Metadata-Version: 2.4
Name: queryshield-mcp
Version: 1.0.0
Summary: MCP client for QueryShield — secure SQL proxy for AI agents
Project-URL: Homepage, https://queryshield.dev
Project-URL: Repository, https://github.com/bch1212/queryshield
Project-URL: Issues, https://github.com/bch1212/queryshield/issues
Author-email: Brett Halverson <brett.halverson@gmail.com>
License: MIT
License-File: LICENSE
Keywords: agent,claude,mcp,row-level-security,security,sql
Classifier: Development Status :: 4 - Beta
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: MIT License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Topic :: Database
Classifier: Topic :: Security
Requires-Python: >=3.10
Requires-Dist: fastmcp>=0.4.0
Requires-Dist: httpx>=0.27.0
Description-Content-Type: text/markdown

# queryshield-mcp

MCP client for [QueryShield](https://queryshield.dev) — a secure SQL proxy that sits between AI agents and customer databases. Agents call a single endpoint; QueryShield translates NL → SQL via Claude, validates at the AST level (no DDL/DML), enforces per-agent row-level security, and audit-logs every query.

## Install

```bash
pip install queryshield-mcp
```

## Configure

Provision an agent API key at https://queryshield.dev, then add to your MCP client config:

```json
{
  "queryshield": {
    "command": "queryshield-mcp",
    "env": {
      "QUERYSHIELD_API_KEY": "qs_..."
    }
  }
}
```

Self-hosting? Set `QUERYSHIELD_BASE_URL` to point at your deploy.

## Tools

- `query_database(database_alias, question, max_rows)` — natural-language query
- `query_database_sql(database_alias, sql, max_rows)` — structured SELECT
- `get_audit_log(limit)` — recent attempts for the calling agent

## License

MIT
