open-source · since 2026
QueryGate
Arif Krepkiy
Adaptable MCP reference server for governed warehouse access: validates model SQL, injects tenant predicates, masks PII, estimates cost and independently re-parses the final statement before read-only execution.
mcptext-to-sqlgovernancerow-level-securityself-hosted
desk notes
Verified 2026-08-28. Supports PostgreSQL, DuckDB, BigQuery and Snowflake. README explicitly scopes the shared-parser risk: injection and assertion both depend on sqlglot, so native warehouse policies remain the stronger boundary. Project says it is a reference implementation, not deploy-as-is software.