--- bezeichner: "io.github.mcpsmiths/cost-guard-mcp" art: "mcp_server" slug: "io-github-mcpsmiths-cost-guard-mcp" paketkoordinate: "pypi:cost-guard-mcp" status: "aktiv" homepage: "https://github.com/mcpsmiths/cost-guard-mcp" erhebungsstand: "2026-10-11T01:17:01.851Z" namensraum: "io.github.mcpsmiths" registerseite: "https://tracevero.com/mcp/io-github-mcpsmiths-cost-guard-mcp" abgerufen_am: "2026-10-11" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: true roh_beschreibung: "Pre-flight query cost and result-size guardrails for AI agents on BigQuery, Snowflake, Databricks" version: "0.3.2" roh_umgebungsvariablen: "GOOGLE_APPLICATION_CREDENTIALS, SNOWFLAKE_ACCOUNT, SNOWFLAKE_USER, SNOWFLAKE_ROLE, SNOWFLAKE_PRIVATE_KEY_PATH, SNOWFLAKE_PRIVATE_KEY_PASSPHRASE, SNOWFLAKE_PASSWORD, DATABRICKS_SERVER_HOSTNAME, DATABRICKS_HTTP_PATH, DATABRICKS_TOKEN, DATABRICKS_CLIENT_ID, DATABRICKS_CLIENT_SECRET" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio" roh_pfadargumente: "" roh_repository_url: "https://github.com/mcpsmiths/cost-guard-mcp" roh_paketquellen: "pypi" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-09-28" roh_aktualisiert_am: "2026-09-28" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "cost-guard-mcp" roh_paketversionen: "0.3.2" roh_laufzeithinweise: "" roh_umgebungsformate: "" roh_umgebungsbeschreibungen: "DATABRICKS_CLIENT_ID=Databricks: OAuth machine-to-machine service-principal client ID (preferred for automated use). Requires DATABRICKS_CLIENT_SECRET as well. · DATABRICKS_CLIENT_SECRET=Databricks: OAuth machine-to-machine service-principal client secret. Requires DATABRICKS_CLIENT_ID as well. · DATABRICKS_HTTP_PATH=Databricks: SQL warehouse HTTP path (from the warehouse's Connection Details tab, e.g. /sql/1.0/warehouses/). Required to use the databricks engine. · DATABRICKS_SERVER_HOSTNAME=Databricks: SQL warehouse server hostname (e.g. my-workspace.cloud.databricks.com, no scheme, no trailing slash). Required to use the databricks engine. · DATABRICKS_TOKEN=Databricks: personal access token (simplest auth option). Either this or DATABRICKS_CLIENT_ID + DATABRICKS_CLIENT_SECRET is required to use the databricks engine. · GOOGLE_APPLICATION_CREDENTIALS=BigQuery: path to a service-account key file (Application Default Credentials). Required to use the bigquery engine. · SNOWFLAKE_ACCOUNT=Snowflake: account identifier. Required to use the snowflake engine. · SNOWFLAKE_PASSWORD=Snowflake: password (discouraged; prefer SNOWFLAKE_PRIVATE_KEY_PATH). Either this or SNOWFLAKE_PRIVATE_KEY_PATH is required to use the snowflake engine. · SNOWFLAKE_PRIVATE_KEY_PASSPHRASE=Snowflake: passphrase for an encrypted SNOWFLAKE_PRIVATE_KEY_PATH key file, if the key is encrypted. · SNOWFLAKE_PRIVATE_KEY_PATH=Snowflake: path to an RSA private key file for key-pair auth (preferred over SNOWFLAKE_PASSWORD). Either this or SNOWFLAKE_PASSWORD is required to use the snowflake engine. · SNOWFLAKE_ROLE=Snowflake: role to assume. Required to use the snowflake engine; has no default and must never be ACCOUNTADMIN. · SNOWFLAKE_USER=Snowflake: username. Required to use the snowflake engine." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"pypi\",\"identifier\":\"cost-guard-mcp\",\"version\":\"0.3.2\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"GOOGLE_APPLICATION_CREDENTIALS\",\"description\":\"BigQuery: path to a service-account key file (Application Default Credentials). Required to use the bigquery engine.\",\"required\":false,\"secret\":true},{\"name\":\"SNOWFLAKE_ACCOUNT\",\"description\":\"Snowflake: account identifier. Required to use the snowflake engine.\",\"required\":false,\"secret\":false},{\"name\":\"SNOWFLAKE_USER\",\"description\":\"Snowflake: username. Required to use the snowflake engine.\",\"required\":false,\"secret\":false},{\"name\":\"SNOWFLAKE_ROLE\",\"description\":\"Snowflake: role to assume. Required to use the snowflake engine; has no default and must never be ACCOUNTADMIN.\",\"required\":false,\"secret\":false},{\"name\":\"SNOWFLAKE_PRIVATE_KEY_PATH\",\"description\":\"Snowflake: path to an RSA private key file for key-pair auth (preferred over SNOWFLAKE_PASSWORD). Either this or SNOWFLAKE_PASSWORD is required to use the snowflake engine.\",\"required\":false,\"secret\":true},{\"name\":\"SNOWFLAKE_PRIVATE_KEY_PASSPHRASE\",\"description\":\"Snowflake: passphrase for an encrypted SNOWFLAKE_PRIVATE_KEY_PATH key file, if the key is encrypted.\",\"required\":false,\"secret\":true},{\"name\":\"SNOWFLAKE_PASSWORD\",\"description\":\"Snowflake: password (discouraged; prefer SNOWFLAKE_PRIVATE_KEY_PATH). Either this or SNOWFLAKE_PRIVATE_KEY_PATH is required to use the snowflake engine.\",\"required\":false,\"secret\":true},{\"name\":\"DATABRICKS_SERVER_HOSTNAME\",\"description\":\"Databricks: SQL warehouse server hostname (e.g. my-workspace.cloud.databricks.com, no scheme, no trailing slash). Required to use the databricks engine.\",\"required\":false,\"secret\":false},{\"name\":\"DATABRICKS_HTTP_PATH\",\"description\":\"Databricks: SQL warehouse HTTP path (from the warehouse's Connection Details tab, e.g. /sql/1.0/warehouses/). Required to use the databricks engine.\",\"required\":false,\"secret\":false},{\"name\":\"DATABRICKS_TOKEN\",\"description\":\"Databricks: personal access token (simplest auth option). Either this or DATABRICKS_CLIENT_ID + DATABRICKS_CLIENT_SECRET is required to use the databricks engine.\",\"required\":false,\"secret\":true},{\"name\":\"DATABRICKS_CLIENT_ID\",\"description\":\"Databricks: OAuth machine-to-machine service-principal client ID (preferred for automated use). Requires DATABRICKS_CLIENT_SECRET as well.\",\"required\":false,\"secret\":false},{\"name\":\"DATABRICKS_CLIENT_SECRET\",\"description\":\"Databricks: OAuth machine-to-machine service-principal client secret. Requires DATABRICKS_CLIENT_ID as well.\",\"required\":false,\"secret\":true}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # Cost Guard MCP ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | false | MCP-Register | 2026-09-13T11:46:59.389Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Execution location | lokal | MCP-Register | 2026-09-13T11:46:59.389Z | abgeleitet | roh_transportarten: stdio | | Path argument present | false | MCP-Register | 2026-09-13T11:46:59.389Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository URL listed | true | MCP-Register | 2026-09-13T11:46:59.389Z | abgeleitet | roh_repository_url: https://github.com/mcpsmiths/cost-guard-mcp | | Description (raw) | Pre-flight query cost and result-size guardrails for AI agents on BigQuery, Snowflake, Databricks | MCP-Register | 2026-09-15T01:17:01.369Z | selbstauskunft | | | Declared version | 0.3.2 | MCP-Register | 2026-09-29T01:17:01.336Z | selbstauskunft | | | Environment variables (raw) | GOOGLE_APPLICATION_CREDENTIALS, SNOWFLAKE_ACCOUNT, SNOWFLAKE_USER, SNOWFLAKE_ROLE, SNOWFLAKE_PRIVATE_KEY_PATH, SNOWFLAKE_PRIVATE_KEY_PASSPHRASE, SNOWFLAKE_PASSWORD, DATABRICKS_SERVER_HOSTNAME, DATABRICKS_HTTP_PATH, DATABRICKS_TOKEN, DATABRICKS_CLIENT_ID, DATABRICKS_CLIENT_SECRET | MCP-Register | 2026-09-19T01:17:02.172Z | selbstauskunft | | | Required secret variables (raw) | | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Transports (raw) | stdio | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Repository (raw) | https://github.com/mcpsmiths/cost-guard-mcp | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Package registries (raw) | pypi | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Path environment variables (raw) | | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | First listed in the registry (raw) | 2026-09-28 | MCP-Register | 2026-09-29T01:17:01.336Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-09-28 | MCP-Register | 2026-09-29T01:17:01.336Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Repository platform (raw) | github | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Repository subfolder (raw) | | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Package identifiers (raw) | cost-guard-mcp | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Package versions (raw) | 0.3.2 | MCP-Register | 2026-09-29T01:17:01.336Z | selbstauskunft | | | Runtime hints (raw) | | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Environment variable formats (raw) | | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Environment variable descriptions (raw) | DATABRICKS_CLIENT_ID=Databricks: OAuth machine-to-machine service-principal client ID (preferred for automated use). Requires DATABRICKS_CLIENT_SECRET as well. · DATABRICKS_CLIENT_SECRET=Databricks: OAuth machine-to-machine service-principal client secret. Requires DATABRICKS_CLIENT_ID as well. · DATABRICKS_HTTP_PATH=Databricks: SQL