QueryShield MCP
QueryShield is a secure SQL proxy and named credential vault designed for AI agents. It translates natural language to SQL via Claude, validates queries at the AST level to ensure only SELECT statements are allowed, and applies per-agent row-level security. It executes queries against customer databases and logs attempts to an append-only audit table, ensuring agents never see connection strings.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Translate natural language queries to SQL
- Enforce AST-level query safety and row-level security
- Store and manage agent credentials securely
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
queryshield-mcp 1.0.1
{
"version": "1.0.1",
"transport": "stdio",
"identifier": "queryshield-mcp",
"registryType": "pypi",
"environmentVariables": [
{
"name": "QUERYSHIELD_API_KEY",
"isRequired": true,
"description": "Agent API key issued by QueryShield."
},
{
"name": "QUERYSHIELD_BASE_URL",
"description": "Override the default endpoint."
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"queryshield-mcp": {
"command": "uvx",
"args": [
"queryshield-mcp==1.0.1"
],
"env": {
"QUERYSHIELD_API_KEY": "<YOUR_QUERYSHIELD_API_KEY>",
"QUERYSHIELD_BASE_URL": "<YOUR_QUERYSHIELD_BASE_URL>"
}
}
}
}Cline
{
"mcpServers": {
"queryshield-mcp": {
"command": "uvx",
"args": [
"queryshield-mcp==1.0.1"
],
"env": {
"QUERYSHIELD_API_KEY": "<YOUR_QUERYSHIELD_API_KEY>",
"QUERYSHIELD_BASE_URL": "<YOUR_QUERYSHIELD_BASE_URL>"
}
}
}
}VS Code
{
"servers": {
"queryshield-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"queryshield-mcp==1.0.1"
],
"env": {
"QUERYSHIELD_API_KEY": "<YOUR_QUERYSHIELD_API_KEY>",
"QUERYSHIELD_BASE_URL": "<YOUR_QUERYSHIELD_BASE_URL>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"queryshield-mcp": {
"command": "uvx",
"args": [
"queryshield-mcp==1.0.1"
],
"env": {
"QUERYSHIELD_API_KEY": "<YOUR_QUERYSHIELD_API_KEY>",
"QUERYSHIELD_BASE_URL": "<YOUR_QUERYSHIELD_BASE_URL>"
}
}
}
}Let your agent find its tools
Find servers like QueryShield MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.