospace accepts the following URI connection-string forms.

SQL Server
sqlserver://user:password@host:1433/database
MSSQL Alias
mssql://user:password@host:1433/database

The database path is optional. Both forms accept the case-insensitive SQL Server keywords Encrypt and TrustServerCertificate as query parameters.

EncryptTrustServerCertificateBehavior
Optional / falseOmitted / trueProtect the login exchange. Encrypt the full session only when SQL Server requires it. Do not validate the server certificate
Optional / falsefalseReject the connection string because this combination isn't supported
Mandatory / true / OmittedOmitted / falseRequire full-session encryption and validate the certificate chain and hostname
Mandatory / true / OmittedtrueRequire full-session encryption without validating the server certificate

A pasted URI with no Encrypt keyword therefore uses a different default from the manually configured Studio form.

Configure Encryption

The manually configured Studio form offers three policies:

SSL ModeBehavior
Don't require encryptionDefault. Protect the login exchange, but encrypt the full session only when SQL Server requires it. Do not validate the server certificate
Require but don't validateRequire full-session encryption without validating the server certificate
Verify FullRequire full-session encryption and validate both the certificate chain and hostname

Use Verify Full for production connections across an untrusted network.

With Verify Full, upload an Additional CA Certificate when the server certificate uses a private certificate authority. The field accepts one PEM or DER CA certificate, or a PEM bundle.

The supplied certificates are accepted in addition to the default trusted roots. Those roots remain trusted, and the connector still validates the server certificate chain and hostname.

Limitations

  • Some existing-field migrations are not yet supported. You cannot change a field's type or nullability, or add IDENTITY to an existing field.
  • JSON uses string storage. SQL Server 2025's native JSON data type is not yet supported. Monospace stores JSON in NVARCHAR(MAX), so values can be read and written. But equality compares serialized text rather than JSON structure, so equivalent objects with different key ordering do not match.
  • Composite primary keys containing IDENTITY prevent creates. A collection whose composite primary or unique key contains an IDENTITY field does not offer create operations.
  • Large updates and deletes have an item ceiling. updateMany and deleteMany can fail when an operation matches roughly 2,000 items with a one-field primary or unique key. Updates also need parameters for changed values, so their practical ceiling is lower. Composite keys reduce the approximate item ceiling in proportion to their field count. For larger mutations, page through key values and send bounded updates or deletes. Separate mutations do not preserve the atomicity of one operation.

See Also

MonospaceThe governed API layer for every app, person, and agent.

Copyright © 2026 Monospace Inc.