Schemabrain MCP Server

@Arun-kc

Basic information

About Schemabrain MCP Server

A read-only trust + intelligence layer between AI agents and your database — the agent never writes SQL, PII is refused before the query runs, and every call lands in a tamper-evident audit log. Postgres today.

#mcp #database #security #postgres #pii #data-governance #audit #semantic-layer

Schemabrain MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "schemabrain": {
      "command": "uvx",
      "args": [
        "schemabrain",
        "serve",
        "--url-env",
        "DATABASE_URL"
      ],
      "env": {
        "DATABASE_URL": "postgresql://user:password@localhost:5432/dbname"
      }
    }
  }
}

Schemabrain MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Schemabrain?

Schemabrain is an MCP server that acts as a read-only trust and intelligence layer between AI agents (Claude, Cursor, Windsurf) and your SQL database. It compiles SQL from definitions you control and refuses queries touching blocked categories before the database is queried.

How to use Schemabrain?

Install Schemabrain using the uvx package manager. It sits between an AI agent and a Postgres database. Twelve read-only MCP tools are available; the agent never writes SQL directly.

Key features of Schemabrain

Read-only architecture — 12 MCP tools, none can write.
PII-aware refusal — blocked-category queries are rejected before hitting the database.
Tamper-evident audit — SHA-256‑chained append‑only log of every call, refusal, and recovery.
Postgres support today; Apache‑2.0 licensed.
Simple installation via uvx.