live wire
▸Oracle Select AI generates SQL/PGQ for property graphs—but errors if one AI profile mixes graphs with tables or viewsOracle▸Domo’s data team standardizes MCP builds with shared scaffolding; beta toolkits inherit user permissionsDomo▸Databricks proposes five outcome signals for agentic BI—and says dashboard counts and license usage miss decision qualityDatabricks▸One vibe-coded database app needed 56+ human test hours and three repair rounds despite AI Studio’s verification claimsMancas & Mancas / arXiv▸BigQuery AI.IF’s default cost mode trains a local model for most rows—and drops row-error thresholdsGoogle Cloud▸AWS’s multi-tenant data-agent pattern gives the broker Lambda no data permissions; Cognito roles carry Lake Formation scopeAWS Big Data Blog▸Amazon OpenSearch’s optimized engine adds nested agent traces, but AWS reserves it for log analytics—not vector searchAWS▸Two interpretation-based provenance semantics cannot express SQL bag difference, new theorem showsKolaitis / arXiv▸Databricks Feature Views reuse one definition for training and live scoring, but online lookup still returns latest available stateDatabricks▸Databricks Genie’s Slack and Teams previews default channel answers to public, even when viewers lack source-data accessDatabricks▸Snowflake’s two-tool GraphRAG agent beat a seven-tool graph setup 70% to 60% on 22 ontology questionsSnowflake Engineering▸Semantix opens an Apache-2.0 semantic-first data-agent stack, but labels the project WIP and has no release or adoption yetGitHub / icosmos-space▸Confluent defines Streamhouse as shared current state for agents and apps, but says broader semantics and governance are still to comeConfluent▸Graph-repair retrieval cut F1 by 0.126 on one suite; a learned router used fewer tokens than always-on retrieval in all sixLin et al. / arXiv▸Oracle Select AI generates SQL/PGQ for property graphs—but errors if one AI profile mixes graphs with tables or viewsOracle▸Domo’s data team standardizes MCP builds with shared scaffolding; beta toolkits inherit user permissionsDomo▸Databricks proposes five outcome signals for agentic BI—and says dashboard counts and license usage miss decision qualityDatabricks▸One vibe-coded database app needed 56+ human test hours and three repair rounds despite AI Studio’s verification claimsMancas & Mancas / arXiv▸BigQuery AI.IF’s default cost mode trains a local model for most rows—and drops row-error thresholdsGoogle Cloud▸AWS’s multi-tenant data-agent pattern gives the broker Lambda no data permissions; Cognito roles carry Lake Formation scopeAWS Big Data Blog▸Amazon OpenSearch’s optimized engine adds nested agent traces, but AWS reserves it for log analytics—not vector searchAWS▸Two interpretation-based provenance semantics cannot express SQL bag difference, new theorem showsKolaitis / arXiv▸Databricks Feature Views reuse one definition for training and live scoring, but online lookup still returns latest available stateDatabricks▸Databricks Genie’s Slack and Teams previews default channel answers to public, even when viewers lack source-data accessDatabricks▸Snowflake’s two-tool GraphRAG agent beat a seven-tool graph setup 70% to 60% on 22 ontology questionsSnowflake Engineering▸Semantix opens an Apache-2.0 semantic-first data-agent stack, but labels the project WIP and has no release or adoption yetGitHub / icosmos-space▸Confluent defines Streamhouse as shared current state for agents and apps, but says broader semantics and governance are still to comeConfluent▸Graph-repair retrieval cut F1 by 0.126 on one suite; a learned router used fewer tokens than always-on retrieval in all sixLin et al. / arXiv
nl2sql.ai
the directory · 128 systems tracked

Cloud-native

Open source

Aegis-SQLMIT
Siddanagouda M. Patil

MIT DuckDB/ANSI text-to-SQL engine that maps governed metrics to deterministic SQL, discovers bridge tables with a NetworkX Steiner tree, and validates ASTs with SQLGlot.

AgentCrewMIT
mohdnayif799

Agentic text-to-SQL system that plans, selects schema, executes against a physically read-only database, repairs errors, verifies semantics and exposes traces plus an MCP server.

