LogCarverGuard

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-10-12T10:06:58.907443Z",
      "publishedAt": "2026-10-12T10:06:58.907443Z",
      "statusChangedAt": "2026-10-12T10:06:58.907443Z"
    }
  },
  "server": {
    "name": "io.github.caiderek/logcarverguard",
    "title": "LogCarverGuard",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.1.0",
    "packages": [
      {
        "version": "0.1.0",
        "transport": {
          "type": "stdio"
        },
        "identifier": "LogCarverGuard.Local",
        "runtimeHint": "dnx",
        "registryType": "nuget",
        "environmentVariables": [
          {
            "name": "LOGCARVERGUARD_CONNECTION_STRING",
            "format": "string",
            "isSecret": true,
            "isRequired": true,
            "description": "SQL Server connection string the statements run as. Example: Server=localhost;Database=MyDb;Integrated Security=true;TrustServerCertificate=true"
          },
          {
            "name": "LOGCARVERGUARD_READ_ONLY",
            "format": "string",
            "description": "Set to true to allow queries only (SELECT without INTO; remote sources such as OPENQUERY are blocked). Leave unset for the default guard rules."
          },
          {
            "name": "LOGCARVERGUARD_AUDIT_DB_PATH",
            "format": "string",
            "description": "Path of the audit log SQLite file. Defaults to LogCarverGuard/audit.db under the local application data folder."
          },
          {
            "name": "LOGCARVERGUARD_TRUNCATE_ALLOWLIST",
            "format": "string",
            "description": "Comma-separated schema.table entries where TRUNCATE TABLE is allowed. Empty means all TRUNCATE is blocked."
          },
          {
            "name": "LOGCARVERGUARD_EXEC_WHITELIST",
            "format": "string",
            "description": "Comma-separated schema.procedure entries that may be run with EXEC. Empty means all EXEC is blocked."
          },
          {
            "name": "LOGCARVERGUARD_ALTER_DROP_COLUMN_ALLOWLIST",
            "format": "string",
            "description": "Comma-separated schema.table entries where ALTER TABLE ... DROP COLUMN is allowed. Empty means it is blocked."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/caiderek/LogCarverGuard",
      "source": "github"
    },
    "websiteUrl": "https://github.com/caiderek/LogCarverGuard",
    "description": "Guardrail for AI agents on SQL Server: statement blocking, optional read-only mode and an audit log."
  }
}