---
bezeichner: "io.github.kalehdoo/warehouse-mcp"
art: "mcp_server"
slug: "io-github-kalehdoo-warehouse-mcp"
paketkoordinate: "npm:warehouse-mcp"
status: "aktiv"
homepage: "https://github.com/kalehdoo/warehouse-mcp"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "io.github.kalehdoo"
registerseite: "https://tracevero.com/mcp/io-github-kalehdoo-warehouse-mcp"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: false
ausfuehrungsort: "lokal"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
einsatzgebiet: "datenbank"
roh_beschreibung: "Production MCP server for Postgres, Oracle, Snowflake, BigQuery, Redshift, DuckDB, MotherDuck."
version: "0.4.2"
roh_umgebungsvariablen: "MCP_TRANSPORT, WAREHOUSE_TYPE, MCP_API_KEYS, DUCKDB_PATH, MOTHERDUCK_TOKEN, PG_HOST, PG_DATABASE, PG_USER, PG_PASSWORD, ORACLE_USER, ORACLE_PASSWORD, ORACLE_CONNECT_STRING, SNOWFLAKE_ACCOUNT, SNOWFLAKE_USER, SNOWFLAKE_PRIVATE_KEY_PATH, BIGQUERY_PROJECT, GOOGLE_APPLICATION_CREDENTIALS, GUARDRAIL_PII_MASK, MCP_RATE_LIMIT_RPM"
roh_geheime_pflichtvariablen: ""
roh_transportarten: "stdio"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/kalehdoo/warehouse-mcp"
roh_paketquellen: "npm"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-05-06"
roh_aktualisiert_am: "2026-05-06"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "warehouse-mcp"
roh_paketversionen: "0.4.2"
roh_laufzeithinweise: ""
roh_umgebungsformate: "string"
roh_umgebungsbeschreibungen: "BIGQUERY_PROJECT=GCP project id. Required when WAREHOUSE_TYPE=bigquery. · DUCKDB_PATH=DuckDB file path, ':memory:', or 'md:<database>' for MotherDuck. Required when WAREHOUSE_TYPE=duckdb. · GOOGLE_APPLICATION_CREDENTIALS=Path to BigQuery service-account JSON. Omit on GKE / Cloud Run with workload identity. · GUARDRAIL_PII_MASK=Set to 'on' to enable role-aware PII masking on result rows (emails, SSNs, phones, IPs, Luhn-validated CCs). Off by default. · MCP_API_KEYS=Comma-separated bearer keys with role and optional warehouse-role impersonation: 'key1:reader,key2:admin', 'key3:reader:set_role=alice'. Leave empty for stdio (OS process boundary is the trust boundary). Required for HTTP. · MCP_RATE_LIMIT_RPM=Per-principal token-bucket rate limit on tool invocations. 0 = disabled. Recommend 60 for production. · MCP_TRANSPORT=Set to 'stdio' for desktop AI clients (Claude Desktop, Cursor). Defaults to 'http'. · MOTHERDUCK_TOKEN=MotherDuck service token. Required when DUCKDB_PATH starts with 'md:'. · ORACLE_CONNECT_STRING=Oracle Easy Connect (e.g. host:1521/SERVICE), TNS descriptor, or alias. · ORACLE_PASSWORD=Oracle password. · ORACLE_USER=Oracle user. Required when WAREHOUSE_TYPE=oracle. · PG_DATABASE=Postgres database name. · PG_HOST=Postgres host. Required when WAREHOUSE_TYPE=postgres. (Use REDSHIFT_HOST for Redshift.) · PG_PASSWORD=Postgres password. · PG_USER=Postgres user. · SNOWFLAKE_ACCOUNT=Snowflake account identifier (e.g. xy12345.us-east-1). Required when WAREHOUSE_TYPE=snowflake. · SNOWFLAKE_PRIVATE_KEY_PATH=Path to PKCS8 private key (.p8). Snowflake auth is key-pair only; password auth is not supported. · SNOWFLAKE_USER=Snowflake username. · WAREHOUSE_TYPE=Which warehouse to connect to. One of: postgres, oracle, redshift, snowflake, bigquery, duckdb. (DuckDB also handles MotherDuck via DUCKDB_PATH=md:<db>.)"
