warehouse-mcp

{
  "name": "io.github.kalehdoo/warehouse-mcp",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "version": "0.4.2",
  "packages": [
    {
      "version": "0.4.2",
      "transport": {
        "type": "stdio"
      },
      "identifier": "warehouse-mcp",
      "registryType": "npm",
      "runtimeArguments": [
        {
          "type": "positional",
          "value": "start",
          "isRequired": true,
          "description": "Boots the MCP server. Use 'init' for interactive setup or 'doctor' to diagnose configuration."
        }
      ],
      "environmentVariables": [
        {
          "name": "MCP_TRANSPORT",
          "default": "stdio",
          "description": "Set to 'stdio' for desktop AI clients (Claude Desktop, Cursor). Defaults to 'http'."
        },
        {
          "name": "WAREHOUSE_TYPE",
          "format": "string",
          "choices": [
            "postgres",
            "oracle",
            "redshift",
            "snowflake",
            "bigquery",
            "duckdb"
          ],
          "isRequired": true,
          "description": "Which warehouse to connect to. One of: postgres, oracle, redshift, snowflake, bigquery, duckdb. (DuckDB also handles MotherDuck via DUCKDB_PATH=md:<db>.)"
        },
        {
          "name": "MCP_API_KEYS",
          "format": "string",
          "isSecret": true,
          "description": "Comma-separated bearer keys with role and optional warehouse-role impersonation: 'key1:reader,key2:admin', 'key3:reader:set_role=alice'. Leave empty for stdio (OS process boundary is the trust boundary). Required for HTTP."
        },
        {
          "name": "DUCKDB_PATH",
          "format": "string",
          "description": "DuckDB file path, ':memory:', or 'md:<database>' for MotherDuck. Required when WAREHOUSE_TYPE=duckdb."
        },
        {
          "name": "MOTHERDUCK_TOKEN",
          "format": "string",
          "isSecret": true,
          "description": "MotherDuck service token. Required when DUCKDB_PATH starts with 'md:'."
        },
        {
          "name": "PG_HOST",
          "description": "Postgres host. Required when WAREHOUSE_TYPE=postgres. (Use REDSHIFT_HOST for Redshift.)"
        },
        {
          "name": "PG_DATABASE",
          "description": "Postgres database name."
        },
        {
          "name": "PG_USER",
          "description": "Postgres user."
        },
        {
          "name": "PG_PASSWORD",
          "isSecret": true,
          "description": "Postgres password."
        },
        {
          "name": "ORACLE_USER",
          "description": "Oracle user. Required when WAREHOUSE_TYPE=oracle."
        },
        {
          "name": "ORACLE_PASSWORD",
          "isSecret": true,
          "description": "Oracle password."
        },
        {
          "name": "ORACLE_CONNECT_STRING",
          "description": "Oracle Easy Connect (e.g. host:1521/SERVICE), TNS descriptor, or alias."
        },
        {
          "name": "SNOWFLAKE_ACCOUNT",
          "description": "Snowflake account identifier (e.g. xy12345.us-east-1). Required when WAREHOUSE_TYPE=snowflake."
        },
        {
          "name": "SNOWFLAKE_USER",
          "description": "Snowflake username."
        },
        {
          "name": "SNOWFLAKE_PRIVATE_KEY_PATH",
          "description": "Path to PKCS8 private key (.p8). Snowflake auth is key-pair only; password auth is not supported."
        },
        {
          "name": "BIGQUERY_PROJECT",
          "description": "GCP project id. Required when WAREHOUSE_TYPE=bigquery."
        },
        {
          "name": "GOOGLE_APPLICATION_CREDENTIALS",
          "description": "Path to BigQuery service-account JSON. Omit on GKE / Cloud Run with workload identity."
        },
        {
          "name": "GUARDRAIL_PII_MASK",
          "choices": [
            "on",
            "off"
          ],
          "default": "off",
          "description": "Set to 'on' to enable role-aware PII masking on result rows (emails, SSNs, phones, IPs, Luhn-validated CCs). Off by default."
        },
        {
          "name": "MCP_RATE_LIMIT_RPM",
          "default": "0",
          "description": "Per-principal token-bucket rate limit on tool invocations. 0 = disabled. Recommend 60 for production."
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/kalehdoo/warehouse-mcp",
    "source": "github"
  },
  "websiteUrl": "https://github.com/kalehdoo/warehouse-mcp",
  "description": "Production MCP server for Postgres, Oracle, Snowflake, BigQuery, Redshift, DuckDB, MotherDuck."
}