Lagaam MCP Server

Stops an agent's Trino or Pinot query before it runs if it costs too much or reads outside its grant

Local serverstdio

What is the Lagaam MCP Server?

Lagaam is an MCP integration. Stops an agent's Trino or Pinot query before it runs if it costs too much or reads outside its grant.

Packages and local setup

The published pypi package is lagaam, version 0.2.4. Its declared MCP transport is stdio.

The package declares LAGAAM_ALLOWED_TABLES (required): Comma list of catalog.schema.table grants; the server will not start without it; LAGAAM_ALLOW_ALL_TABLES: true to run with no grant at all: an explicit opt-out, off by default; LAGAAM_ENGINE: Which adapter to run; TRINO_HOST: Trino coordinator host; TRINO_PORT: Trino coordinator port; TRINO_USER: Trino user; PINOT_CONTROLLER_URL: Pinot controller URL; PINOT_BROKER_URL: Pinot broker URL; PINOT_USER: Pinot user; unset means no auth; PINOT_PASSWORD: Pinot password; unset means no auth; LAGAAM_AGENT_NAME: Identity stamped on the audit trail; LAGAAM_MAX_SCAN_BYTES: Scan-bytes budget per query, checked before it runs (default 50 GiB); LAGAAM_MAX_ROWS: Scanned-row estimate budget per query; unset means ungated; LAGAAM_MAX_INTERMEDIATE_ROWS: Rows the engine would build at its widest step, not rows returned, so a LIMIT doesn't lower it; LAGAAM_MAX_RETURNED_ROWS: Rows returned to the agent per query, capped at 100000; a bigger LIMIT in the query is lowered to it; LAGAAM_QUERY_TIMEOUT: Wall-clock seconds per query; LAGAAM_METADATA_TTL: Metadata cache TTL, seconds; LAGAAM_AUDIT_LOG: Audit JSONL file path; unset means stderr.

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository · Project website. This profile uses version 0.2.4 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related other integrations MCP servers for tools that cover the same kind of work.

Configuration

VariableDescriptionRequired
LAGAAM_ALLOWED_TABLESComma list of catalog.schema.table grants; the server will not start without itYes
LAGAAM_ALLOW_ALL_TABLEStrue to run with no grant at all: an explicit opt-out, off by defaultOptional
LAGAAM_ENGINEWhich adapter to runOptional
TRINO_HOSTTrino coordinator hostOptional
TRINO_PORTTrino coordinator portOptional
TRINO_USERTrino userOptional
PINOT_CONTROLLER_URLPinot controller URLOptional
PINOT_BROKER_URLPinot broker URLOptional
PINOT_USERPinot user; unset means no authOptional
PINOT_PASSWORDPinot password; unset means no authOptional
LAGAAM_AGENT_NAMEIdentity stamped on the audit trailOptional
LAGAAM_MAX_SCAN_BYTESScan-bytes budget per query, checked before it runs (default 50 GiB)Optional
LAGAAM_MAX_ROWSScanned-row estimate budget per query; unset means ungatedOptional
LAGAAM_MAX_INTERMEDIATE_ROWSRows the engine would build at its widest step, not rows returned, so a LIMIT doesn't lower itOptional
LAGAAM_MAX_RETURNED_ROWSRows returned to the agent per query, capped at 100000; a bigger LIMIT in the query is lowered to itOptional
LAGAAM_QUERY_TIMEOUTWall-clock seconds per queryOptional
LAGAAM_METADATA_TTLMetadata cache TTL, secondsOptional
LAGAAM_AUDIT_LOGAudit JSONL file path; unset means stderrOptional