StackQL MCP Server

OCI · DOCKER.IO/STACKQL/STACKQL-MCP:0.10.582 · 7 COMPONENTS · SCANNED AUG 3

SQL-native query and provisioning engine for cloud infrastructure, served over MCP.

Available components

mcpb · stackql-mcp-darwin-universal.mcpb 5 mcpb · linux-arm64 13 mcpb · linux-x64 13 mcpb · win-x64 13 npm · @stackql/mcp-server 30 oci · docker.io/stackql/stackql-mcp:0.10.582 35 pypi · stackql-mcp-server 21

35 35 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security0

Malware scan not yet available for this package.Unverified
CVE data not yet available for this package.Unverified
Install-script risk not yet assessed.Unverified
Dependency-health data not yet available.Unverified

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 2 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability75

100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
AI-judged instruction clarity (excellent).Pass
Context-footprint check failed: tool/resource definitions use about 5234 tokens (~261/item across 20 items; 16 tools + 4 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management0

Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified

Tool Coverage83

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
39% of tool parameters carry a description.Partial
Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass

Capabilities60

Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail

Unverified: 2 categories

Categories scored 0 because we could not verify them: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

oci · docker.io/stackql/stackql-mcp:0.10.582

Claude Codex opencode Hermes Other

# add to Claude Code

claude mcp add stackql-stackql-mcp -- docker run --rm -i docker.io/stackql/stackql-mcp:0.10.582

# add to Codex CLI

codex mcp add stackql-stackql-mcp -- docker run --rm -i docker.io/stackql/stackql-mcp:0.10.582

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "stackql-stackql-mcp": {
      "type": "local",
      "command": [
        "docker",
        "run",
        "--rm",
        "-i",
        "docker.io/stackql/stackql-mcp:0.10.582"
      ],
      "enabled": true
    }
  }
}

# ~/.hermes/config.yaml

mcp_servers:
  stackql-stackql-mcp:
    command: "docker"
    args: ["run", "--rm", "-i", "docker.io/stackql/stackql-mcp:0.10.582"]

// mcp.json

{
  "mcpServers": {
    "stackql-stackql-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "docker.io/stackql/stackql-mcp:0.10.582"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

1 Aug 26 +24
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
31 Jul 26 11

First indexed and scored.

Show 1 earlier entry Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed oci/docker.io/stackql/stackql-mcp:0.10.582

Provenance none

Ecosystem: oci · Outcome: none

Reason: no_attestation

MCP tools — 16 exposed · ~1,361 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

describe_method ~79

Full I/O contract for one method. Requires provider, service, resource, method.

Input Output Examples

Name	Type	Req	Description
format	string	—	text content render format: markdown (default) or json
method	string	—	—
provider	string	—	—
resource	string	—	—
row_limit	integer	—	—
service	string	—	—

Name	Type	Req	Description
rows	array	yes	—

No examples provided.

describe_resource ~79

Output fields for a resource's primary read method. Requires provider, service, resource.

Input Output Examples

Name	Type	Req	Description
format	string	—	text content render format: markdown (default) or json
method	string	—	—
provider	string	—	—
resource	string	—	—
row_limit	integer	—	—
service	string	—	—

Name	Type	Req	Description
rows	array	yes	—

No examples provided.

list_methods ~85

Access methods (HTTP operations) for a resource. Call before writing any query. Requires provider, service, resource.

Input Output Examples

Name	Type	Req	Description
format	string	—	text content render format: markdown (default) or json
method	string	—	—
provider	string	—	—
resource	string	—	—
row_limit	integer	—	—
service	string	—	—

Name	Type	Req	Description
rows	array	yes	—

No examples provided.

list_providers ~24

Available cloud/SaaS providers (top of the hierarchy). No inputs.

Input Output Examples

Input schema present but exposes no named parameters.

Name	Type	Req	Description
rows	array	yes	—

No examples provided.

list_registry ~75

Providers (and their versions) available in the configured registry. Distinct from list_providers, which lists only providers already pulled. Optional provider arg lists versions for that provider.

Input Output Examples

Name	Type	Req	Description
format	string	—	text content render format: markdown (default) or json
provider	string	—	—
version	string	—	—

Name	Type	Req	Description
rows	array	yes	—

No examples provided.

list_resources ~73

Resources under a provider.service. Requires provider and service.

Input Output Examples

Name	Type	Req	Description
format	string	—	text content render format: markdown (default) or json
method	string	—	—
provider	string	—	—
resource	string	—	—
row_limit	integer	—	—
service	string	—	—

Name	Type	Req	Description
rows	array	yes	—

No examples provided.

list_services ~70

Services under a provider. Requires provider.

Input Output Examples

Name	Type	Req	Description
format	string	—	text content render format: markdown (default) or json
method	string	—	—
provider	string	—	—
resource	string	—	—
row_limit	integer	—	—
service	string	—	—

Name	Type	Req	Description
rows	array	yes	—

No examples provided.

pull_provider ~81

Install a single provider from the registry into the local approot cache. Requires provider; version is optional (latest published is pulled when empty). Writes only local cache state; no cloud control/data plane effect.

Input Output Examples

Name	Type	Req	Description
format	string	—	text content render format: markdown (default) or json
provider	string	—	—
version	string	—	—

Structured output declared, but exposes no named fields.

