ashishsinha1602/schemagate

Permission-aware schema access for text-to-SQL agents: picks the few tables a question needs and removes every table and column the caller's roles may not read before the model sees the schema; `run_query` also refuses them (quoted, bracketed, comma joins, `SELECT *`). Optional hash-chained, ML-DSA-65-signed audit log. Postgres, Oracle, MySQL, SQL Server, SQLite. Install: one line with uv, `uvx --from "schemagate[mcp]" schemagate-mcp --url demo` (`demo` runs a built-in sample schema); for a database set `SCHEMAGATE_DATABASE_URL` and add its driver extra, e.g. `schemagate[mcp,postgres]`. Transport: stdio and streamable HTTP. Auth: none at the MCP layer; database credentials in the URL. Public demo endpoint (sample schema, no auth): `https://147-224-254-131.sslip.io/mcp`. Tools (7): select_schema, list_objects, describe_object, run_query, answer, refresh_catalog, health. Clients: Claude Desktop, Claude Code, Cursor, VS Code. License: Apache-2.0. Official MCP Registry id `io.github.ashishsinha1602/schemagate`.

Project

Browse this MCP server in the TensorBlock MCP Index.