Skip to content
Agentmart
Submit a tool

Queryshield

Secure SQL proxy for AI agents — NL→SQL, AST safety, per-agent RLS, audit log.

Connector by bch1212 · GitHub account verified by the MCP Registry

IndexedMITLocal (stdio)★ 1
Write a review

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/bch1212-queryshield

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Secure SQL proxy for AI agents — NL→SQL, AST safety, per-agent RLS, audit log.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools
5 read · 0 write · 0 delete · 2 not yet classified
Secrets
1 (API keys, tokens or passwords)
Install scripts
Not scanned yet
Runs as
Python package

Tools by what they do 7

Read from the source code; the running server may list different tools.

Read 5 · Look things up without changing anything.

  • get_audit_log
  • get_credential
  • get_schema
  • list_credentials
  • validate_query

Not yet classified 2 · We could not tell from the name and description.

  • query_database
  • query_database_sql

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

  • QUERYSHIELD_API_KEY

Other settings (environment variables or headers).

  • QUERYSHIELD_BASE_URL

Tools (7)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • get_audit_log

    Recent audit entries for the calling agent.

  • get_credential

    Read one named credential. Uses the same QUERYSHIELD_API_KEY as queries.

  • get_schema

    Retrieve database schema. Pass table_name to get one table's columns. Omit it to get the full schema (already in context, but useful if you want to re-confirm).

  • list_credentials

    List credential names this agent is allowed to read. Names only.

  • query_database

    Run a natural-language question against a registered database. QueryShield translates to safe SQL, applies row-level security, and audit-logs the call. Args: database_alias: alias of a database registered for this tenant. question: natural-language question. max_rows: cap on returned rows (default 100, hard cap 5000).

  • query_database_sql

    Run a structured SELECT statement against a registered database. Useful when the agent already knows the schema and wants deterministic SQL (no LLM translation step). The same safety + RLS pipeline still applies — non-SELECTs are rejected.

  • validate_query

    Validate a candidate SQL string against the safety rules. Returns {safe: bool, reason: str}.

Signals

Stars
1
Forks
0
Open issues
0
Weekly downloads
26
Last commit
Oct 21, 2026 (8 days ago)
Last release
Jun 6, 2026 (4 months ago)
Last package publish
May 4, 2026 (5 months ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name
io.github.bch1212/queryshield
Version
1.0.1
Auth
API key
Packages
pypi queryshield-mcp
License
MIT
Repository
github.com/bch1212/queryshield
First seen
Oct 24, 2026
Last checked
Oct 25, 2026
Source
Official MCP Registrygithub-graphql

More from bch1212

Cite this page

Queryshield MCP server. Agent Mart. https://agentmart.dev/connectors/bch1212-queryshield (last updated 2026-10-25)