DataCharter
io.github.datacharterPublished by GitHub account datacharterv0.44.0Updated Oct 24, 2026
Local-first, contract-governed data explorer with read-only, PII-masked query tools for AI agents.
The publisher's own server: Charter Boats
Overview
DataCharter is a local-first SQL workspace that gives AI agents read-only, PII-masked query access to your files and databases under a charter.yaml contract.
- What you can do
- Query files and databases through a local DuckDB-backed SQL workspace, federated across sources and governed by a charter.yaml contract file. Hand agents only the columns and rows the contract grants, with PII default-deny and masked values. Apply row filters and plain-English policies such as aggregates-only, plus canaries and a flight recorder. Run a local server or a shared MCP endpoint with principals and grants, and wrap another MCP server behind the same guard.
- When to use it
- Use it when you want an assistant to explore local or company data without exposing sensitive columns, and when you need a written, version-controlled contract that limits what an agent can read. Also suited to teams that want audited, default-deny agent access on a shared endpoint.
- Requirements
- Runs as a local process via uvx or pip (Python 3.11+), or as a desktop app on macOS Apple Silicon or Windows. A workspace directory containing charter.yaml, queries and guides. Serving over HTTP off loopback requires OAuth settings (issuer, audience, JWKS URI). An optional agent backend such as Claude Code, Ollama or any OpenAI-compatible endpoint.
Installation
In SourceWeft
- Open DataCharter in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
DataCharter
Query all your data locally. Hand agents exactly the columns you choose.
A local SQL workspace over files and databases, federated by DuckDB and
governed by charter.yaml. Agents get read-only, PII-masked access to what
the contract grants. Apache-2.0. No paid edition.
[PyPI] [Python] [License: Apache-2.0]
datacharter.dev · Docs · Desktop · GovBench · Deploy
Two ways in. Same kernel.
Laptop
Drop a file. Query it. Chart it. An agent sees ••• where PII lives.
No terminal: desktop app (beta). macOS (Apple Silicon) or Windows. Unsigned until Apple secrets exist.
The workspace is a directory: charter.yaml, queries/, guides/. Commit it.
Secrets stay out. Optional agent: SpaceXAI, Claude Code, Ollama (--local),
or any OpenAI-compatible endpoint.
Company
The same binary, on a shared MCP endpoint. Identities live in git, not on our servers. No rows leave your infrastructure.
- MCP Streamable HTTP (
POST /mcp) with optional OAuth 2.1 principals:andgrants:incharter.yaml(default-deny on HTTP)- Helm chart and OCI image
- Hash-chained audit plus SIEM JSON/OTLP
- GovBench: frozen 28-attack corpus, grade A-F
Wrap someone else's MCP server: datacharter mcp --guard "npx -y some-mcp-server".
What the contract enforces
PII default-deny, row filters, plain-English policies (aggregates only),
canaries, a flight recorder, datacharter redteam, access diff on PRs.
CLI reference: docs/cli.md. Security: docs/security.md.
Status: pre-release. V1 in development.
Privacy
Runs on your machine or in your cluster. No telemetry. No DataCharter-operated data plane. Privacy Policy.
License
Source: README.md at commit a7cb14e
Tools
0Version history
1- v0.44.0LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts
Other Charter integrations
Charter Boats
boats.charterOfficial publisher
Search 14,000+ charter boats with live prices, plus marinas, anchorages, routes and itineraries, and manage an operator's fleet.
Tokyo Charter Bus
Published by GitHub account dang13021993
Tokyo Charter Bus lets an assistant look up chartered coach, minibus and car options in Tokyo, estimate fares, and send a quote request to the operator.
OlaChillBus — Schengen Charter Coaches
Published by GitHub account dang13021993
Read-only Schengen coach rental information: list served countries, check vehicle capacity and luggage guidance, and get quote request instructions.
Eclipse Charter MCP
Published by GitHub account CYAN-ECLIPSE-TECHNOLOGIES-LLC
Your broker watches its own account. Charter watches your rules — across all of your accounts.
CharterBench
Published by GitHub account auburnduke
CharterBench gives an assistant access to U.S. bank and credit union data from FDIC and NCUA filings, including ratios, peers, growth and change signals.