--- bezeichner: "ai.midplane/midplane" art: "mcp_server" slug: "ai-midplane-midplane" paketkoordinate: "npm:midplane" status: "aktiv" homepage: "https://midplane.ai/docs" erhebungsstand: "2026-10-11T01:17:01.851Z" namensraum: "ai.midplane" registerseite: "https://tracevero.com/mcp/ai-midplane-midplane" abgerufen_am: "2026-10-11" zugangsdaten_erforderlich: true ausfuehrungsort: "lokal" dateisystem_pfadargument: true quelloffen_einsehbar: true einsatzgebiet: "datenbank" roh_beschreibung: "Safe-by-default SQL guardrails for AI agents: AST-checked queries, per-table policy, audit log." version: "0.20.0" roh_umgebungsvariablen: "DATABASE_URL, MIDPLANE_POLICY_FILE, DB_PATH, MIDPLANE_TELEMETRY, DATABASE_URL, MIDPLANE_POLICY_FILE, PORT" roh_geheime_pflichtvariablen: "DATABASE_URL, DATABASE_URL" roh_transportarten: "stdio, streamable-http" roh_pfadargumente: "" roh_repository_url: "https://github.com/midplaneai/midplane" roh_paketquellen: "npm, oci" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "DB_PATH, MIDPLANE_POLICY_FILE" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-08-25" roh_aktualisiert_am: "2026-08-25" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "engine/packages/mcp-server" roh_paketbezeichner: "docker.io/midplane/midplane:0.20.0, midplane" roh_paketversionen: "0.20.0" roh_laufzeithinweise: "docker · npx" roh_umgebungsformate: "filepath, string" roh_umgebungsbeschreibungen: "DATABASE_URL=Postgres connection string the agent's queries run against. Give it a least-privilege role: Midplane constrains what SQL is allowed, it does not widen or narrow what the role itself can reach. · DATABASE_URL=Postgres connection string the agent's queries run against. Pass it with --env-file, never with an inline -e: a DSN on the docker command line leaks the password to `ps aux` and your shell history. · DB_PATH=Where the local SQLite audit log is written. Defaults to ~/.midplane/audit.db; read it back with `midplane audit denies`. · MIDPLANE_POLICY_FILE=Path (inside the container) to a policy YAML granting per-table read/read_write access, tenant scoping, and column masking. Omit for the safe default: reads allowed, writes and DDL denied. · MIDPLANE_POLICY_FILE=Path to a policy YAML granting per-table read/read_write access, tenant scoping, and column masking. Omit for the safe default: reads allowed, writes and DDL denied. Generate one with `npx midplane init`. · MIDPLANE_TELEMETRY=Set to 0 to disable anonymous usage telemetry (DO_NOT_TRACK=1 also works). Never includes SQL, table or column names, or identifiers. · PORT=Port the Streamable HTTP transport binds. Must match the url above if changed." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"midplane\",\"version\":\"0.20.0\",\"runtimeHint\":\"npx\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"DATABASE_URL\",\"description\":\"Postgres connection string the agent's queries run against. Give it a least-privilege role: Midplane constrains what SQL is allowed, it does not widen or narrow what the role itself can reach.\",\"format\":\"string\",\"required\":true,\"secret\":true},{\"name\":\"MIDPLANE_POLICY_FILE\",\"description\":\"Path to a policy YAML granting per-table read/read_write access, tenant scoping, and column masking. Omit for the safe default: reads allowed, writes and DDL denied. Generate one with `npx midplane init`.\",\"format\":\"filepath\",\"required\":false,\"secret\":false},{\"name\":\"DB_PATH\",\"description\":\"Where the local SQLite audit log is written. Defaults to ~/.midplane/audit.db; read it back with `midplane audit denies`.\",\"format\":\"filepath\",\"required\":false,\"secret\":false},{\"name\":\"MIDPLANE_TELEMETRY\",\"description\":\"Set to 0 to disable anonymous usage telemetry (DO_NOT_TRACK=1 also works). Never includes SQL, table or column names, or identifiers.\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":true},{\"registryType\":\"oci\",\"identifier\":\"docker.io/midplane/midplane:0.20.0\",\"runtimeHint\":\"docker\",\"transport\":\"streamable-http\",\"environment\":[{\"name\":\"DATABASE_URL\",\"description\":\"Postgres connection string the agent's queries run against. Pass it with --env-file, never with an inline -e: a DSN on the docker command line leaks the password to `ps aux` and your shell history.\",\"format\":\"string\",\"required\":true,\"secret\":true},{\"name\":\"MIDPLANE_POLICY_FILE\",\"description\":\"Path (inside the container) to a policy YAML granting per-table read/read_write access, tenant scoping, and column masking. Omit for the safe default: reads allowed, writes and DDL denied.\",\"format\":\"filepath\",\"required\":false,\"secret\":false},{\"name\":\"PORT\",\"description\":\"Port the Streamable HTTP transport binds. Must match the url above if changed.\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # Midplane ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | true | MCP-Register | 2026-08-20T01:17:01.620Z | abgeleitet | roh_geheime_pflichtvariablen: DATABASE_URL, DATABASE_URL; roh_geheime_pflichtkopfzeilen: | | Execution location | lokal | MCP-Register | 2026-08-20T01:17:01.620Z | abgeleitet | roh_transportarten: stdio, streamable-http | | Path argument present | true | MCP-Register | 2026-08-20T01:17:01.620Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: DB_PATH, MIDPLANE_POLICY_FILE | | Repository URL listed | true | MCP-Register | 2026-08-20T01:17:01.620Z | abgeleitet | roh_repository_url: https://github.com/midplaneai/midplane | | Field of use, derived from the vendor description | datenbank | MCP-Register | 2026-08-26T16:45:01.514Z | abgeleitet | roh_beschreibung: Safe-by-default SQL guardrails for AI agents: AST-checked queries, per-table policy, audit log. | | Description (raw) | Safe-by-default SQL guardrails for AI agents: AST-checked queries, per-table policy, audit log. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft | | | Declared version | 0.20.0 | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Environment variables (raw) | DATABASE_URL, MIDPLANE_POLICY_FILE, DB_PATH, MIDPLANE_TELEMETRY, DATABASE_URL, MIDPLANE_POLICY_FILE, PORT | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Required secret variables (raw) | DATABASE_URL, DATABASE_URL | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Transports (raw) | stdio, streamable-http | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Repository (raw) | https://github.com/midplaneai/midplane | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Package registries (raw) | npm, oci | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Path environment variables (raw) | DB_PATH, MIDPLANE_POLICY_FILE | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | First listed in the registry (raw) | 2026-08-25 | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-08-25 | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Repository platform (raw) | github | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Repository subfolder (raw) | engine/packages/mcp-server | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Package identifiers (raw) | docker.io/midplane/midplane:0.20.0, midplane | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Package versions (raw) | 0.20.0 | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Runtime hints (raw) | docker · npx | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Environment variable formats (raw) | filepath, string | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Environment variable descriptions (raw) | DATABASE_URL=Postgres connection string the agent's queries run against. Give it a least-privilege role: Midplane constrains what SQL is allowed, it does not widen or narrow what the role itself can reach. · DATABASE_URL=Postgres connection string the agent's queries run against. Pass it with --env-file, never with an inline -e: a DSN on the docker command line leaks the password to `ps aux` and your shell history. · DB_PATH=Where the local SQLite audit log is written. Defaults to ~/.midplane/audit.db; read it back with `midplane audit denies`. · MIDPLANE_POLICY_FILE=Path (inside the container) to a policy YAML granting per-table read/read_write access, tenant scoping, and column masking. Omit for the safe default: reads allowed, writes and DDL denied. · MIDPLANE_POLICY_FILE=Path to a policy YAML granting per-table read/read_write access, tenant scoping, and column masking. Omit for the safe default: reads allowed, writes and DDL denied. Generate one with `npx midplane init`. · MIDPLANE_TELEMETRY=Set to 0 to disable anonymous usage telemetry (DO_NOT_TRACK=1 also works). Never includes SQL, table or column names, or identifiers. · PORT=Port the Streamable HTTP transport binds. Must match the url above if changed. | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-08-20T01:17:01.620Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"midplane","version":"0.20.0","runtimeHint":"npx","transport":"stdio","environment":[{"name":"DATABASE_URL","description":"Postgres connection string the agent's queries run against. Give it a least-privilege role: Midplane constrains what SQL is allowed, it does not widen or narrow what the role itself can reach.","format":"string","required":true,"secret":true},{"name":"MIDPLANE_POLICY_FILE","description":"Path to a policy YAML granting per-table read/read_write access, tenant scoping, and column masking. Omit for the safe default: reads allowed, writes and DDL denied. Generate one with `npx midplane init`.","format":"filepath","required":false,"secret":false},{"name":"DB_PATH","description":"Where the local SQLite audit log is written. Defaults to ~/.midplane/audit.db; read it back with `midplane audit denies`.","format":"filepath","required":false,"secret":false},{"name":"MIDPLANE_TELEMETRY","description":"Set to 0 to disable anonymous usage telemetry (DO_NOT_TRACK=1 also works). Never includes SQL, table or column names, or identifiers.","required":false,"secret":false}],"additional_arguments_declared":true},{"registryType":"oci","identifier":"docker.io/midplane/midplane:0.20.0","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"DATABASE_URL","description":"Postgres connection string the agent's queries run against. Pass it with --env-file, never with an inline -e: a DSN on the docker command line leaks the password to `ps aux` and your shell history.","format":"string","required":true,"secret":true},{"name":"MIDPLANE_POLICY_FILE","description":"Path (inside the container) to a policy YAML granting per-table read/read_write access, tenant scoping, and column masking. Omit for the safe default: reads allowed, writes and DDL denied.","format":"filepath","required":false,"secret":false},{"name":"PORT","description":"Port the Streamable HTTP transport binds. Must match the url above if changed.","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | ## Links - Namespace: [[namensraum/ai-midplane|ai.midplane]] --- - Registry page: - Retrieved on: 2026-10-11