Skip to content
InfratoApp
InfratoApp / Resources / MCP servers / schemagate

schemagate

schemagate is an MCP server, listed under model apis. It reaches anthropic, entra, gemini, mysql, openai, postgres and schemagate. It needs ANTHROPIC_API_KEY, ENTRA_CLIENT_SECRET, GEMINI_API_KEY, OPENAI_API_KEY and SCHEMAGATE_AUDIT_SIGNING_KEY to authenticate. Its repository has 105 GitHub stars and is licensed under Apache-2.0; we last read it on 2026-10-22.

Schemagate restricts access to SQL databases by pruning tables based on row-level security, allowing language models like LangChain, MCP, and SQL agents to query only the tables a user is authorized to access. It supports Postgres, Oracle, MySQL, and SQL Server, reducing prompt token usage by 75%.

Install

Read from schemagate’s own README, close to verbatim -- not written by us, and not guessed.

pip install schemagate

What it reaches, and what it needs

Reaches
anthropic, entra, gemini, mysql, openai, postgres, schemagate
Credential
ANTHROPIC_API_KEY, ENTRA_CLIENT_SECRET, GEMINI_API_KEY, OPENAI_API_KEY, SCHEMAGATE_AUDIT_SIGNING_KEY

What it connects to

Unverified means a mention in the server’s own description, not a citation. A wrong claim here costs nothing to correct and nothing to trust yet.

Maintenance

Stars
105
State
listed
Licence
Apache-2.0
From the repository

Text-to-SQL access control: schema selection that gives the LLM only the tables the caller is allowed to read. Row-level-security-aware table pruning for LangChain, MCP and any SQL agent. Postgres, Oracle, MySQL, SQL Server. 75% fewer prompt tokens.

What schemagate can do

7 tools documented in its README. An AI client calls these by name.

Catalog
Catalog a database schema and apply hints and restrictions.
Principal
Define a principal with roles.
select
Select objects from a database based on a query and principal.
demo
Run a demo against the bundled 42-object schema.
studio
No description in the README.
describe
Write AI descriptions for database objects.
certify
Perform an end-to-end check on a real database engine.

Read from the README; names are kept only if the README contains them.

schemagate compared with similar servers

schemagate compared with the closest alternatives, by services reached, credentials, stars, last update and licence
ServerReachesNeedsStarsLast updateLicence
schemagate (this page)anthropic, entra, gemini, mysql, openai, postgres, schemagateANTHROPIC_API_KEY, ENTRA_CLIENT_SECRET, GEMINI_API_KEY, OPENAI_API_KEY, SCHEMAGATE_AUDIT_SIGNING_KEY1052026-10-22Apache-2.0
just-promptanthropic, deepseek, gemini, groq, openai(3 shared)ANTHROPIC_API_KEY, DEEPSEEK_API_KEY, GEMINI_API_KEY, GROQ_API_KEY, OPENAI_API_KEY7392025-08-10—
cross-llm-mcpanthropic, deepseek, gemini, huggingface, kimi, mistral, openai(3 shared)ANTHROPIC_API_KEY, DEEPSEEK_API_KEY, GEMINI_API_KEY, HF_TOKEN, HUGGINGFACE_API_KEY, KIMI_API_KEY, MISTRAL_API_KEY, OPENAI_API_KEY162026-10-15MIT
vibeCoding-mcpanthropic, gemini, openai(3 shared)ANTHROPIC_API_KEY, GEMINI_API_KEY, OPENAI_API_KEY162025-07-09MIT
flamaanthropic, openai(2 shared)None listed3042026-10-13Apache-2.0
mcpfastmcp, gemini, openai(2 shared)DB_PASSWORD, DB_SSL_KEY, FASTMCP_SERVER_AUTH_GITHUB_CLIENT_SECRET, FASTMCP_SERVER_AUTH_GOOGLE_CLIENT_SECRET, GEMINI_API_KEY, OPENAI_API_KEY2092026-08-10MIT

Ranked by services in common with schemagate, then by stars. Figures are from each repository when we last read it.

Common questions about schemagate

What does schemagate do?
Schemagate restricts access to SQL databases by pruning tables based on row-level security, allowing language models like LangChain, MCP, and SQL agents to query only the tables a user is authorized to access. It supports Postgres, Oracle, MySQL, and SQL Server, reducing prompt token usage by 75%.
How do I install schemagate?
Its own README gives this command: pip install schemagate. Run it where your MCP client can launch the server, and check the README for any settings it asks for.
What does schemagate connect to, and what does it need?
It reaches anthropic, entra, gemini, mysql, openai, postgres and schemagate. The credentials we found in its source are ANTHROPIC_API_KEY, ENTRA_CLIENT_SECRET, GEMINI_API_KEY, OPENAI_API_KEY and SCHEMAGATE_AUDIT_SIGNING_KEY.
Is schemagate official and is it maintained?
We found nothing naming it as a vendor’s official server. Its repository has 105 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-10-22.
What licence does schemagate use?
The repository declares the Apache-2.0 licence.

More MCP servers for model apis

All model apis entries →

Learn this on Infrato