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"warehouse-mcp\",\"version\":\"0.4.2\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"MCP_TRANSPORT\",\"description\":\"Set to 'stdio' for desktop AI clients (Claude Desktop, Cursor). Defaults to 'http'.\",\"required\":false,\"secret\":false},{\"name\":\"WAREHOUSE_TYPE\",\"description\":\"Which warehouse to connect to. One of: postgres, oracle, redshift, snowflake, bigquery, duckdb. (DuckDB also handles MotherDuck via DUCKDB_PATH=md:<db>.)\",\"format\":\"string\",\"required\":true,\"secret\":false},{\"name\":\"MCP_API_KEYS\",\"description\":\"Comma-separated bearer keys with role and optional warehouse-role impersonation: 'key1:reader,key2:admin', 'key3:reader:set_role=alice'. Leave empty for stdio (OS process boundary is the trust boundary). Required for HTTP.\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"DUCKDB_PATH\",\"description\":\"DuckDB file path, ':memory:', or 'md:<database>' for MotherDuck. Required when WAREHOUSE_TYPE=duckdb.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MOTHERDUCK_TOKEN\",\"description\":\"MotherDuck service token. Required when DUCKDB_PATH starts with 'md:'.\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"PG_HOST\",\"description\":\"Postgres host. Required when WAREHOUSE_TYPE=postgres. (Use REDSHIFT_HOST for Redshift.)\",\"required\":false,\"secret\":false},{\"name\":\"PG_DATABASE\",\"description\":\"Postgres database name.\",\"required\":false,\"secret\":false},{\"name\":\"PG_USER\",\"description\":\"Postgres user.\",\"required\":false,\"secret\":false},{\"name\":\"PG_PASSWORD\",\"description\":\"Postgres password.\",\"required\":false,\"secret\":true},{\"name\":\"ORACLE_USER\",\"description\":\"Oracle user. Required when WAREHOUSE_TYPE=oracle.\",\"required\":false,\"secret\":false},{\"name\":\"ORACLE_PASSWORD\",\"description\":\"Oracle password.\",\"required\":false,\"secret\":true},{\"name\":\"ORACLE_CONNECT_STRING\",\"description\":\"Oracle Easy Connect (e.g. host:1521/SERVICE), TNS descriptor, or alias.\",\"required\":false,\"secret\":false},{\"name\":\"SNOWFLAKE_ACCOUNT\",\"description\":\"Snowflake account identifier (e.g. xy12345.us-east-1). Required when WAREHOUSE_TYPE=snowflake.\",\"required\":false,\"secret\":false},{\"name\":\"SNOWFLAKE_USER\",\"description\":\"Snowflake username.\",\"required\":false,\"secret\":false},{\"name\":\"SNOWFLAKE_PRIVATE_KEY_PATH\",\"description\":\"Path to PKCS8 private key (.p8). Snowflake auth is key-pair only; password auth is not supported.\",\"required\":false,\"secret\":false},{\"name\":\"BIGQUERY_PROJECT\",\"description\":\"GCP project id. Required when WAREHOUSE_TYPE=bigquery.\",\"required\":false,\"secret\":false},{\"name\":\"GOOGLE_APPLICATION_CREDENTIALS\",\"description\":\"Path to BigQuery service-account JSON. Omit on GKE / Cloud Run with workload identity.\",\"required\":false,\"secret\":false},{\"name\":\"GUARDRAIL_PII_MASK\",\"description\":\"Set to 'on' to enable role-aware PII masking on result rows (emails, SSNs, phones, IPs, Luhn-validated CCs). Off by default.\",\"required\":false,\"secret\":false},{\"name\":\"MCP_RATE_LIMIT_RPM\",\"description\":\"Per-principal token-bucket rate limit on tool invocations. 0 = disabled. Recommend 60 for production.\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":true}],\"remotes\":[]}"
---

