Secure SQL proxy for AI agents — NL→SQL, AST safety, per-agent RLS, audit log.
Secure SQL proxy for AI agents — NL→SQL, AST safety, per-agent RLS, audit log. The queryshield mcp server wraps that behind the Model Context Protocol, so an assistant can use it rather than through you.
Secure SQL proxy between AI agents and enterprise databases.
You will need 5 environment variables: QUERYSHIELD_API_KEY, QUERYSHIELD_BASE_URL, ANTHROPIC_API_KEY, DATABASE_URL, VAULT_KEY. The server will not start without them, which is usually why the tools fail to appear on a first run. Keep credentials in your client's env block or a secrets manager rather than in a file you might commit.
Installation goes through your MCP client rather than a global install: point it at queryshield-mcp on PyPI and it is fetched when the client starts. The copy-paste blocks for Claude Desktop, Claude Code and Cursor are further down this page.
Plenty of database access servers cover similar ground. The differences that matter in practice are scope of access and how much setup stands between you and a working tool call. It is maintained by bch1212; worth a glance at recent repository activity before you build anything load-bearing on it.
SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.
{
"mcpServers": {
"queryshield": {
"command": "uvx",
"args": ["queryshield-mcp"],
"env": {
"QUERYSHIELD_API_KEY": "your-value",
"QUERYSHIELD_BASE_URL": "your-value",
"ANTHROPIC_API_KEY": "your-value",
"DATABASE_URL": "your-value",
"VAULT_KEY": "your-value"
}
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
| Variable | Description | Required |
|---|---|---|
| QUERYSHIELD_API_KEY | Credential the server authenticates with. | Yes |
| QUERYSHIELD_BASE_URL | Endpoint or connection string the server talks to. | Yes |
| ANTHROPIC_API_KEY | Credential the server authenticates with. | Yes |
| DATABASE_URL | Endpoint or connection string the server talks to. | Yes |
| VAULT_KEY | Credential the server authenticates with. | Yes |
Read-only SQL access to Postgres — let your assistant inspect schemas and answer questions from real data.
Manage your whole Supabase project in conversation — database, auth, storage, Edge Functions and branches.
Query, modify and analyse local SQLite databases in conversation — the fastest way to chat with a data file.
Metabase ships its own MCP endpoint — search your BI content, build and run queries, and save questions and dashboards without leaving the chat.
Official MongoDB server covering data, schemas and Atlas management — from find queries to spinning up clusters.
Serverless Postgres with database branching — point your assistant at Neon and let it work on disposable copies.