Warehouse MCP Server

by tantn89 Your server? Claim it

local only

Warehouse MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 358 installs a week from pypi. Last commit 1 Nov 2026.

Governed read-only warehouse access for agents: SQL guard, row policies, PII pseudonyms, audit log.

Installs per day peak 358 · avg 11

a month agotoday

358

Installs / week

pypi · warehouse-mcp

Stars

0 open issues

1 Nov 2026

Last commit

from GitHub

MIT

License

Python

Nothing serious here today

Today is the operative word: we check Warehouse MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add warehouse-mcp -- uvx warehouse-mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "warehouse-mcp": {
      "command": "uvx",
      "args": [
        "warehouse-mcp"
      ]
    }
  }
}

~/.codex/config.toml

[mcp_servers.warehouse-mcp]
command = "uvx"
args = ["warehouse-mcp"]

.cursor/mcp.json

{
  "mcpServers": {
    "warehouse-mcp": {
      "command": "uvx",
      "args": [
        "warehouse-mcp"
      ]
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "warehouse-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "warehouse-mcp"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: WAREHOUSE_MCP_POSTGRES_DSN (Postgres connection string of a read-only role (Postgres configs only)), WAREHOUSE_MCP_PII_SALT (Fixed salt for stable pseudonyms across restarts (16-128 letters or digits)), WAREHOUSE_MCP_AUDIT_LOG (Path of the JSONL audit log; stderr when unset).

Alternatives to Warehouse MCP

same job, measured the same way

Pgmoat

by kitalon-labs-llc

Governed, read-only Postgres access for AI agents: SQL safety, RLS, budgets, tamper-evident audit.

658 installs/wk local only

Universal DB (read-only)

by alghanim

Read-only, guarded SQL access for AI agents: PostgreSQL, MySQL, ClickHouse, Oracle, SQL Server, Db2

local only

QueryBear

by spencerpauly

Safe, read-only Postgres and MySQL access for AI agents. Audit log + column-level controls.

answering

SafeSelect MCP

by antonillos

Fail-closed, read-only PostgreSQL and MongoDB access for AI agents over MCP.

local only

LogCarverGuard

by caiderek

Guardrail for AI agents on SQL Server: statement blocking, optional read-only mode and an audit log.

local only

Eclipse Deep Field MCP

by cyan-eclipse-technologies-llc

The governed database layer for agents — every store in one look, under policy: read-only by

local only

Dataassist Io

by dataassistio

Query your org's data in natural language — read-only MCP access to SQL, NoSQL, files & warehouses.

answering

QueryPilot

by nickklos10

Safe SQL gateway for AI agents: SELECT-only validation, access policies, masking, audit trail, evals

74 installs/wk local only

Warehouse MCP — questions

Answers built from our own checks of this server.

Why is there no uptime for Warehouse MCP?

Warehouse MCP runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package warehouse-mcp was installed 358 times last week.

How do I connect Warehouse MCP?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls warehouse-mcp straight from pypi; nothing to host, nothing to sign up for.

How many people use Warehouse MCP?

The pypi package warehouse-mcp was installed 358 times in the last week. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Warehouse MCP open source?

Yes — it is published under the MIT licence, written in Python and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.