
Data Studio
io.github.geek-funPublished by GitHub account geek-funv0.1.12Updated Nov 3, 2026
Unified MCP server for SQL and NoSQL databases, powered by dockit and sqlkit desktop apps
Overview
Local MCP server that lets an AI coding agent explore and query SQL and NoSQL databases through the dockit and sqlkit desktop apps.
- What you can do
- List connections, databases, schemas, tables, views, indexes, keys, procedures and functions, and read DDL or explain queries
- Run SELECT queries and inspect sessions and slow queries on 70+ SQL databases via sqlkit
- Search, read, count and inspect mappings, aliases, nodes and shards in Elasticsearch and OpenSearch
- Find, aggregate, count, sample and inspect stats and indexes in MongoDB
- Query, scan, describe and inspect backups, TTL and metrics in DynamoDB
- Write, update, create, grant or revoke, and delete or drop objects, gated by permission mode and confirmation
- When to use it
- Useful when you want an AI agent to read schemas and run queries against your own databases in plain language, across SQL engines and Elasticsearch, MongoDB or DynamoDB, without pasting credentials into prompts.
- Requirements
- Runs locally as an npm package over stdio, so Node.js and npx are needed. The dockit and/or sqlkit desktop apps must be installed and running, with a database connection added and the MCP Bridge auto-start enabled; the bridge listens on localhost only. No API keys or environment variables are declared.
Installation
In SourceWeft
- Open Data Studio in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
Data Studio Agent
Let your AI coding agent securely access all your databases, in plain language.
Local-first. Enterprise-grade security. Open source.
[Release] [Downloads] [npm] [License] [Stars] [CI] [MCP Toplist]
[Image] [Image] [Image] [Image]
[Ask your database in plain language — live demo]
📖 Product Page · npm · dockit · sqlkit · Releases
English · 简体中文
This repository contains the Data Studio MCP Server, a Model Context Protocol server that gives AI coding agents direct access to your databases through the dockit and sqlkit desktop apps.
- SQL (via sqlkit): 70+ databases (PostgreSQL, MySQL, SQL Server, Oracle, SQLite, DuckDB, ClickHouse, Snowflake, BigQuery, and more)
- NoSQL (via dockit): Elasticsearch, OpenSearch, MongoDB, DynamoDB
Features
- Any AI coding agent. Claude Code, Cursor, Windsurf, OpenCode, Codex, Cline, Pi, Qoder, GitHub Copilot, or any MCP client.
- Any OS. macOS, Windows, Linux.
- Any LLM model. Bring your own provider. No lock-in.
- One MCP server, one config. Routes to both SqlKit (SQL) and DocKit (NoSQL) bridges over localhost.
- Enterprise-grade security. See below.
Quick start
1. Prerequisites
Install and launch dockit and/or sqlkit, add a database connection, and make sure Settings → MCP Bridge → Auto-start is enabled (it is by default). Install both apps for the full SQL + NoSQL tool set.
2. Install the MCP server
Or run it without installing (npx downloads it on first run):
3. Add it to your AI tool
OpenAI Codex, one command:
Claude Code, one command:
Cursor. Create .cursor/mcp.json (project) or ~/.cursor/mcp.json (global):
Windsurf. Create ~/.codeium/windsurf/mcp_config.json (global only):
OpenCode. Add to opencode.json (project) or ~/.config/opencode/opencode.json (global):
DeepSeek Harness. Save the overlay as data-studio.cordis.yml:
Run dsh web --patch "$PWD/data-studio.cordis.yml", or merge the insert patch into $DSH_HOME/cordis.patch.yml to keep it across runs. Tools appear as mcp__data-studio__* (DSH is developer preview — its config surface may change).
WorkBuddy / CodeBuddy CLI. One command:
Or add the same mcpServers JSON shown for Cursor above to the project-level .mcp.json (~/.codebuddy/.mcp.json for user scope).
Any other MCP client. Register a stdio server with command npx and args -y @geek-fun/data-studio-mcp.
4. Tune permissions (optional)
Open Settings → MCP Bridge in dockit/sqlkit to control what the agent can do:
5. Start asking
Use plain language. The agent queries your databases for you:
- "List all tables in my PostgreSQL database"
- "Show me the last 10 orders from the Elasticsearch index
orders*" - "Find all users older than 30 in MongoDB"
- "Run this query and explain the results"
The agent reads schemas, runs queries, and explores your data, then shows you every query it executed.
Enterprise-grade security
The LLM gets broad access to your data, but it never sees your credentials. The policy model gates every capability by risk level.
- Credentials never leave the apps. The LLM only ever sees an opaque
connection_id. Real credentials are resolved inside dockit/sqlkit and never cross the MCP boundary. Your passwords and keys stay on your machine, in your app. - ID-based resource access. Agents access databases strictly by connection ID. Credentials never appear in prompts or tool arguments, so there is no path for the model to obtain or exfiltrate connection secrets.
- Three-tier permission model. Read Only / Data Read-Write / Full Access modes gate every capability by risk level, with per-connection overrides. You can mark any connection read-only or allowlist specific actions.
- Explicit user confirmation. Destructive operations (DELETE, DROP, TRUNCATE) surface as
Askin the policy. The client prompts the user for explicit confirmation before anything destructive runs. - Action-level statement classification. SQL is parsed and classified by statement kind (Read / Write / Delete / DDL) before execution. Write-only tools reject DELETE statements; delete tools reject DDL.
- Local-only bridge. The bridge binds to
127.0.0.1exclusively. It is unreachable from other machines, with no server to host and no API keys to manage.
Tools
All tools follow the data_studio__{app}__{backend}__{action} convention: app is the desktop app exposing the bridge (sqlkit or dockit), and backend is the data source behind it (sqlkit, es, mongo, dynamo). The two server-level tools (data_studio__list_connections, data_studio__get_status) have no app segment. The User confirmation column shows which operations surface an explicit confirmation prompt in your AI client before they run.
The exact tool set advertised at runtime depends on your apps' permission mode and configured connections — call data_studio__get_status to see what is currently available.
How it works
The MCP server is a thin routing layer. All database drivers, SSH tunnels, and connection management live in the desktop apps, which expose a local HTTP bridge (127.0.0.1 only). The MCP server auto-discovers running backends via each app's port file.
For developers
This repository also contains the data-studio-agent Rust framework, the shared AI agent loop (provider adapters, streaming, tool calling, context compaction) that powers the built-in assistants in dockit and sqlkit.
See crates/data-studio-agent/README.md for installation, architecture, and integration guides.
License
Apache 2.0. See LICENSE.
Source: README.md at commit c3f962b
Tools
0Version history
1- v0.1.12LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts