Schemabrain
@Arun-kc
A read-only trust + intelligence layer between AI agents and your database — the agent never writes SQL, PII is refused before the query runs, and every call lands in a tamper-evident audit log. Postgres today.
Overview
SchemaBrain is an MCP server that sits between AI agents (Claude, Cursor, Windsurf) and your SQL database as a read-only trust + intelligence layer.
- Read-only by architecture — 12 MCP tools, none can write. The agent never writes SQL; SchemaBrain compiles it from definitions you control.
- PII-aware refusal — a query touching a blocked category is refused before the database is queried.
- Tamper-evident audit — every call, refusal, and recovery lands in a SHA-256-chained append-only log.
Postgres today. Apache-2.0. Install: uvx schemabrain init
Server Config
{
"mcpServers": {
"schemabrain": {
"command": "uvx",
"args": [
"schemabrain",
"serve",
"--url-env",
"DATABASE_URL"
],
"env": {
"DATABASE_URL": "postgresql://user:password@localhost:5432/dbname"
}
}
}
}