No examples provided.

query_library_get ~130

Retrieve a query library entry by id. Without params: returns the raw template, param declarations and notes (adapt from it when no exact match exists). With params: the server validates values and returns rendered SQL plus which tool to execute it with (run_select_query or run_mutation_query). Read-only, no credentials.

Input Output Examples

Name	Type	Req	Description
format	string	—	text content render format: markdown (default) or json
id	string	yes	query id from search results, eg aws/ec2/regions-enabled
params	object	—	parameter values; when supplied the server validates and returns rendered SQL

Name	Type	Req	Description
auth	array	—	env vars the template's providers need resolved
cost	null\|object	—	—
description	string	—	—
doc_url	string	—	—
errors	array	—	—
id	string	yes	—
missing_params	array	—	—
mutation	boolean	yes	—
next_tool	string	yes	run_select_query, run_mutation_query or run_lifecycle_operation
notes	string	—	—
outputs	array	—	—
params	array	—	—
permissions	array	—	provider-native permissions or actions required to execute the template (eg iam:ListUsers)
related	array	—	related library entry ids
rendered	boolean	yes	—
source_tier	string	—	—
source_url	string	—	citation: URL or embedded path the document was loaded from
sql	string	—	rendered SQL, present when rendered and valid
stale	boolean	—	—
template	string	—	raw template with {{param}} placeholders
title	string	—	—
unknown_params	array	—	—
valid	boolean	yes	—
verb	string	—	select, mutation or lifecycle

No examples provided.

query_library_search ~147

Search the curated StackQL query library by natural-language intent. Returns ranked template ids with required param names. Consult this before composing SQL from scratch; follow up with query_library_get. Read-only, no credentials.

Input Output Examples

Name	Type	Req	Description
format	string	—	text content render format: markdown (default) or json
include_mutations	boolean	—	—
intent	string	yes	natural language description of what the user wants
limit	integer	—	max hits, default 5, max 20
provider	string	—	filter by provider, eg aws
service	string	—	filter by service, eg ec2
tags	array	—	filter by tags

Name	Type	Req	Description
guidance	string	—	authoring guidance returned on the miss path
hits	array	yes	—
miss	boolean	yes	true when no hit cleared the score threshold
source_tier	string	—	primary, fallback or snapshot
source_url	string	—	citation: URL or embedded path the catalogue was loaded from
stale	boolean	—	true when served from cache or snapshot after fetch failure

No examples provided.

reload_credentials ~91

Re-source provider credentials from the server's configured env file into the process environment, then report per-provider credential resolution status. Call after fixing or rotating credentials (eg a query failed with a credential resolution error), then retry the query. Never returns secret values. Optional provider arg scopes the report.

Input Output Examples

Name	Type	Req	Description
format	string	—	text content render format: markdown (default) or json
provider	string	—	—

Name	Type	Req	Description
env_file	string	—	configured dotenv file path, empty when none configured
env_file_sourced	boolean	yes	true when the env file was found and sourced on this call
providers	array	yes	—
sourced_vars	array	—	names of environment variables set from the env file (values are never returned)

No examples provided.

run_lifecycle_operation ~84

Execute a stackql EXEC lifecycle operation. Returns {messages, timestamp}. Gated by server mode.

Input Output Examples

Name	Type	Req	Description
format	string	—	text content render format: markdown (default) or json
row_limit	integer	—	—
source	string	—	query library id when the SQL originated from a library entry; attribution only
sql	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

run_mutation_query ~122

Execute INSERT/UPDATE/REPLACE/DELETE against the provider. Real side effects. Returns {messages, timestamp}. Gated by server mode. Consult query_library_search for a vetted template before composing SQL from scratch; when the SQL came from a library entry, pass its id as source.

Input Output Examples

Name	Type	Req	Description
format	string	—	text content render format: markdown (default) or json
row_limit	integer	—	—
source	string	—	query library id when the SQL originated from a library entry; attribution only
sql	string	yes	—

Structured output declared, but exposes no named fields.

No examples provided.

run_select_query ~103

Execute a SELECT. Returns {rows}. Reads only. Consult query_library_search for a vetted template before composing SQL from scratch; when the SQL came from a library entry, pass its id as source.

Input Output Examples

Name	Type	Req	Description
format	string	—	text content render format: markdown (default) or json
row_limit	integer	—	—
source	string	—	query library id when the SQL originated from a library entry; attribution only
sql	string	yes	—

Name	Type	Req	Description
rows	array	yes	—

No examples provided.

server_info ~38

Get server identity and runtime: stackql version, backing SQL engine, provider registry location, mode, read-only flag. Call once at session start.

Input Output Examples

Input schema present but exposes no named parameters.

Name	Type	Req	Description
build_date	string	—	—
commit	string	—	—
is_read_only	boolean	yes	—
mode	string	—	—
platform	string	—	—
provider_registry	string	—	—
sql_backend	string	—	—
transport	string	—	—
version	string	—	—

No examples provided.

validate_select_query ~80

Parse and plan a SELECT without executing. Returns {valid, errors}. SELECT only.

Input Output Examples

Name	Type	Req	Description
format	string	—	text content render format: markdown (default) or json
row_limit	integer	—	—
source	string	—	query library id when the SQL originated from a library entry; attribution only
sql	string	yes	—

Name	Type	Req	Description
errors	array	—	—
valid	boolean	yes	—

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

31 Jul 3 Aug