AI-Powered Database Integration
Connect AI Agents to Databend
One MCP server. Full schema context. By default, session sandbox keeps production read-only while agents experiment safely. Works with Codex, Cursor, Claude Code, Gemini CLI, Kimi Code, and any MCP-compatible agent.
Safety Guarantees
Session sandbox + SQL validation protect production data.
Session Sandbox Isolation
Each MCP session gets a unique mcp_sandbox_{session_id}_ prefix for all write operations.
Read-only Production Access
SELECT/SHOW/DESCRIBE allowed on production; writes outside the sandbox are blocked.
SQL Safety Validation
SQL is standardized and checked by rule-based guardrails to prevent bypass.
1
Select Your Coding AgentDocs
3
Session Sandbox Safety
Safe mode enabled
Writes are allowed only on mcp_sandbox_{session_id}_* objects; production stays read-only.
Recommended: keep safe mode enabled. Disable only for trusted agents and least-privilege Databend users.
4
Run This Command in Your Terminal
codex mcp add databend \
--env DATABEND_DSN='databend://user:password@host:port/database?warehouse=your_warehouse' \
--env DATABEND_MCP_SAFE_MODE=true \
-- uv tool run --from mcp-databend@latest mcp-databend
