Midplane MCP Server

Name: Midplane MCP Server
Author: ai.midplane

ai.midplane/midplane

Repository Registry

What is the Midplane MCP server?

Safe-by-default SQL guardrails for AI agents: AST-checked queries, per-table policy, audit log.

How to install Midplane

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

DATABASE_URL
required
secret
Postgres connection string the agent's queries run against. Give it a least-privilege role: Midplane constrains what SQL is allowed, it does not widen or narrow what the role itself can reach.
MIDPLANE_POLICY_FILE
Path to a policy YAML granting per-table read/read_write access, tenant scoping, and column masking. Omit for the safe default: reads allowed, writes and DDL denied. Generate one with `npx midplane init`.
DB_PATH
Where the local SQLite audit log is written. Defaults to ~/.midplane/audit.db; read it back with `midplane audit denies`.
MIDPLANE_TELEMETRY
Set to 0 to disable anonymous usage telemetry (DO_NOT_TRACK=1 also works). Never includes SQL, table or column names, or identifiers.
PORT
Port the Streamable HTTP transport binds. Must match the url above if changed.

Claude Desktop

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "midplane": {
      "command": "npx",
      "args": [
        "-y",
        "midplane",
        "server",
        "--stdio"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>",
        "MIDPLANE_POLICY_FILE": "<YOUR_MIDPLANE_POLICY_FILE>",
        "DB_PATH": "<YOUR_DB_PATH>",
        "MIDPLANE_TELEMETRY": "<YOUR_MIDPLANE_TELEMETRY>",
        "PORT": "<YOUR_PORT>"
      }
    }
  }
}

Cursor

~/.cursor/mcp.json

{
  "mcpServers": {
    "midplane": {
      "command": "npx",
      "args": [
        "-y",
        "midplane",
        "server",
        "--stdio"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>",
        "MIDPLANE_POLICY_FILE": "<YOUR_MIDPLANE_POLICY_FILE>",
        "DB_PATH": "<YOUR_DB_PATH>",
        "MIDPLANE_TELEMETRY": "<YOUR_MIDPLANE_TELEMETRY>",
        "PORT": "<YOUR_PORT>"
      }
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "midplane": {
      "command": "npx",
      "args": [
        "-y",
        "midplane",
        "server",
        "--stdio"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>",
        "MIDPLANE_POLICY_FILE": "<YOUR_MIDPLANE_POLICY_FILE>",
        "DB_PATH": "<YOUR_DB_PATH>",
        "MIDPLANE_TELEMETRY": "<YOUR_MIDPLANE_TELEMETRY>",
        "PORT": "<YOUR_PORT>"
      }
    }
  }
}

VS Code

.vscode/mcp.json

{
  "servers": {
    "midplane": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "midplane",
        "server",
        "--stdio"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>",
        "MIDPLANE_POLICY_FILE": "<YOUR_MIDPLANE_POLICY_FILE>",
        "DB_PATH": "<YOUR_DB_PATH>",
        "MIDPLANE_TELEMETRY": "<YOUR_MIDPLANE_TELEMETRY>",
        "PORT": "<YOUR_PORT>"
      }
    }
  }
}

Claude Code

claude mcp add midplane --env DATABASE_URL=<YOUR_DATABASE_URL> --env MIDPLANE_POLICY_FILE=<YOUR_MIDPLANE_POLICY_FILE> --env DB_PATH=<YOUR_DB_PATH> --env MIDPLANE_TELEMETRY=<YOUR_MIDPLANE_TELEMETRY> --env PORT=<YOUR_PORT> -- npx -y midplane server --stdio