AI-Enabled Decision-Support PlatformMIT
Waqas Ahmad

MIT-licensed reference BI stack joining configurable multi-source ingestion, a DuckDB star schema, dashboards, workflow rules, and a Claude text-to-SQL/RAG assistant. It excludes PII from the reporting layer, redacts questions, parses model SQL with sqlglot, restricts execution to approved read-only tables, caps rows, and records tool calls in an append-only audit log.

AI Sales Data Analyst Agent
anay-singh-gh

Beginner-oriented PostgreSQL text-to-SQL notebook that returns tables or basic charts, maintains conversation context, retries SQL errors, and layers keyword validation over read-only transactions and a statement timeout.

Analytics AgentMIT
TonyLee-99

Open-source text-to-SQL analytics agent with governed metrics, abstention, SQL guardrails, PII pseudonymization, BIRD Mini-Dev evaluation, red-team artifacts, FastAPI and MCP serving.

Analytics AgentMIT
TonyLee-99

Open-source text-to-SQL analytics agent with a governed metric layer, confidence-based abstention, read-only SQL guardrails, PII pseudonymization, FastAPI/MCP serving, and reproducible BIRD Mini-Dev plus Olist evaluations.

AskData AIMIT
Inesa Poghosyan

Self-hosted text-to-SQL assistant for PostgreSQL, MySQL and SQLite that returns answers with the executed SQL, using FastAPI, React, local embeddings and sqlglot-based guardrails.

askdbMIT
dezhiguan

Governed NL2SQL agent built around AST rewriting, database privileges, cost caps, semantic metrics, audit replay and a deliberately bounded execution pipeline.

Ask the WarehouseMIT
Saigwe

MIT-licensed governed analytics reference stack using dbt MetricFlow, a constrained MCP metrics interface and a benchmark over public US federal procurement data.

Ask Your DataMIT
Kush Patel

Auditable text-to-SQL demo over synthetic portfolio datasets. It supports model-generated SQL or a deterministic, keyless compiler, runs both through structural verification and a read-only guard, and shows the SQL beside every result.

AtlasAGPL-3.0 core; MIT clients/plugins; commercial ee/
AtlasDevHQ

Company-facts and semantic-context system for AI agents that separates live surveyed data, human-approved facts and source records, exposes answers through MCP, and can run self-hosted in a VPC.

AtlasAGPL-3.0 core; MIT clients; commercial EE
AtlasDevHQ

Self-hostable AI data analyst for SQL warehouses and REST APIs, grounded in an authored YAML semantic layer with review-gated knowledge context, MCP, dashboards and embeddable clients.

AvelisApache-2.0
shenhui027-arch

Grounded analytics and text-to-SQL platform built around governed metrics, lineage and change management, with database adapters and OAuth-protected MCP access.

Card Transaction Lakehouse
Sahil Bhadane

Apache-2.0-style reference lakehouse with an integrated local text-to-SQL layer over DuckDB and Parquet, schema/metric retrieval, parser-based table allow-listing, forced row limits, a locked external-file sandbox and one-step SQL repair.

Cassis Ontology BootstrapMIT
Cassis

Open-source kit for assembling reviewable analytics-agent context from dbt models, warehouse schemas, dashboards, query history and documentation while preserving evidence and surfacing unresolved meaning as questions.

ChatBI
Jarvis-zhuang

Photovoltaic-domain conversational BI system with retrieval, text-to-SQL, layered validation, read-only execution, self-correction and committed development and held-out evaluations.

ChatSQLMIT
FrostDsc

MIT agentic SQLite text-to-SQL system with LangGraph correction loops, SQLGlot validation, local RAG, CLI/Streamlit interfaces and committed BIRD Mini-Dev ablations.

ChemQMIT
hxush158

MIT-licensed process-industry natural-language analytics curriculum and reference stack using PostgreSQL semantic views, SQLGlot guardrails, read-only roles, row-level security, golden-answer generation and evaluation tooling.

DashApache-2.0
Agno

Self-learning data agent that combines six context layers, validated-query knowledge, error learnings, live schema introspection, and separate analyst/engineer roles for answering business questions over PostgreSQL.

Data Agent
aliii-codes

Small LangGraph/LangChain text-to-SQL agent for SQLite. It introspects tables, columns and foreign keys, generates one read-only query, validates it before execution, opens SQLite in read-only mode, caps results at 100 rows and retries failures up to three times. The repository includes offline tests and a 20-question exact-result harness; its reported 20/20 agent run is on the bundled sample database and may vary by model.

