--- bezeichner: "sh.valv/mcp" art: "mcp_server" slug: "sh-valv-mcp" paketkoordinate: "npm:@valv/mcp" status: "aktiv" homepage: "https://valv.sh" erhebungsstand: "2026-10-10T01:17:01.464Z" namensraum: "sh.valv" registerseite: "https://tracevero.com/mcp/sh-valv-mcp" abgerufen_am: "2026-10-10" zugangsdaten_erforderlich: true ausfuehrungsort: "lokal" dateisystem_pfadargument: true quelloffen_einsehbar: true einsatzgebiet: "datenbank" roh_beschreibung: "Let coding agents query any SQL database safely. Read-only by default and scoped by your policies." version: "0.6.2" roh_umgebungsvariablen: "DATABASE_URL, VALV_PROVIDER, VALV_DATABASE, VALV_TABLES, VALV_EXCLUDE, VALV_POLICY_FILE, VALV_CONTEXT, VALV_HTTP_PORT" roh_geheime_pflichtvariablen: "DATABASE_URL" roh_transportarten: "stdio" roh_pfadargumente: "" roh_repository_url: "https://github.com/valv-dev/valv" roh_paketquellen: "npm" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "VALV_POLICY_FILE" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-07-28" roh_aktualisiert_am: "2026-07-28" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "packages/mcp" roh_paketbezeichner: "@valv/mcp" roh_paketversionen: "0.6.2" roh_laufzeithinweise: "" roh_umgebungsformate: "filepath, number, string" roh_umgebungsbeschreibungen: "DATABASE_URL=Database connection string. PostgreSQL, MySQL, SQLite, CockroachDB, or a ClickHouse HTTP URL. · VALV_CONTEXT=JSON context object the policy reads, e.g. {\"tenant\":{\"id\":\"acme\"}}. · VALV_DATABASE=Database name. Required for ClickHouse, whose URL does not carry one. · VALV_EXCLUDE=Comma-separated deny-list of tables, applied after the allow-list. · VALV_HTTP_PORT=Serve over Streamable HTTP on this port instead of stdio. · VALV_POLICY_FILE=Path to a policy module that takes full control of access. Without it, the server is read-only across all tables. · VALV_PROVIDER=Datasource provider: postgresql, mysql, sqlite, or clickhouse. Inferred from DATABASE_URL when omitted. · VALV_TABLES=Comma-separated allow-list of tables. When set, only these are exposed to the agent." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"@valv/mcp\",\"version\":\"0.6.2\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"DATABASE_URL\",\"description\":\"Database connection string. PostgreSQL, MySQL, SQLite, CockroachDB, or a ClickHouse HTTP URL.\",\"format\":\"string\",\"required\":true,\"secret\":true},{\"name\":\"VALV_PROVIDER\",\"description\":\"Datasource provider: postgresql, mysql, sqlite, or clickhouse. Inferred from DATABASE_URL when omitted.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"VALV_DATABASE\",\"description\":\"Database name. Required for ClickHouse, whose URL does not carry one.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"VALV_TABLES\",\"description\":\"Comma-separated allow-list of tables. When set, only these are exposed to the agent.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"VALV_EXCLUDE\",\"description\":\"Comma-separated deny-list of tables, applied after the allow-list.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"VALV_POLICY_FILE\",\"description\":\"Path to a policy module that takes full control of access. Without it, the server is read-only across all tables.\",\"format\":\"filepath\",\"required\":false,\"secret\":false},{\"name\":\"VALV_CONTEXT\",\"description\":\"JSON context object the policy reads, e.g. {\\\"tenant\\\":{\\\"id\\\":\\\"acme\\\"}}.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"VALV_HTTP_PORT\",\"description\":\"Serve over Streamable HTTP on this port instead of stdio.\",\"format\":\"number\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # valv ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: DATABASE_URL; roh_geheime_pflichtkopfzeilen: | | Execution location | lokal | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: stdio | | Path argument present | true | MCP-Register | 2026-08-16T01:17:01.420Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: VALV_POLICY_FILE | | Repository URL listed | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/valv-dev/valv | | Field of use, derived from the vendor description | datenbank | MCP-Register | 2026-08-26T16:45:01.514Z | abgeleitet | roh_beschreibung: Let coding agents query any SQL database safely. Read-only by default and scoped by your policies. | | Description (raw) | Let coding agents query any SQL database safely. Read-only by default and scoped by your policies. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft | | | Declared version | 0.6.2 | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Environment variables (raw) | DATABASE_URL, VALV_PROVIDER, VALV_DATABASE, VALV_TABLES, VALV_EXCLUDE, VALV_POLICY_FILE, VALV_CONTEXT, VALV_HTTP_PORT | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Required secret variables (raw) | DATABASE_URL | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Transports (raw) | stdio | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Repository (raw) | https://github.com/valv-dev/valv | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Package registries (raw) | npm | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Path environment variables (raw) | VALV_POLICY_FILE | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | First listed in the registry (raw) | 2026-07-28 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-07-28 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository subfolder (raw) | packages/mcp | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Package identifiers (raw) | @valv/mcp | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Package versions (raw) | 0.6.2 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Runtime hints (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Environment variable formats (raw) | filepath, number, string | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Environment variable descriptions (raw) | DATABASE_URL=Database connection string. PostgreSQL, MySQL, SQLite, CockroachDB, or a ClickHouse HTTP URL. · VALV_CONTEXT=JSON context object the policy reads, e.g. {"tenant":{"id":"acme"}}. · VALV_DATABASE=Database name. Required for ClickHouse, whose URL does not carry one. · VALV_EXCLUDE=Comma-separated deny-list of tables, applied after the allow-list. · VALV_HTTP_PORT=Serve over Streamable HTTP on this port instead of stdio. · VALV_POLICY_FILE=Path to a policy module that takes full control of access. Without it, the server is read-only across all tables. · VALV_PROVIDER=Datasource provider: postgresql, mysql, sqlite, or clickhouse. Inferred from DATABASE_URL when omitted. · VALV_TABLES=Comma-separated allow-list of tables. When set, only these are exposed to the agent. | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"@valv/mcp","version":"0.6.2","transport":"stdio","environment":[{"name":"DATABASE_URL","description":"Database connection string. PostgreSQL, MySQL, SQLite, CockroachDB, or a ClickHouse HTTP URL.","format":"string","required":true,"secret":true},{"name":"VALV_PROVIDER","description":"Datasource provider: postgresql, mysql, sqlite, or clickhouse. Inferred from DATABASE_URL when omitted.","format":"string","required":false,"secret":false},{"name":"VALV_DATABASE","description":"Database name. Required for ClickHouse, whose URL does not carry one.","format":"string","required":false,"secret":false},{"name":"VALV_TABLES","description":"Comma-separated allow-list of tables. When set, only these are exposed to the agent.","format":"string","required":false,"secret":false},{"name":"VALV_EXCLUDE","description":"Comma-separated deny-list of tables, applied after the allow-list.","format":"string","required":false,"secret":false},{"name":"VALV_POLICY_FILE","description":"Path to a policy module that takes full control of access. Without it, the server is read-only across all tables.","format":"filepath","required":false,"secret":false},{"name":"VALV_CONTEXT","description":"JSON context object the policy reads, e.g. {\\"tenant\\":{\\"id\\":\\"acme\\"}}.","format":"string","required":false,"secret":false},{"name":"VALV_HTTP_PORT","description":"Serve over Streamable HTTP on this port instead of stdio.","format":"number","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | ## Links - Namespace: [[namensraum/sh-valv|sh.valv]] --- - Registry page: - Retrieved on: 2026-10-10