Guardrail for AI agents on SQL Server: statement blocking, optional read-only mode and an audit log.
LogCarverGuard is an MCP integration. Guardrail for AI agents on SQL Server: statement blocking, optional read-only mode and an audit log.
The published nuget package is LogCarverGuard.Local, version 0.1.0. Its declared MCP transport is stdio.
The package declares LOGCARVERGUARD_CONNECTION_STRING (required): SQL Server connection string the statements run as. Example: Server=localhost;Database=MyDb;Integrated Security=true;TrustServerCertificate=true; LOGCARVERGUARD_READ_ONLY: Set to true to allow queries only (SELECT without INTO; remote sources such as OPENQUERY are blocked). Leave unset for the default guard rules.; LOGCARVERGUARD_AUDIT_DB_PATH: Path of the audit log SQLite file. Defaults to LogCarverGuard/audit.db under the local application data folder.; LOGCARVERGUARD_TRUNCATE_ALLOWLIST: Comma-separated schema.table entries where TRUNCATE TABLE is allowed. Empty means all TRUNCATE is blocked.; LOGCARVERGUARD_EXEC_WHITELIST: Comma-separated schema.procedure entries that may be run with EXEC. Empty means all EXEC is blocked.; LOGCARVERGUARD_ALTER_DROP_COLUMN_ALLOWLIST: Comma-separated schema.table entries where ALTER TABLE ... DROP COLUMN is allowed. Empty means it is blocked..
Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.
View the publisher’s registry entry · Project repository · Project website. This profile uses version 0.1.0 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.
Browse related databases MCP servers for tools that cover the same kind of work.
| Variable | Description | Required |
|---|---|---|
| LOGCARVERGUARD_CONNECTION_STRING | SQL Server connection string the statements run as. Example: Server=localhost;Database=MyDb;Integrated Security=true;TrustServerCertificate=true | Yes |
| LOGCARVERGUARD_READ_ONLY | Set to true to allow queries only (SELECT without INTO; remote sources such as OPENQUERY are blocked). Leave unset for the default guard rules. | Check documentation |
| LOGCARVERGUARD_AUDIT_DB_PATH | Path of the audit log SQLite file. Defaults to LogCarverGuard/audit.db under the local application data folder. | Check documentation |
| LOGCARVERGUARD_TRUNCATE_ALLOWLIST | Comma-separated schema.table entries where TRUNCATE TABLE is allowed. Empty means all TRUNCATE is blocked. | Check documentation |
| LOGCARVERGUARD_EXEC_WHITELIST | Comma-separated schema.procedure entries that may be run with EXEC. Empty means all EXEC is blocked. | Check documentation |
| LOGCARVERGUARD_ALTER_DROP_COLUMN_ALLOWLIST | Comma-separated schema.table entries where ALTER TABLE ... DROP COLUMN is allowed. Empty means it is blocked. | Check documentation |
Inspect PostgreSQL schemas and run read-only queries with the archived MCP reference server. Review its maintenance status before choosing it.
Connect the Notion MCP server to search workspace content and work with pages and databases through Notion’s hosted OAuth service.
Use the Supabase MCP server to inspect database schemas, query project data and retrieve docs through a project-scoped connection.
Query, modify and analyse local SQLite databases in conversation — the fastest way to chat with a data file.
Metabase ships its own MCP endpoint — search your BI content, build and run queries, and save questions and dashboards without leaving the chat.
Official MongoDB server covering data, schemas and Atlas management — from find queries to spinning up clusters.