warehouse HTTP path (from the warehouse's Connection Details tab, e.g. /sql/1.0/warehouses/). Required to use the databricks engine. · DATABRICKS_SERVER_HOSTNAME=Databricks: SQL warehouse server hostname (e.g. my-workspace.cloud.databricks.com, no scheme, no trailing slash). Required to use the databricks engine. · DATABRICKS_TOKEN=Databricks: personal access token (simplest auth option). Either this or DATABRICKS_CLIENT_ID + DATABRICKS_CLIENT_SECRET is required to use the databricks engine. · GOOGLE_APPLICATION_CREDENTIALS=BigQuery: path to a service-account key file (Application Default Credentials). Required to use the bigquery engine. · SNOWFLAKE_ACCOUNT=Snowflake: account identifier. Required to use the snowflake engine. · SNOWFLAKE_PASSWORD=Snowflake: password (discouraged; prefer SNOWFLAKE_PRIVATE_KEY_PATH). Either this or SNOWFLAKE_PRIVATE_KEY_PATH is required to use the snowflake engine. · SNOWFLAKE_PRIVATE_KEY_PASSPHRASE=Snowflake: passphrase for an encrypted SNOWFLAKE_PRIVATE_KEY_PATH key file, if the key is encrypted. · SNOWFLAKE_PRIVATE_KEY_PATH=Snowflake: path to an RSA private key file for key-pair auth (preferred over SNOWFLAKE_PASSWORD). Either this or SNOWFLAKE_PASSWORD is required to use the snowflake engine. · SNOWFLAKE_ROLE=Snowflake: role to assume. Required to use the snowflake engine; has no default and must never be ACCOUNTADMIN. · SNOWFLAKE_USER=Snowflake: username. Required to use the snowflake engine. | MCP-Register | 2026-09-19T01:17:02.172Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-09-13T11:46:59.389Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"pypi","identifier":"cost-guard-mcp","version":"0.3.2","transport":"stdio","environment":[{"name":"GOOGLE_APPLICATION_CREDENTIALS","description":"BigQuery: path to a service-account key file (Application Default Credentials). Required to use the bigquery engine.","required":false,"secret":true},{"name":"SNOWFLAKE_ACCOUNT","description":"Snowflake: account identifier. Required to use the snowflake engine.","required":false,"secret":false},{"name":"SNOWFLAKE_USER","description":"Snowflake: username. Required to use the snowflake engine.","required":false,"secret":false},{"name":"SNOWFLAKE_ROLE","description":"Snowflake: role to assume. Required to use the snowflake engine; has no default and must never be ACCOUNTADMIN.","required":false,"secret":false},{"name":"SNOWFLAKE_PRIVATE_KEY_PATH","description":"Snowflake: path to an RSA private key file for key-pair auth (preferred over SNOWFLAKE_PASSWORD). Either this or SNOWFLAKE_PASSWORD is required to use the snowflake engine.","required":false,"secret":true},{"name":"SNOWFLAKE_PRIVATE_KEY_PASSPHRASE","description":"Snowflake: passphrase for an encrypted SNOWFLAKE_PRIVATE_KEY_PATH key file, if the key is encrypted.","required":false,"secret":true},{"name":"SNOWFLAKE_PASSWORD","description":"Snowflake: password (discouraged; prefer SNOWFLAKE_PRIVATE_KEY_PATH). Either this or SNOWFLAKE_PRIVATE_KEY_PATH is required to use the snowflake engine.","required":false,"secret":true},{"name":"DATABRICKS_SERVER_HOSTNAME","description":"Databricks: SQL warehouse server hostname (e.g. my-workspace.cloud.databricks.com, no scheme, no trailing slash). Required to use the databricks engine.","required":false,"secret":false},{"name":"DATABRICKS_HTTP_PATH","description":"Databricks: SQL warehouse HTTP path (from the warehouse's Connection Details tab, e.g. /sql/1.0/warehouses/). Required to use the databricks engine.","required":false,"secret":false},{"name":"DATABRICKS_TOKEN","description":"Databricks: personal access token (simplest auth option). Either this or DATABRICKS_CLIENT_ID + DATABRICKS_CLIENT_SECRET is required to use the databricks engine.","required":false,"secret":true},{"name":"DATABRICKS_CLIENT_ID","description":"Databricks: OAuth machine-to-machine service-principal client ID (preferred for automated use). Requires DATABRICKS_CLIENT_SECRET as well.","required":false,"secret":false},{"name":"DATABRICKS_CLIENT_SECRET","description":"Databricks: OAuth machine-to-machine service-principal client secret. Requires DATABRICKS_CLIENT_ID as well.","required":false,"secret":true}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-29T01:17:01.336Z | selbstauskunft | | ## Links - Namespace: [[namensraum/io-github-mcpsmiths|io.github.mcpsmiths]] --- - Registry page: - Retrieved on: 2026-10-11