# io.github.kalehdoo/warehouse-mcp

## Measured values

| Property | Value | Source | Collected on | Level of trust | Raw declaration |
| --- | --- | --- | --- | --- | --- |
| Required secrets declared | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: |
| Execution location | lokal | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: stdio |
| Path argument present | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository URL listed | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/kalehdoo/warehouse-mcp |
| Field of use, derived from the vendor description | datenbank | MCP-Register | 2026-08-26T16:45:01.514Z | abgeleitet | roh_beschreibung: Production MCP server for Postgres, Oracle, Snowflake, BigQuery, Redshift, DuckDB, MotherDuck. |
| Description (raw) | Production MCP server for Postgres, Oracle, Snowflake, BigQuery, Redshift, DuckDB, MotherDuck. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft |  |
| Declared version | 0.4.2 | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Environment variables (raw) | MCP_TRANSPORT, WAREHOUSE_TYPE, MCP_API_KEYS, DUCKDB_PATH, MOTHERDUCK_TOKEN, PG_HOST, PG_DATABASE, PG_USER, PG_PASSWORD, ORACLE_USER, ORACLE_PASSWORD, ORACLE_CONNECT_STRING, SNOWFLAKE_ACCOUNT, SNOWFLAKE_USER, SNOWFLAKE_PRIVATE_KEY_PATH, BIGQUERY_PROJECT, GOOGLE_APPLICATION_CREDENTIALS, GUARDRAIL_PII_MASK, MCP_RATE_LIMIT_RPM | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Required secret variables (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Transports (raw) | stdio | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Path arguments (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Repository (raw) | https://github.com/kalehdoo/warehouse-mcp | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Package registries (raw) | npm | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Required secret headers (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Path environment variables (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote URLs (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote hosts (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Registry status message (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| First listed in the registry (raw) | 2026-05-06 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Last changed in the registry (raw) | 2026-05-06 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Delivery form (raw) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository subfolder (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package identifiers (raw) | warehouse-mcp | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package versions (raw) | 0.4.2 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Runtime hints (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable formats (raw) | string | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable descriptions (raw) | BIGQUERY_PROJECT=GCP project id. Required when WAREHOUSE_TYPE=bigquery. · DUCKDB_PATH=DuckDB file path, ':memory:', or 'md:<database>' for MotherDuck. Required when WAREHOUSE_TYPE=duckdb. · GOOGLE_APPLICATION_CREDENTIALS=Path to BigQuery service-account JSON. Omit on GKE / Cloud Run with workload identity. · GUARDRAIL_PII_MASK=Set to 'on' to enable role-aware PII masking on result rows (emails, SSNs, phones, IPs, Luhn-validated CCs). Off by default. · MCP_API_KEYS=Comma-separated bearer keys with role and optional warehouse-role impersonation: 'key1:reader,key2:admin', 'key3:reader:set_role=alice'. Leave empty for stdio (OS process boundary is the trust boundary). Required for HTTP. · MCP_RATE_LIMIT_RPM=Per-principal token-bucket rate limit on tool invocations. 