Skip to main content
Glama
Sign In

ThinAir Data

by co.thinair.data
OverviewDiscussionsAdmin

query_firewall

Destructive

Manage and test per-connection SQL firewall rules that block, warn, or log matching queries — distinct from pii_scan, which scans stored data (not SQL text) for PII. action=add_rule creates a rule (rule_name + RE2 pattern; optional block_action: block/warn/log, default block — only "block" is enforced, "warn"/"log" are advisory-only). action=remove_rule deletes by name or id. action=list_rules is read-only. action=test_query checks a sql string against the built-in guard plus your rules and returns a verdict without running it. add_rule/remove_rule write; changes take effect within 60s. All actions count against quota. Limits: 50 rules/connection, 512-char patterns. [ARCHITECT tier]

Input Schema

NameRequiredDescriptionDefault
sqlNoSQL to test against rules
actionYesWhat to do
messageNoMessage shown when rule triggers
patternNoRegex pattern to match
rule_nameNoRule name
connectionNoTarget connection name from this tenant's inventory. Call `list_connections` to see every name + dialect, then match semantically to the user's intent (e.g. 'analytics' → a connection named `*-analytics-*`; 'prod' → a connection with `prod-` prefix). If the user didn't specify, use the tenant's default (first added). Do not invent names — resolve from `list_connections` output.
block_actionNoAction when matched (default block)

Output Schema

NameRequiredDescriptionDefault
dataNo
metaNo
displayNo
summaryNo
insightsNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed12 schema fields changed
    • removedInput schema / additionalProperties
      Removed value: -false
    • changedOutput schema / additionalProperties
      Previous value: -trueNew value: +{}
    • changedOutput schema / properties / data / anyOf
      Previous value: -[
-  {
-    "items": {
-      "additionalProperties": true,
-      "properties": {
-        "action": {
-          "type": "string"
-        },
-        "message": {
-          "type": "string"
-        },
-        "name": {
-          "type": "string"
-        },
-        "pattern": {
-          "type": "string"
-        }
-      },
-      "type": "object"
-    },
-    "type": "array"
-  },
-  {
-    "additionalProperties": true,
-    "properties": {
-      "action": {
-        "type": "string"
-      },
-      "added": {
-        "type": "boolean"
-      },
-      "message": {
-        "type": "string"
-      },
-      "name": {
-        "type": "string"
-      },
-      "pattern": {
-        "type": "string"
-      },
-      "rule_name": {
-        "type": "string"
-      }
-    },
-    "type": "object"
-  },
-  {
-    "additionalProperties": true,
-    "properties": {
-      "action": {
-        "type": "string"
-      },
-      "allowed": {
-        "type": "boolean"
-      },
-      "matched": {
-        "type": "boolean"
-      },
-      "matched_rule": {
-        "type": "string"
-      },
-      "message": {
-        "type": "string"
-      },
-      "rule": {
-        "type": [
-          "string",
-          "null"
-        ]
-      }
-    },
-    "type": "object"
-  },
-  {
-    "additionalProperties": true,
-    "properties": {
-      "code": {
-        "type": "string"
-      },
-      "details": {
-        "additionalProperties": {},
-        "type": "object"
-      },
-      "error": {
-        "type": "string"
-      },
-      "internal_code": {
-        "type": "string"
-      },
-      "message": {
-        "type": "string"
-      },
-      "retry_after_s": {
-        "type": "number"
-      },
-      "retryable": {
-        "type": "boolean"
-      }
-    },
-    "required": [
-      "error"
-    ],
-    "type": "object"
-  }
-]New value: +[
+  {
+    "items": {
+      "additionalProperties": {},
+      "properties": {
+        "action": {
+          "type": "string"
+        },
+        "message": {
+          "type": "string"
+        },
+        "name": {
+          "type": "string"
+        },
+        "pattern": {
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "type": "array"
+  },
+  {
+    "additionalProperties": {},
+    "properties": {
+      "action": {
+        "type": "string"
+      },
+      "added": {
+        "type": "boolean"
+      },
+      "message": {
+        "type": "string"
+      },
+      "name": {
+        "type": "string"
+      },
+      "pattern": {
+        "type": "string"
+      },
+      "rule_name": {
+        "type": "string"
+      }
+    },
+    "type": "object"
+  },
+  {
+    "additionalProperties": {},
+    "properties": {
+      "action": {
+        "type": "string"
+      },
+      "allowed": {
+        "type": "boolean"
+      },
+      "matched": {
+        "type": "boolean"
+      },
+      "matched_rule": {
+        "type": "string"
+      },
+      "message": {
+        "type": "string"
+      },
+      "rule": {
+        "type": [
+          "string",
+          "null"
+        ]
+      }
+    },
+    "type": "object"
+  },
+  {
+    "additionalProperties": {},
+    "properties": {
+      "code": {
+        "type": "string"
+      },
+      "details": {
+        "additionalProperties": {},
+        "propertyNames": {
+          "type": "string"
+        },
+        "type": "object"
+      },
+      "error": {
+        "type": "string"
+      },
+      "internal_code": {
+        "type": "string"
+      },
+      "message": {
+        "type": "string"
+      },
+      "retry_after_s": {
+        "type": "number"
+      },
+      "retryable": {
+        "type": "boolean"
+      }
+    },
+    "required": [
+      "error"
+    ],
+    "type": "object"
+  }
+]
    • changedOutput schema / properties / display / additionalProperties
      Previous value: -trueNew value: +{}
    • changedOutput schema / properties / display / properties / chart / additionalProperties
      Previous value: -trueNew value: +{}
    • changedOutput schema / properties / display / properties / code / additionalProperties
      Previous value: -trueNew value: +{}
    • changedOutput schema / properties / display / properties / map / additionalProperties
      Previous value: -trueNew value: +{}
    • changedOutput schema / properties / display / properties / metric / additionalProperties
      Previous value: -trueNew value: +{}
    • changedOutput schema / properties / insights / items / additionalProperties
      Previous value: -trueNew value: +{}
    • changedOutput schema / properties / meta / additionalProperties
      Previous value: -trueNew value: +{}
    • removedOutput schema / properties / meta / properties / rowCount / $ref
      Removed value: -"#/properties/meta/properties/executionTimeMs"
    • addedOutput schema / properties / meta / properties / rowCount / type
      Added value: +[
+  "number",
+  "string"
+]
  2. Changed4 schema fields changed
    • changedOutput schema / properties / data / anyOf
      Previous value: -[
-  {
-    "items": {
-      "additionalProperties": true,
-      "properties": {
-        "action": {
-          "type": "string"
-        },
-        "message": {
-          "type": "string"
-        },
-        "name": {
-          "type": "string"
-        },
-        "pattern": {
-          "type": "string"
-        }
-      },
-      "type": "object"
-    },
-    "type": "array"
-  },
-  {
-    "additionalProperties": true,
-    "properties": {
-      "action": {
-        "type": "string"
-      },
-      "added": {
-        "type": "boolean"
-      },
-      "message": {
-        "type": "string"
-      },
-      "name": {
-        "type": "string"
-      },
-      "pattern": {
-        "type": "string"
-      },
-      "rule_name": {
-        "type": "string"
-      }
-    },
-    "type": "object"
-  },
-  {
-    "additionalProperties": true,
-    "properties": {
-      "action": {
-        "type": "string"
-      },
-      "allowed": {
-        "type": "boolean"
-      },
-      "matched": {
-        "type": "boolean"
-      },
-      "matched_rule": {
-        "type": "string"
-      },
-      "message": {
-        "type": "string"
-      },
-      "rule": {
-        "type": [
-          "string",
-          "null"
-        ]
-      }
-    },
-    "type": "object"
-  },
-  {
-    "additionalProperties": true,
-    "properties": {
-      "code": {
-        "type": "string"
-      },
-      "details": {
-        "additionalProperties": {},
-        "type": "object"
-      },
-      "error": {
-        "type": "string"
-      },
-      "internal_code": {
-        "type": "string"
-      },
-      "message": {
-        "type": "string"
-      },
-      "retry_after_s": {
-        "type": "number"
-      }
-    },
-    "required": [
-      "error"
-    ],
-    "type": "object"
-  }
-]New value: +[
+  {
+    "items": {
+      "additionalProperties": true,
+      "properties": {
+        "action": {
+          "type": "string"
+        },
+        "message": {
+          "type": "string"
+        },
+        "name": {
+          "type": "string"
+        },
+        "pattern": {
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "type": "array"
+  },
+  {
+    "additionalProperties": true,
+    "properties": {
+      "action": {
+        "type": "string"
+      },
+      "added": {
+        "type": "boolean"
+      },
+      "message": {
+        "type": "string"
+      },
+      "name": {
+        "type": "string"
+      },
+      "pattern": {
+        "type": "string"
+      },
+      "rule_name": {
+        "type": "string"
+      }
+    },
+    "type": "object"
+  },
+  {
+    "additionalProperties": true,
+    "properties": {
+      "action": {
+        "type": "string"
+      },
+      "allowed": {
+        "type": "boolean"
+      },
+      "matched": {
+        "type": "boolean"
+      },
+      "matched_rule": {
+        "type": "string"
+      },
+      "message": {
+        "type": "string"
+      },
+      "rule": {
+        "type": [
+          "string",
+          "null"
+        ]
+      }
+    },
+    "type": "object"
+  },
+  {
+    "additionalProperties": true,
+    "properties": {
+      "code": {
+        "type": "string"
+      },
+      "details": {
+        "additionalProperties": {},
+        "type": "object"
+      },
+      "error": {
+        "type": "string"
+      },
+      "internal_code": {
+        "type": "string"
+      },
+      "message": {
+        "type": "string"
+      },
+      "retry_after_s": {
+        "type": "number"
+      },
+      "retryable": {
+        "type": "boolean"
+      }
+    },
+    "required": [
+      "error"
+    ],
+    "type": "object"
+  }
+]
    • addedOutput schema / properties / meta / properties / maskedCells
      Added value: +{
+  "type": "number"
+}
    • addedOutput schema / properties / meta / properties / maskedColumns
      Added value: +{
+  "items": {
+    "type": "string"
+  },
+  "type": "array"
+}
    • addedOutput schema / properties / meta / properties / rowCapReached
      Added value: +{
+  "type": "boolean"
+}
  3. Changed1 schema field changed
    • changedOutput schema / properties / data / anyOf
      Previous value: -[
-  {
-    "items": {
-      "additionalProperties": true,
-      "properties": {
-        "action": {
-          "type": "string"
-        },
-        "message": {
-          "type": "string"
-        },
-        "name": {
-          "type": "string"
-        },
-        "pattern": {
-          "type": "string"
-        }
-      },
-      "type": "object"
-    },
-    "type": "array"
-  },
-  {
-    "additionalProperties": true,
-    "properties": {
-      "action": {
-        "type": "string"
-      },
-      "added": {
-        "type": "boolean"
-      },
-      "message": {
-        "type": "string"
-      },
-      "name": {
-        "type": "string"
-      },
-      "pattern": {
-        "type": "string"
-      },
-      "rule_name": {
-        "type": "string"
-      }
-    },
-    "type": "object"
-  },
-  {
-    "additionalProperties": true,
-    "properties": {
-      "action": {
-        "type": "string"
-      },
-      "allowed": {
-        "type": "boolean"
-      },
-      "matched": {
-        "type": "boolean"
-      },
-      "matched_rule": {
-        "type": "string"
-      },
-      "message": {
-        "type": "string"
-      },
-      "rule": {
-        "type": [
-          "string",
-          "null"
-        ]
-      }
-    },
-    "type": "object"
-  },
-  {
-    "additionalProperties": true,
-    "properties": {
-      "code": {
-        "type": "string"
-      },
-      "details": {
-        "additionalProperties": {},
-        "type": "object"
-      },
-      "error": {
-        "type": "string"
-      },
-      "internal_code": {
-        "type": "string"
-      },
-      "message": {
-        "type": "string"
-      },
-      "retry_after_s": {
-        "type": "number"
-      }
-    },
-    "type": "object"
-  }
-]New value: +[
+  {
+    "items": {
+      "additionalProperties": true,
+      "properties": {
+        "action": {
+          "type": "string"
+        },
+        "message": {
+          "type": "string"
+        },
+        "name": {
+          "type": "string"
+        },
+        "pattern": {
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "type": "array"
+  },
+  {
+    "additionalProperties": true,
+    "properties": {
+      "action": {
+        "type": "string"
+      },
+      "added": {
+        "type": "boolean"
+      },
+      "message": {
+        "type": "string"
+      },
+      "name": {
+        "type": "string"
+      },
+      "pattern": {
+        "type": "string"
+      },
+      "rule_name": {
+        "type": "string"
+      }
+    },
+    "type": "object"
+  },
+  {
+    "additionalProperties": true,
+    "properties": {
+      "action": {
+        "type": "string"
+      },
+      "allowed": {
+        "type": "boolean"
+      },
+      "matched": {
+        "type": "boolean"
+      },
+      "matched_rule": {
+        "type": "string"
+      },
+      "message": {
+        "type": "string"
+      },
+      "rule": {
+        "type": [
+          "string",
+          "null"
+        ]
+      }
+    },
+    "type": "object"
+  },
+  {
+    "additionalProperties": true,
+    "properties": {
+      "code": {
+        "type": "string"
+      },
+      "details": {
+        "additionalProperties": {},
+        "type": "object"
+      },
+      "error": {
+        "type": "string"
+      },
+      "internal_code": {
+        "type": "string"
+      },
+      "message": {
+        "type": "string"
+      },
+      "retry_after_s": {
+        "type": "number"
+      }
+    },
+    "required": [
+      "error"
+    ],
+    "type": "object"
+  }
+]
  4. Changed5 schema fields changed
    • addedInput schema / properties / connection / maxLength
      Added value: +256
    • addedInput schema / properties / message / maxLength
      Added value: +500
    • addedInput schema / properties / pattern / maxLength
      Added value: +2000
    • addedInput schema / properties / rule_name / maxLength
      Added value: +256
    • addedInput schema / properties / sql / maxLength
      Added value: +50000
  5. Changed2 schema fields changed
    • addedOutput schema / properties / display / properties / map
      Added value: +{
+  "additionalProperties": true,
+  "properties": {
+    "label": {
+      "type": "string"
+    },
+    "lat": {
+      "type": "string"
+    },
+    "lon": {
+      "type": "string"
+    },
+    "title": {
+      "type": "string"
+    }
+  },
+  "type": "object"
+}
    • changedOutput schema / properties / display / properties / type / anyOf
      Previous value: -[
-  {
-    "enum": [
-      "table",
-      "chart",
-      "metric",
-      "code",
-      "text",
-      "list"
-    ],
-    "type": "string"
-  },
-  {
-    "type": "string"
-  }
-]New value: +[
+  {
+    "enum": [
+      "table",
+      "chart",
+      "metric",
+      "code",
+      "text",
+      "list",
+      "map"
+    ],
+    "type": "string"
+  },
+  {
+    "type": "string"
+  }
+]
  6. Changed1 schema field changed
    • changedOutput schema / (root)
      Previous value: -nullNew value: +{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": true,
+  "properties": {
+    "data": {
+      "anyOf": [
+        {
+          "items": {
+            "additionalProperties": true,
+            "properties": {
+              "action": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              },
+              "name": {
+                "type": "string"
+              },
+              "pattern": {
+                "type": "string"
+              }
+            },
+            "type": "object"
+          },
+          "type": "array"
+        },
+        {
+          "additionalProperties": true,
+          "properties": {
+            "action": {
+              "type": "string"
+            },
+            "added": {
+              "type": "boolean"
+            },
+            "message": {
+              "type": "string"
+            },
+            "name": {
+              "type": "string"
+            },
+            "pattern": {
+              "type": "string"
+            },
+            "rule_name": {
+              "type": "string"
+            }
+          },
+          "type": "object"
+        },
+        {
+          "additionalProperties": true,
+          "properties": {
+            "action": {
+              "type": "string"
+            },
+            "allowed": {
+              "type": "boolean"
+            },
+            "matched": {
+              "type": "boolean"
+            },
+            "matched_rule": {
+              "type": "string"
+            },
+            "message": {
+              "type": "string"
+            },
+            "rule": {
+              "type": [
+                "string",
+                "null"
+              ]
+            }
+          },
+          "type": "object"
+        },
+        {
+          "additionalProperties": true,
+          "properties": {
+            "code": {
+              "type": "string"
+            },
+            "details": {
+              "additionalProperties": {},
+              "type": "object"
+            },
+            "error": {
+              "type": "string"
+            },
+            "internal_code": {
+              "type": "string"
+            },
+            "message": {
+              "type": "string"
+            },
+            "retry_after_s": {
+              "type": "number"
+            }
+          },
+          "type": "object"
+        }
+      ]
+    },
+    "display": {
+      "additionalProperties": true,
+      "properties": {
+        "chart": {
+          "additionalProperties": true,
+          "properties": {
+            "chartType": {
+              "type": "string"
+            },
+            "color": {
+              "type": "string"
+            },
+            "title": {
+              "type": "string"
+            },
+            "x": {
+              "type": "string"
+            },
+            "xLabel": {
+              "type": "string"
+            },
+            "y": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "items": {
+                    "type": "string"
+                  },
+                  "type": "array"
+                }
+              ]
+            },
+            "yLabel": {
+              "type": "string"
+            }
+          },
+          "type": "object"
+        },
+        "code": {
