mcpbeat Sign in

QueryPilot MCP Server

by nickklos10 Your server? Claim it
local only

QueryPilot runs on your own machine — the client starts it, so there is no endpoint to ping. 39 installs a week from pypi. Last commit 12 Jul 2026.

Safe SQL gateway for AI agents: SELECT-only validation, access policies, masking, audit trail, evals

Installs per day peak 18 · avg 8 · -36% w/w
a month agotoday
39
Installs / week
pypi · querypilot
1
Stars
0 open issues
12 Jul 2026
Last commit
0 releases in 90 days
MIT
License
Python

Nothing serious here today

Today is the operative word: we check QueryPilot every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add querypilot -- uvx querypilot
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "querypilot": {
      "args": [
        "querypilot"
      ],
      "command": "uvx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.querypilot]
command = "uvx"
args = ["querypilot"]
.cursor/mcp.json
{
  "mcpServers": {
    "querypilot": {
      "args": [
        "querypilot"
      ],
      "command": "uvx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "querypilot": {
      "args": [
        "querypilot"
      ],
      "command": "uvx"
    }
  }
}

This one needs environment variables set before it will start: QUERYPILOT_DATABASE_URL (SQLAlchemy-style database connection URL, e.g. sqlite:///demo.db or postgresql://user:pass@host:5432/db. Equivalent to --database-url.), QUERYPILOT_DIALECT (SQL dialect for the connector. Equivalent to --dialect.), QUERYPILOT_MAX_ROWS (Maximum rows returned per query. Equivalent to --max-rows.), QUERYPILOT_TIMEOUT_SECONDS (Query execution timeout in seconds. Equivalent to --timeout-seconds.), QUERYPILOT_ACCESS_POLICY_JSON (JSON-encoded AccessPolicy (blocked_columns, allowed_columns, row_filters, masking_rules) enforced before execution. Equivalent to --access-policy-json.), QUERYPILOT_MCP_TRANSPORT (MCP transport used by `querypilot mcp`. Equivalent to --transport. Most MCP clients should leave this at stdio; streamable-http is for clients that speak Streamable HTTP directly.). The author declared them in the registry entry; get the values from the project itself.

Alternatives to QueryPilot

same job, measured the same way
QueryBear
by spencerpauly

Safe, read-only Postgres and MySQL access for AI agents. Audit log + column-level controls.

answering
A2db
by agentic-eng

Safe, read-only database access for AI agents. 5 databases, batch queries, SQLGlot.

102 installs/wk local only
SafeSelect MCP
by antonillos

Fail-closed, read-only PostgreSQL and MongoDB access for AI agents over MCP.

local only
Midplane
by midplane

Safe-by-default SQL guardrails for AI agents: AST-checked queries, per-table policy, audit log.

74 installs/wk local only
pgops
by arzharch

Safe, audited PostgreSQL operations for AI agents: queries, migrations, EXPLAIN, containers

972 installs/wk local only
FronyBoard
by cafelatte1

Project tracker for AI agents: roadmap, periods, tasks and a validation gate, in one SQLite file

local only
valv
by valv

Let coding agents query any SQL database safely. Read-only by default and scoped by your policies.

68 installs/wk local only
Quarry
by wangggym

Safety-railed database access for agents: Postgres, MySQL, Redis. Read-only by default.

166 installs/wk local only

QueryPilot — questions

Answers built from our own checks of this server.

Why is there no uptime for QueryPilot?
QueryPilot runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package querypilot was installed 39 times last week.
How do I connect QueryPilot?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls querypilot straight from pypi; nothing to host, nothing to sign up for.
How many people use QueryPilot?
The pypi package querypilot was installed 39 times in the last week. Week over week that is -36%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is QueryPilot open source?
Yes — it is published under the MIT licence, written in Python and 1 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.