DataAgentApache-2.0
DataGallery

Apache-licensed enterprise data-agent framework combining NL2SQL, semantic retrieval, multi-agent workflows, feature engineering, YAML orchestration, and MCP/A2A tool integration.

DataheraldApache-2.0
Dataherald

Open-source natural-language-to-SQL service for interacting with SQL databases using LLMs; the public repository is mature but has seen no code push since July 2024.

DataMind Analyst
SahilMudgil

Agentic text-to-SQL analytics application built with LangGraph, FastAPI and React for PostgreSQL and CSV data, with SQLGlot-based validation, statistical-outlier detection and streamed traces.

DataTalkNo license declared
miao-wuwu

Chinese-language NL2SQL application for job-market data with three-stage validation, self-repair, visualization, and a committed 102-question exact-result evaluation.

DatatideMIT
Yang Shihui

Self-hosted conversational BI platform for natural-language analysis across CSV, Parquet, Excel and PostgreSQL, with DuckDB execution, charts, dataset-level access control, scheduled reports, Skills and MCP extensions.

Data WardenApache-2.0
Samuel Viciana Moreno

Spanish-language governed NL-to-SQL lakehouse agent prototype. Its implemented layers parse SQL into an allowlisted AST, enforce role/column/position policies, and estimate query cost from Iceberg manifests before DuckDB execution; generation, masking, and audit layers are not yet complete.

DB-AgentMIT
jamesdffgy-source

Local-first Windows desktop database assistant that turns natural-language requests into typed, reviewable operations, with physically read-only query paths and explicit one-use confirmation for SQLite writes.

DB-GPTMIT
eosphoros-ai

MIT-licensed agentic data assistant and application platform that connects to databases and files, generates and executes SQL and Python analysis, runs reusable skills, and produces reports and dashboards.

DBQuillMIT
DBQuill

Local-first Windows database agent for natural-language SQL, charts, and controlled writes across SQLite, MySQL, and PostgreSQL, with read-only defaults, typed reviewable operations, bounded execution, and one-use write confirmation.

DBVERSEMIT
Koji Ozono

MIT-licensed database client with 3D and 2D ER diagrams, SQLite/PostgreSQL support, editable data views and text-to-SQL generation through OpenAI-compatible local or cloud model endpoints.

DeepSQLApache-2.0
DeepSQLAI

Self-hosted Postgres and MySQL database agent for natural-language BI, schema exploration, slow-query analysis, index recommendations, dashboards and MCP access, with bring-your-own-model endpoints.

DexApache-2.0
Exmergo

Agent-native analytics-engineering toolkit for warehouse exploration, dbt transformation and semantic modeling, schema-drift maintenance, and guarded verification of generated changes.

dstApache-2.0
get-dst

Governed serving layer between AI agents and data warehouses, returning definition-grounded answers with SQL, confidence grades and signed receipts through MCP or REST.

E-commerce Analytics CopilotMIT
kejunli-mi

MIT-licensed, Olist-specific analytics stack combining DuckDB views, a metric semantic layer, dashboards and a deterministic natural-language router that selects allowlisted SQL templates rather than generating arbitrary SQL.

Enterprise AI EmployeeApache-2.0
CW5201

Apache-2.0 knowledge-augmented enterprise agent prototype combining intent routing, RAG and read-only DuckDB text-to-SQL. The maintainer explicitly marks knowledge-graph, claim-evidence verification, evaluation and frontend work as unfinished.

Enterprise Text-to-SQL Agent
Kartikey Kaushiq

Cyclic LangGraph text-to-SQL reference with SQLGlot validation, independent read-only SQLite/PostgreSQL enforcement, timeouts, row caps and a bounded typed-error repair loop.

fitcher
Community

Early governed text-to-SQL analytics engine for ClickHouse with domain packs, tracing and a committed layer-level evaluation; still missing a declared software license and several planned controls.

GameOps InvestigatorMIT (code); CC BY 4.0 (synthetic data)
nickname21kmr

Evidence-first game-operations incident investigation agent that exposes metric definitions, read-only SQL, cohort comparisons, anomaly detection and citation-checked reports through MCP tools.

gbiAGPL-3.0
whirai

Self-hosted generative BI in a single Go binary, with Excel import, text-to-SQL, dashboards, RBAC, data subjects, branded portal and local SQLite storage.

gbi — Generative BIAGPL-3.0
whirai

Self-hosted generative BI platform that imports Excel into isolated SQLite-backed data subjects and lets an LLM build and revise dashboards. Ships as one Go binary with embedded React UI, read-only SQL execution, page versioning, ACLs, RBAC and render-feedback checks.

HR NL-to-SQL Assistant
Lokesh

Role-aware HR analytics assistant for MySQL/SQLite with schema grounding, SQLGlot validation, read-only execution, clarification, repair, follow-ups and charts.

HR NL-to-SQL AssistantNo license declared
Lokesh-290104

Self-hosted HR analytics assistant for MySQL/SQLite with role-scoped schema access, sqlglot query validation, read-only database credentials, bounded repair, charts, and a 55-question execution-accuracy harness.

incognito-sqlApache-2.0
Open source (khodossss)

MCP SQL privacy gateway that parses agent-written queries, traces outputs to protected base columns, regenerates read-only SQL and replaces declared personal values with stable local tokens. A signed-in human can resolve tokens locally; the model cannot.

InsightFlow AgentMIT
haihaihai112

MIT-licensed, self-hosted business analytics agent that turns constrained natural-language plans into validated read-only SQL, auditable reports and MCP/FastAPI interfaces. The repository includes a 20-case demo regression set, retrieval metrics, tests and explicit limits on what has not been validated with real models or services.

InsightPilotMIT
Open source (heji110705)

Chinese self-service analytics agent with a governed semantic layer, BM25 retrieval, SQL AST allowlisting, read-only execution, trace replay and reproducible result-equivalence evaluation. Its published ablations explicitly report that the critic did not improve SQL execution accuracy.

JeevesMIT
Jayanta

MIT Laravel NL2SQL package and Blade chat widget for PostgreSQL, MySQL, MariaDB and SQLite. Sends schema structure rather than rows to the configured model, supports hosted or local models, and exposes benchmark, privacy and validator caveats.

keygraphMIT
alikarami76

Deterministic schema-context map for data analysts and text-to-SQL agents, serving join paths, keys, grain and status codes through MCP, CLI JSON or Markdown without LLM calls.

LibreDB StudioMIT
LibreDB

MIT-licensed browser database studio supporting many SQL, NoSQL and infrastructure engines, with SSO, audit trails and AI-assisted query generation.

Marketplace Seller Operations AgentsMIT
jagadishmazure-jpg

MIT-licensed synthetic seller-operations agent demo with fixed-intent text-to-SQL over five SQLite read-only views, an authorizer-backed allowlist, row caps, audit chaining, PII-scrubbed feedback and human confirmation gates. Its SQL component is template-routed rather than free-form generation.

Metric AgentMIT
WenDing-Y

Self-hosted, metric-first conversational analytics agent that constrains SQL generation with published metric SQL, themes, models and join relationships; asks for clarification when semantic retrieval misses.

Multi-Source Data AgentApache-2.0
YingliaoO

Apache-2.0 LangGraph data agent that routes natural-language questions across Text-to-SQL, PostgreSQL/PGVector RAG and Neo4j graph queries, then unifies results through an evidence-lineage contract and observable execution trace.

naoApache-2.0 core; commercial enterprise-marked files
nao Labs

Open-source analytics-agent framework with a CLI for building versioned context, a self-hosted chat interface, evaluation commands and feedback workflows for deploying natural-language analytics to teams.

nl2sql-agentMIT
Ashutosh Gandhi

MIT-licensed schema-grounded SQLite text-to-SQL prototype with foreign-key join-path hints, SQLGlot read-only validation, a two-round repair loop, execution traces and a committed 30-question result-matching evaluation.

NL2SQL Full Project
Kishor

Conversational Gemini NL2SQL application for SQLite and PostgreSQL with schema retrieval, English/Tamil/Thanglish input, voice, charts, self-correction and staged write confirmation.

OntoAuditMIT
Eileenes

Deterministic semantic-layer and ontology drift auditor that checks ontology JSON against warehouse DDL, SQL templates and optional CSV samples, producing CI-friendly findings and scores without LLM calls.

OpenChatBIMIT
OpenChatBI

Open-source conversational BI and Text2SQL agent with schema linking, catalog retrieval, persistent memory, Plotly visualization, MCP support, and Streamlit/Gradio interfaces across multiple warehouses and LLM providers.

Overseas Tax Agent
weeast1521

Open-source prototype for Korean brokerage support: guarded text-to-SQL over overseas-stock trades, deterministic capital-gains calculations, local regulatory RAG, and human-review gating. SQL is AST-validated, customer-scoped, read-only, time-limited and row-capped.

ParityMIT
Parity Contributors

Alpha Python regression-test and CI-gate toolkit for text-to-SQL and analytical agents. Runs generated SQL against SQLite fixtures and checks golden-result, invariant, or baseline-differential expectations before returning a failing exit code.

pharma-text2sqlMIT
hamzashadeau

Open-source English/French pharmaceutical sales NL2SQL reference that resolves entities before SQL generation, requires users to approve interpretations, validates SQL with an AST guard, and isolates generated Python in a constrained child process.

QueroraApache-2.0
8ugustdev

Local-first macOS conversational-BI desktop app that delegates planning to installed CLI agents, requires them to emit validated intermediate representations rather than SQL, then compiles and executes read-only queries locally.

QueryGateMIT
Arif Krepkiy

Adaptable MCP reference server for governed warehouse access: validates model SQL, injects tenant predicates, masks PII, estimates cost and independently re-parses the final statement before read-only execution.

QueryGuardMIT
jliu4950

Security-focused text-to-SQL reference implementation for fictional SQLite ecommerce data. It treats model output as untrusted, validates SQL with SQLGlot, injects row-level authorization server-side, and ships correctness and adversarial regression suites.

QueryLens
itsvilram

Open-source PostgreSQL text-to-SQL application with layered read-only controls, schema retrieval, self-correction, Redis caching and a published 100-question BIRD mini-dev ablation study.

QueryMeshMIT
Lifree0925

Chinese-language NL2SQL agent for BI workflows, combining terminology normalization, schema linking, model routing, SQLGlot validation, read-only execution, result auditing and bounded self-correction.

QueryMeshMIT
Lifree0925

MIT-licensed Chinese-language NL2SQL agent for business intelligence with business-term normalization, deterministic schema linking, SQLGlot validation, risk scoring, read-only execution, result auditing and bounded self-correction.

QueryMind
Ayaz Gouri

Ambiguity-aware PostgreSQL/SQLite text-to-SQL prototype that offers explicit business-meaning choices before generation and applies AST validation, table whitelisting and read-only execution.

QueryPilotMIT
salexm

Open-source PostgreSQL natural-language analytics app that generates read-only SQL, returns results and rule-selected charts, and evaluates the same production pipeline with a 123-question execution-based harness.

QueryWeaverAGPL-3.0
FalkorDB

Graph-powered Text2SQL application and SDK that models database schemas as a graph, generates and executes SQL from natural language, and exposes REST, MCP, Python SDK, Docker, and multi-turn interfaces for PostgreSQL and MySQL.

QwenPaw-DataApache-2.0
AgentScope

Apache-2.0 enterprise data-agent stack combining governed metadata and knowledge graphs, reusable analysis skills, and a controllable artifact-oriented host runtime. v0.3.0 adds headless HTTP/replayable SSE execution, scheduled runs, snapshots, forks and host-owned delivery.

safe-db-mcpMIT
AishwaryaDV

MIT-licensed MCP server for guarded read-only SQLite queries, with row and time limits, audit logging, object-name hints and a model-through-server text-to-SQL evaluation harness.

SchemaFenceMIT
empoGavin

Read-only database-agent toolkit for SQL review, runbook Q&A and live PostgreSQL diagnosis, with deterministic guardrails around agent-generated operations.

Self-Improving SQL AgentMIT
ssk525

MIT LangGraph text-to-SQL reference agent for a bundled music-store schema. It combines SELECT/WITH-only execution, retries on executor or guardrail errors, a persistent playbook of failure-derived lessons, optional Mem0 user memory, Streamlit UI and MCP execution tool.

SemantixApache-2.0
icosmos-space

Apache-2.0 work-in-progress semantic intelligence platform combining a business semantic layer, capability registry, governed read-only execution, MCP client/server support, and NL2SQL/ChatBI interfaces. The repository contains backend routes, migrations, query/capability modules, tests and deployment scaffolding, but the README labels the project WIP and adoption is currently negligible.

shopkeeper-agentMIT
didilili

Chinese-language educational NL2SQL data agent implementing metadata ingestion, vector and full-text retrieval, LangGraph orchestration, SQL generation/validation/execution, SSE streaming, and a React interface for an e-commerce warehouse.

ShowboardMIT
rohanbeingsocial

MIT-licensed MCP analytics server that lets coding agents produce browser or terminal dashboards from read-only PostgreSQL, SQLite, Excel, and CSV queries.

SQL Analyst AgentMIT
CodeAlekh

Inspectable Python text-to-SQL research agent comparing one-shot, tool-using and database-experienced Claude workflows on a cleaned BIRD subset, with an MCP database server, read-only execution, reproducible splits and tests.

SQLCoder / DefogApache-2.0 (models: varies)
Defog.ai

Family of open-weight text-to-SQL models (SQLCoder) plus a commercial platform. SQLCoder models were repeatedly competitive with much larger general models on SQL generation benchmarks.

sqlmesh-agentMIT
Lifree0925

MIT-licensed self-correcting NL2SQL reference implementation for Chinese-language BI workflows, combining business-term normalization, schema linking, model routing, SQLGlot validation, explain-based scan checks, read-only execution, result auditing and bounded retries.

SQLStageApache-2.0
MeiPixel

Apache-2.0 text-to-SQL workbench and Python SDK with configurable schema retrieval, few-shot prompting, ORM query objects, evaluation and budgeted grid search across SQLite, MySQL and PostgreSQL.

sqlsureApache-2.0
sqlsure

Deterministic semantic SQL inspector that checks AI- or human-written queries for fan-out, additivity, join-key, cross-join, weighted-average, and sensitive-column violations before execution.

SQLVerity AIApache-2.0
SQLVerity AI

Developer-preview governed NL2SQL platform that keeps context and generated SQL inspectable, validates fail-closed, requires explicit approval and runs through bounded read-only connections.

TableTalkMIT
Skander Ghariani

Local, open-source SQLite text-to-SQL agent that runs against an OpenAI-compatible endpoint, repairs SQL errors, generates sandboxed charts, records JSONL traces, and exposes ask/query/schema tools through MCP.

text2sql-frameworkMIT
Text2SqlAgent

Python SDK for agentic text-to-SQL that lets a model explore schemas and test/self-correct queries through an execute_sql tool, with dialect adapters, tracing, optional scenarios, MCP trace analysis, and LangChain middleware.

text2sql Safety GateMIT
zhaosibo-1

MIT-licensed Chinese natural-language-to-SQL reference that routes generated SQL through a table, column and function allow-list, enforces row limits, and executes against a read-only SQLite sandbox with an authorizer and timeout.

Text-to-SQL Agent (Sarthak)Apache-2.0
Sarthak2828

Open-source Python text-to-SQL agent built on Google ADK. Extracts SQLite or PostgreSQL schemas, generates SQL with Gemini, validates syntax and referenced schema objects with SQLGlot, executes queries, and retries failed SQL up to three times.

Text-to-SQL Agent SystemMIT
fengyede79

A controllable enterprise-oriented text-to-SQL reference implementation built with LangGraph, FastAPI, SQLGlot, Qdrant, and Elasticsearch. It combines semantic preflight, multi-path metadata retrieval, AST-based SQL safety checks, bounded correction, recovery flows, SSE observability, and packaged evaluation suites.

Text-to-SQL Analytics AgentMIT
hellozaynabz-art

MIT-licensed Claude-powered DuckDB analytics agent with schema exploration, bounded tool use, read-only execution, self-correction and a 12-question execution-accuracy evaluation harness.

Text-to-SQL Clarification EngineMIT
ricky231b263

Local MySQL text-to-SQL prototype using Ollama and Qwen2.5-Coder, with an ambiguity check that can ask follow-up questions before generating SQL, a Streamlit UI, schema viewer, and result summaries.

TEXTtoSQL GraphModuleMIT
adminaluru

MIT-licensed Python text-to-SQL research implementation that maps questions into a semantic query, resolves business concepts and join paths through Neo4j, deterministically compiles SQL, validates and guardrails it, then executes against PostgreSQL.

Text-to-SQL InterfaceMIT
Imran Mali

Experimental Python text-to-SQL interface focused on AST validation, schema-reference checks and read-only execution controls.