+          "additionalProperties": true,
+          "properties": {
+            "executable": {
+              "type": "boolean"
+            },
+            "language": {
+              "anyOf": [
+                {
+                  "enum": [
+                    "sql",
+                    "json",
+                    "bash",
+                    "typescript"
+                  ],
+                  "type": "string"
+                },
+                {
+                  "type": "string"
+                }
+              ]
+            },
+            "title": {
+              "type": "string"
+            }
+          },
+          "type": "object"
+        },
+        "metric": {
+          "additionalProperties": true,
+          "properties": {
+            "label": {
+              "type": "string"
+            },
+            "status": {
+              "anyOf": [
+                {
+                  "enum": [
+                    "good",
+                    "warning",
+                    "critical"
+                  ],
+                  "type": "string"
+                },
+                {
+                  "type": "string"
+                }
+              ]
+            },
+            "trend": {
+              "anyOf": [
+                {
+                  "enum": [
+                    "up",
+                    "down",
+                    "neutral"
+                  ],
+                  "type": "string"
+                },
+                {
+                  "type": "string"
+                }
+              ]
+            },
+            "trendValue": {
+              "type": "string"
+            },
+            "unit": {
+              "type": "string"
+            },
+            "value": {
+              "type": [
+                "string",
+                "number"
+              ]
+            }
+          },
+          "type": "object"
+        },
+        "type": {
+          "anyOf": [
+            {
+              "enum": [
+                "table",
+                "chart",
+                "metric",
+                "code",
+                "text",
+                "list"
+              ],
+              "type": "string"
+            },
+            {
+              "type": "string"
+            }
+          ]
+        }
+      },
+      "type": "object"
+    },
+    "insights": {
+      "items": {
+        "additionalProperties": true,
+        "properties": {
+          "column": {
+            "type": "string"
+          },
+          "message": {
+            "type": "string"
+          },
+          "severity": {
+            "anyOf": [
+              {
+                "enum": [
+                  "info",
+                  "warning",
+                  "critical"
+                ],
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "value": {}
+        },
+        "required": [
+          "severity",
+          "message"
+        ],
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "meta": {
+      "additionalProperties": true,
+      "properties": {
+        "cacheHit": {
+          "type": "boolean"
+        },
+        "connection": {
+          "type": "string"
+        },
+        "dialect": {
+          "anyOf": [
+            {
+              "enum": [
+                "postgres",
+                "mysql",
+                "mssql"
+              ],
+              "type": "string"
+            },
+            {
+              "type": "string"
+            }
+          ]
+        },
+        "executionTimeMs": {
+          "type": [
+            "number",
+            "string"
+          ]
+        },
+        "plan": {},
+        "rowCount": {
+          "$ref": "#/properties/meta/properties/executionTimeMs"
+        },
+        "tool": {
+          "type": "string"
+        },
+        "truncated": {
+          "type": "boolean"
+        }
+      },
+      "type": "object"
+    },
+    "summary": {
+      "type": "string"
+    }
+  },
+  "type": "object"
+}
  7. First observed

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations: it states which actions write, that changes take effect within 60s, that all actions consume quota, the 50-rule/512-char limits, and the crucial detail that only "block" is enforced while "warn"/"log" are advisory-only. These are non-obvious traits an agent could not infer from destructiveHint=true alone.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Dense but front-loaded, opening with scope and the sibling contrast before action-by-action detail. It is a single long block that would read better as a short list, but virtually every clause carries operational information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a multi-action, mixed read/write tool with an output schema present, the description supplies everything the output schema cannot: write semantics, propagation delay, quota cost, capacity limits, and enforcement behavior. Nothing an agent needs to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description adds real meaning on top — rule_name plus an RE2 pattern, block_action defaulting to block with its enforcement caveat, and sql as the string tested. It does not cover message or the connection resolution rules, but the schema already carries those.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific resource (per-connection SQL firewall rules) and verb set (manage and test), then explicitly distinguishes it from the sibling pii_scan (scans stored data, not SQL text). An agent can route between the two without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Each of the four actions is enumerated with its purpose: add_rule creates, remove_rule deletes by name or id, list_rules is read-only, and test_query evaluates a sql string without executing it. That last clause is exactly the when-to-use guidance an agent needs to pick test_query over query_sql.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All ThinAir Data toolsInspect
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources