Safe SQL gateway for AI agents: SELECT-only validation, access policies, masking, audit trail, evals
QueryPilot is an MCP integration. Safe SQL gateway for AI agents: SELECT-only validation, access policies, masking, audit trail, evals.
The published pypi package is querypilot, version 0.1.1. Its declared MCP transport is stdio.
The package declares QUERYPILOT_DATABASE_URL (required): SQLAlchemy-style database connection URL, e.g. sqlite:///demo.db or postgresql://user:pass@host:5432/db. Equivalent to --database-url.; QUERYPILOT_DIALECT: SQL dialect for the connector. Equivalent to --dialect.; QUERYPILOT_MAX_ROWS: Maximum rows returned per query. Equivalent to --max-rows.; QUERYPILOT_TIMEOUT_SECONDS: Query execution timeout in seconds. Equivalent to --timeout-seconds.; QUERYPILOT_ACCESS_POLICY_JSON: JSON-encoded AccessPolicy (blocked_columns, allowed_columns, row_filters, masking_rules) enforced before execution. Equivalent to --access-policy-json.; QUERYPILOT_MCP_TRANSPORT: MCP transport used by querypilot mcp. Equivalent to --transport. Most MCP clients should leave this at stdio; streamable-http is for clients that speak Streamable HTTP directly..
This package has launch arguments in its registry record. Use the maintainer’s configuration for those arguments rather than launching it with only the package name.
Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.
View the publisher’s registry entry · Project repository · Project website. This profile uses version 0.1.1 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.
Browse related databases MCP servers for tools that cover the same kind of work.
| Variable | Description | Required |
|---|---|---|
| QUERYPILOT_DATABASE_URL | SQLAlchemy-style database connection URL, e.g. sqlite:///demo.db or postgresql://user:pass@host:5432/db. Equivalent to --database-url. | Yes |
| QUERYPILOT_DIALECT | SQL dialect for the connector. Equivalent to --dialect. | Optional |
| QUERYPILOT_MAX_ROWS | Maximum rows returned per query. Equivalent to --max-rows. | Optional |
| QUERYPILOT_TIMEOUT_SECONDS | Query execution timeout in seconds. Equivalent to --timeout-seconds. | Optional |
| QUERYPILOT_ACCESS_POLICY_JSON | JSON-encoded AccessPolicy (blocked_columns, allowed_columns, row_filters, masking_rules) enforced before execution. Equivalent to --access-policy-json. | Optional |
| QUERYPILOT_MCP_TRANSPORT | MCP transport used by querypilot mcp. Equivalent to --transport. Most MCP clients should leave this at stdio; streamable-http is for clients that speak Streamable HTTP directly. | Optional |
Inspect PostgreSQL schemas and run read-only queries with the archived MCP reference server. Review its maintenance status before choosing it.
Connect the Notion MCP server to search workspace content and work with pages and databases through Notion’s hosted OAuth service.
Use the Supabase MCP server to inspect database schemas, query project data and retrieve docs through a project-scoped connection.
Query, modify and analyse local SQLite databases in conversation — the fastest way to chat with a data file.
Metabase ships its own MCP endpoint — search your BI content, build and run queries, and save questions and dashboards without leaving the chat.
Official MongoDB server covering data, schemas and Atlas management — from find queries to spinning up clusters.