Text-to-SQL RAG StudioMIT
parv55555

Early Python text-to-SQL prototype with schema retrieval, multi-model BYOK support and a self-correction loop.

VannaMIT
Vanna AI

MIT-licensed, user-aware data-agent framework for natural-language-to-SQL, database tools, streaming tables/charts and permission-aware execution. The main GitHub repository is archived; its docs and PyPI package remain online, with v2.0.2 as the latest release.

Weekend WarriorsApache-2.0 (last verified before removal)
pronoiaLabs

Previously published end-to-end Snowflake Cortex Agents reference stack. Its GitHub repository has returned 404 on repeated checks since at least September 12, 2026, so the implementation is currently unavailable for verification.

Wren AIMulti-license: Apache-2.0 code; CC-BY-4.0 docs
Canner

Agent-oriented generative BI and governed text-to-SQL system built around an MDL semantic layer, versioned business context, execution guardrails, and connectors for more than 20 data sources.

WrenAIApache-2.0 / CC-BY-4.0 by path
Canner

Governed generative-BI and text-to-SQL system built around an open context layer, producing SQL, charts, dashboards, and agent-facing context across 20+ data sources.

Commercial

Agami CoreAgami Functional Use License 1.0
Agami AI

Local and self-hosted governed semantic layer for AI database analysis, with human-approved metrics and joins, snapshot-pinned YAML models and receipts recording SQL, relationships and model version.

Chat2DBLicenseRef-Chat2DB (modified Apache-2.0 terms since 5.3.0)
OtterMind

Cross-platform, local-first database client and SQL workspace supporting 40+ databases, bring-your-own-model SQL generation/explanation/optimization, desktop/web/Docker/CLI delivery, and MCP.

My DB MatePolyForm Noncommercial 1.0.0
Trọng Phúc

Source-available, single-user self-hosted analytics assistant combining natural-language SQL, governed context, dashboards, metrics, monitoring and execution-time scope enforcement.

OrionBelt Semantic LayerBSL 1.1; Apache-2.0 on 2030-03-16
RALFORION

Source-available semantic sidecar that compiles version-controlled YAML metrics and dimensions into SQL across eight dialects, exposing governed queries over REST, PostgreSQL wire, Flight SQL and MCP. v2.27.1 adds a tested DuckDB ADBC client path and fixes Flight SQL schema negotiation.

ZG BISource-available (SPDX NOASSERTION)
jeokeo011222

Source-available self-hosted BI application with natural-language querying, AI-assisted SQL, semantic metrics, dashboards, row-level security and MCP support in a single Go binary.

ZG BI (Insight Knowledge BI)PolyForm Noncommercial 1.0.0
Insight Knowledge BI

Source-available, self-hosted BI platform in Go and React with natural-language analytics, SQL assistance, semantic metrics, dashboards, row-level security, audit logs and five read-only MCP tools. The repository documents SQL guards, result masking and identity-bound MCP calls.

Research & internal

Agentic BigQuery DiscoveryApache-2.0
Jordan Totten

Apache-2.0 evaluation harness for the table-retrieval stage before NL2SQL. It compares six BigQuery and Dataplex discovery strategies across a 15-table corpus, 25 graded questions and five repetitions, with Vertex AI Pipelines, checkpointing, scoring and committed full-run results.

Ask Your DataNo license declared
Dilrusha B Abdul Majeed

Runnable ClickHouse text-to-SQL agent using Claude tool calls, structured answers, a database-level read-only user, an application single-SELECT guard, semantic notes, and deterministic evaluation against SQL-computed answers.

ChatBI Photovoltaic AnalyticsUnlicensed
Jarvis-zhuang

Chinese-language photovoltaic analytics prototype that routes table and metric context into text-to-SQL, validates and executes queries through a read-only SQLite connection, retries bounded execution failures, and streams traces over SSE. Includes a 31-question synthetic-domain evaluation and committed per-version outputs. No software license is declared.

Cortex EDWNo license file (README claims MIT)
V Uday

Experimental multi-agent analytics stack combining hybrid schema retrieval, SQL generation, sqlglot AST policy checks, DuckDB execution, statistical diagnostics and numeric groundedness auditing.

E-commerce Analyst AgentNo license declared
1Southair

Experimental Python text-to-SQL analyst for cross-border e-commerce with a committed 84-question Chinese evaluation set and eight ablations; the repository reports business-context grounding improving its own evaluation from 33.3% to 94.0%.

