QueryPilot

Safe SQL gateway for AI agents: SELECT-only validation, access policies, masking, audit trail, evals

stdiocommunityapplication

Package Details

Transportstdio
Runtimeuvx

Package Arguments

Positional
Position 0
mcpSelects the `querypilot mcp` subcommand (as opposed to `serve` or `eval`).

Environment Variables

QUERYPILOT_DATABASE_URL(str)
RequiredSecret

SQLAlchemy-style database connection URL, e.g. sqlite:///demo.db or postgresql://user:pass@host:5432/db. Equivalent to --database-url.

QUERYPILOT_DIALECT(str)
Default:sqlite

SQL dialect for the connector. Equivalent to --dialect.

QUERYPILOT_MAX_ROWS(num)
Default:100

Maximum rows returned per query. Equivalent to --max-rows.

QUERYPILOT_TIMEOUT_SECONDS(num)
Default:10

Query execution timeout in seconds. Equivalent to --timeout-seconds.

QUERYPILOT_ACCESS_POLICY_JSON(str)

JSON-encoded AccessPolicy (blocked_columns, allowed_columns, row_filters, masking_rules) enforced before execution. Equivalent to --access-policy-json.

QUERYPILOT_MCP_TRANSPORT(str)
Default:stdio

MCP transport used by `querypilot mcp`. Equivalent to --transport. Most MCP clients should leave this at stdio; streamable-http is for clients that speak Streamable HTTP directly.