mcpbeat Sign in

QueryPilot MCP Server

by nickklos10 Your server? Claim it
local only

QueryPilot runs on your own machine — the client starts it, so there is no endpoint to ping. 74 installs a week from pypi. Last commit 22 Oct 2026.

Safe SQL gateway for AI agents: SELECT-only validation, access policies, masking, audit trail, evals

Installs per day peak 23 · avg 9 · -14% w/w
a month agotoday
74
Installs / week
pypi · querypilot
3
Stars
0 open issues
22 Oct 2026
Last commit
from GitHub
MIT
License
Python

Nothing serious here today

Today is the operative word: we check QueryPilot every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add querypilot -e 'QUERYPILOT_DATABASE_URL=<QUERYPILOT_DATABASE_URL>' -- uvx querypilot
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "querypilot": {
      "command": "uvx",
      "args": [
        "querypilot"
      ],
      "env": {
        "QUERYPILOT_DATABASE_URL": "<QUERYPILOT_DATABASE_URL>"
      }
    }
  }
}
~/.codex/config.toml
[mcp_servers.querypilot]
command = "uvx"
args = ["querypilot"]
env = { QUERYPILOT_DATABASE_URL = "<QUERYPILOT_DATABASE_URL>" }
.cursor/mcp.json
{
  "mcpServers": {
    "querypilot": {
      "command": "uvx",
      "args": [
        "querypilot"
      ],
      "env": {
        "QUERYPILOT_DATABASE_URL": "<QUERYPILOT_DATABASE_URL>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "querypilot": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "querypilot"
      ],
      "env": {
        "QUERYPILOT_DATABASE_URL": "<QUERYPILOT_DATABASE_URL>"
      }
    }
  }
}

Put your own value in place of <QUERYPILOT_DATABASE_URL> (SQLAlchemy-style database connection URL, e.g. sqlite:///demo.db or postgresql://user:pass@host:5432/db. Equivalent to --database-url). The author’s registry entry marks it as required.

Optional settings from the registry entry, left out of the block above: QUERYPILOT_DIALECT (SQL dialect for the connector. Equivalent to --dialect), QUERYPILOT_MAX_ROWS (Maximum rows returned per query. Equivalent to --max-rows), QUERYPILOT_TIMEOUT_SECONDS (Query execution timeout in seconds. Equivalent to --timeout-seconds), QUERYPILOT_ACCESS_POLICY_JSON (JSON-encoded AccessPolicy (blocked_columns, allowed_columns, row_filters, masking_rules) enforced before execution. Equivalent to --access-policy-json), QUERYPILOT_MCP_TRANSPORT (MCP transport used by `querypilot mcp`. Equivalent to --transport. Most MCP clients should leave this at stdio; streamable-http is for clients that speak Streamable HTTP directly).

Alternatives to QueryPilot

same job, measured the same way
QueryBear
by spencerpauly

Safe, read-only Postgres and MySQL access for AI agents. Audit log + column-level controls.

answering
A2db
by agentic-eng

Safe, read-only database access for AI agents. 5 databases, batch queries, SQLGlot.

109 installs/wk local only
Pgmoat
by kitalon-labs-llc

Governed, read-only Postgres access for AI agents: SQL safety, RLS, budgets, tamper-evident audit.

658 installs/wk local only
Midplane
by midplane

A gateway between AI agents and Postgres: table access, masking at the source, approvals and audit.

1 202 installs/wk local only
SafeSelect MCP
by antonillos

Fail-closed, read-only PostgreSQL and MongoDB access for AI agents over MCP.

local only
Warehouse MCP
by tantn89

Governed read-only warehouse access for agents: SQL guard, row policies, PII pseudonyms, audit log.

358 installs/wk local only
AgentSQL
by cuipengdba

Guard AI agents' PostgreSQL/MySQL access via MCP: SQL audit, auth, masking, write approval

answering
MySQL Audit
by jimmyjan0824

MySQL migration and query safety review for AI agents: locks, table copies, data loss, injection.

2 577 installs/wk local only

QueryPilot — questions

Answers built from our own checks of this server.

Why is there no uptime for QueryPilot?
QueryPilot runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package querypilot was installed 74 times last week.
How do I connect QueryPilot?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls querypilot straight from pypi; nothing to host, nothing to sign up for.
How many people use QueryPilot?
The pypi package querypilot was installed 74 times in the last week. Week over week that is -14%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is QueryPilot open source?
Yes — it is published under the MIT licence, written in Python and 3 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.