0 = disabled. Recommend 60 for production. · MCP_TRANSPORT=Set to 'stdio' for desktop AI clients (Claude Desktop, Cursor). Defaults to 'http'. · MOTHERDUCK_TOKEN=MotherDuck service token. Required when DUCKDB_PATH starts with 'md:'. · ORACLE_CONNECT_STRING=Oracle Easy Connect (e.g. host:1521/SERVICE), TNS descriptor, or alias. · ORACLE_PASSWORD=Oracle password. · ORACLE_USER=Oracle user. Required when WAREHOUSE_TYPE=oracle. · PG_DATABASE=Postgres database name. · PG_HOST=Postgres host. Required when WAREHOUSE_TYPE=postgres. (Use REDSHIFT_HOST for Redshift.) · PG_PASSWORD=Postgres password. · PG_USER=Postgres user. · SNOWFLAKE_ACCOUNT=Snowflake account identifier (e.g. xy12345.us-east-1). Required when WAREHOUSE_TYPE=snowflake. · SNOWFLAKE_PRIVATE_KEY_PATH=Path to PKCS8 private key (.p8). Snowflake auth is key-pair only; password auth is not supported. · SNOWFLAKE_USER=Snowflake username. · WAREHOUSE_TYPE=Which warehouse to connect to. One of: postgres, oracle, redshift, snowflake, bigquery, duckdb. (DuckDB also handles MotherDuck via DUCKDB_PATH=md:<db>.) | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Icon formats (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"warehouse-mcp","version":"0.4.2","transport":"stdio","environment":[{"name":"MCP_TRANSPORT","description":"Set to 'stdio' for desktop AI clients (Claude Desktop, Cursor). Defaults to 'http'.","required":false,"secret":false},{"name":"WAREHOUSE_TYPE","description":"Which warehouse to connect to. One of: postgres, oracle, redshift, snowflake, bigquery, duckdb. (DuckDB also handles MotherDuck via DUCKDB_PATH=md:<db>.)","format":"string","required":true,"secret":false},{"name":"MCP_API_KEYS","description":"Comma-separated bearer keys with role and optional warehouse-role impersonation: 'key1:reader,key2:admin', 'key3:reader:set_role=alice'. Leave empty for stdio (OS process boundary is the trust boundary). Required for HTTP.","format":"string","required":false,"secret":true},{"name":"DUCKDB_PATH","description":"DuckDB file path, ':memory:', or 'md:<database>' for MotherDuck. Required when WAREHOUSE_TYPE=duckdb.","format":"string","required":false,"secret":false},{"name":"MOTHERDUCK_TOKEN","description":"MotherDuck service token. Required when DUCKDB_PATH starts with 'md:'.","format":"string","required":false,"secret":true},{"name":"PG_HOST","description":"Postgres host. Required when WAREHOUSE_TYPE=postgres. (Use REDSHIFT_HOST for Redshift.)","required":false,"secret":false},{"name":"PG_DATABASE","description":"Postgres database name.","required":false,"secret":false},{"name":"PG_USER","description":"Postgres user.","required":false,"secret":false},{"name":"PG_PASSWORD","description":"Postgres password.","required":false,"secret":true},{"name":"ORACLE_USER","description":"Oracle user. Required when WAREHOUSE_TYPE=oracle.","required":false,"secret":false},{"name":"ORACLE_PASSWORD","description":"Oracle password.","required":false,"secret":true},{"name":"ORACLE_CONNECT_STRING","description":"Oracle Easy Connect (e.g. host:1521/SERVICE), TNS descriptor, or alias.","required":false,"secret":false},{"name":"SNOWFLAKE_ACCOUNT","description":"Snowflake account identifier (e.g. xy12345.us-east-1). Required when WAREHOUSE_TYPE=snowflake.","required":false,"secret":false},{"name":"SNOWFLAKE_USER","description":"Snowflake username.","required":false,"secret":false},{"name":"SNOWFLAKE_PRIVATE_KEY_PATH","description":"Path to PKCS8 private key (.p8). Snowflake auth is key-pair only; password auth is not supported.","required":false,"secret":false},{"name":"BIGQUERY_PROJECT","description":"GCP project id. Required when WAREHOUSE_TYPE=bigquery.","required":false,"secret":false},{"name":"GOOGLE_APPLICATION_CREDENTIALS","description":"Path to BigQuery service-account JSON. Omit on GKE / Cloud Run with workload identity.","required":false,"secret":false},{"name":"GUARDRAIL_PII_MASK","description":"Set to 'on' to enable role-aware PII masking on result rows (emails, SSNs, phones, IPs, Luhn-validated CCs). Off by default.","required":false,"secret":false},{"name":"MCP_RATE_LIMIT_RPM","description":"Per-principal token-bucket rate limit on tool invocations. 0 = disabled. Recommend 60 for production.","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |

## Links

- Namespace: [[namensraum/io-github-kalehdoo|io.github.kalehdoo]]

---

- Registry page: <https://tracevero.com/mcp/io-github-kalehdoo-warehouse-mcp>
- Retrieved on: 2026-10-11