E-commerce Analyst AgentNo license declared
1Southair

A Chinese-language research implementation for text-to-SQL over a seven-table SQLite retail warehouse. It includes read-only validation, execution timeout, optional repair and self-check loops, schema retrieval, and an 84-question executable evaluation set. The repository reports that adding business metric definitions to schema context raised result accuracy from 33.3% to 94.0%; it has no declared software license.

E-commerce Analytics AgentNo license detected
Siao19299

Domain analytics agent for the Olist e-commerce dataset with metric definitions, SQLGlot safety controls, deterministic calculations, FastAPI/Streamlit interfaces and a frozen 60-case evaluation.

EMG RAG
Independent (SanyaBoroda4)

Production-oriented natural-language analytics system over Moraware and QuickBooks data. Routes questions across read-only SQL, semantic retrieval, hybrid SQL-scoped retrieval, and refusal paths; publishes a sanitized 82-question evaluation and operational measurements.

EvalForgeMIT
Navaneeth-007

Reproducible Phi-3 text-to-SQL QLoRA training and evaluation workbench with paired base/adapter predictions, bounded SQLite execution scoring, published manifests, a recorded evidence viewer, and optional model serving.

GroundedSQLMIT (README-declared; no LICENSE file detected)
Shivam Singh

ReAct text-to-SQL research implementation for SQLite that verifies numeric answer claims against returned rows and ships a BIRD mini-dev evaluation harness with intervention and recovery metrics.

MCP Guarded Toolkit
Hone125

Previously tracked early SQL guardrail and MCP reference implementation. The recorded GitHub repository was unavailable at verification time.

MinGuardMIT (code); CC BY 4.0 (annotations/scores)
tusu-code

Research artifact for calibrated pre-execution data-minimization guards for LLM database agents, with deterministic SQL facts, role policies, conformal risk control, workloads, scores and human labels.

nl2sql-evalMIT
Julie Elkins

Databricks-focused text-to-SQL evaluation harness that tests answerable, ambiguous and unanswerable questions, including whether a system should refuse unsupported requests.

NL2SQL Fine-tune ReliabilityMIT
Mohan Vishe

Reproducible MIT evaluation of QLoRA fine-tuning for Qwen2.5-Coder-3B on BIRD Mini-Dev, measuring capability (pass@10), repeatability (pass^10), failure modes and comparison with a prompted 7B model.

NL2SQL Multi-Agent
LI-PG1

Research implementation for multi-step NL2SQL and data analysis with clarification, schema retrieval, read-only SQL controls, sandboxed Python computation, provenance traces, and reproducible evaluation scripts.

NomaDataPolyForm-Noncommercial-1.0.0
Nguyễn Đức Minh

Experimental semantic-first conversational BI client exploring model-agnostic LLM configuration, database schema discovery and a Cube-based semantic layer; natural-language querying remains roadmap work.

QueryGPTInternal
Uber (internal)

Uber's internal natural-language-to-SQL system, described publicly in engineering posts: multi-agent pipeline with workspace routing, intent classification, and iterative self-correction over Presto-scale schemas.

SafeSQLNo license declared
AbuBaker91-hub

PostgreSQL chat-to-SQL prototype that separates model generation from deterministic SQLGlot validation and layered read-only execution, with allow-listed tables, limits, timeouts, audit rows, a web UI and an MCP server.

Semantic Layer × Harness Bench
PCalvanelli

Configuration benchmark comparing raw SQL, glossary-assisted SQL, dbt MetricFlow and Malloy interfaces with and without an agent harness over one frozen analytics warehouse.

SQL Agent LabMIT
zcf2230

MIT-licensed text-to-SQL agent evaluation rig with a 192-task benchmark, audited grader, paired McNemar analysis and per-score trace replay.

sql-witnessNot specified
Independent open-source project

Offline benchmark for text-to-SQL verification. It executes gold and faulty SQL against a local engine, compares verification detectors, demonstrates data-scope sensitivity, and includes a destructive-operation guardrail comparison.

Supply Chain AI
Ankur1902

Full-stack supply-chain analytics platform with a tool-calling copilot, RAG and an allowlisted read-only text-to-SQL layer over MySQL. The repository documents synthetic-demo provenance, backend tests and explicit deployment and RBAC limitations.