Dmytro Galko · open-source tools

mcp-data-server

Claude reads the business database, and cannot write to it

The blocker in most “connect AI to our data” projects is not the wiring, it is the sentence nobody can say out loud: what exactly stops the model writing, dropping, or reading the salaries table. This answers it in configuration rather than in trust — a read-only connection, an explicit table allowlist, PII masking, a row cap, a query timeout and an audit log of every question asked.

What it does

How it is proved

31 tests, run on a clean machine in its own virtual environment. Ask it which countries order most and what refunds cost last quarter in Claude Desktop, and the answer comes from the real database.

PythonMCPread-only connection31 tests

People find this looking for

mcp server read only database, connect claude to postgres safely, llm sql guardrails, table allowlist PII masking, audit log for AI database access.

If that is your week and you would rather someone else did it, write to hello@dkautomation.dev or open an issue.