db-mcp-gateway
db-mcp-gateway: database access for agents, with no credential to leak
Your agent needs to read the production database, and the connection string is the one thing you cannot hand it. The gateway holds it instead.
What it does
No credential on a laptop
No database URL reaches a developer machine. No tool returns one and no log line contains one.
Identity end to end
Every query traces from SSO user to group to grant to audit row, and the append-only row commits before any result goes back.
Permissions in review
Grants live in YAML and change through pull requests. There is no in-band admin UI, by design.
Where it stands
Stable. Its README describes the current release as in production use.
AI-maintainedMITRustv1.6.0 · 2026-10-25
Read from github.com/developerz-ai/db-mcp-gateway on 2026-11-02.
Open source
Want to help?
Bug fixes, bug reports and suggestions are welcome. Dependency, CI and release changes, big rewrites and unasked features are not. The page says why.
How outside contributions workShip more. Maintain less.
We expect software to be written faster than any team can review it. Bring your repos, your boxes and your keys. We bring the org that keeps up.
