gcp_sql_query
Execute read-only SQL queries on Google Cloud SQL databases to retrieve data for analysis or reporting purposes.
Instructions
Cloud SQL 쿼리|DB 조회|sql query - Cloud SQL에서 읽기 전용 쿼리를 실행합니다
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| instance | Yes | Cloud SQL 인스턴스 이름 | |
| database | Yes | 데이터베이스 이름 | |
| query | Yes | SELECT 쿼리 (읽기 전용만 허용) | |
| project_id | No | GCP 프로젝트 ID (기본: 현재 설정된 프로젝트) | |
| format | No | 출력 형식 (기본: text) | text |
Implementation Reference
- src/gcp/sql.ts:52-119 (handler)The async handler function that implements the core logic for 'gcp_sql_query'. It performs security checks (SELECT-only, no dangerous keywords, adds LIMIT), prepares a gcloud sql connect command, and returns formatted results or errors.export async function gcpSqlQuery(args: GcpSqlQueryArgs) { try { const projectId = await getProjectId(args.project_id); // Security check: only allow SELECT queries const normalizedQuery = args.query.trim().toLowerCase(); if (!normalizedQuery.startsWith('select')) { return { content: [ { type: 'text', text: '❌ 보안 제한: SELECT 쿼리만 허용됩니다.\n\nINSERT, UPDATE, DELETE, DROP 등의 쿼리는 실행할 수 없습니다.', }, ], isError: true, }; } // Check for dangerous keywords const dangerousKeywords = ['insert', 'update', 'delete', 'drop', 'truncate', 'alter', 'create', 'grant', 'revoke']; for (const keyword of dangerousKeywords) { if (normalizedQuery.includes(keyword)) { return { content: [ { type: 'text', text: `❌ 보안 제한: "${keyword.toUpperCase()}" 키워드가 포함된 쿼리는 실행할 수 없습니다.`, }, ], isError: true, }; } } // Add LIMIT if not present (safety measure) let safeQuery = args.query.trim(); if (!normalizedQuery.includes('limit')) { safeQuery += ' LIMIT 100'; } // Note: Cloud SQL direct query requires Cloud SQL Proxy or gcloud sql connect // This implementation uses gcloud sql connect with --quiet flag // For production, consider using Cloud SQL Admin API const command = `sql connect ${args.instance} --database=${args.database} --project=${projectId} --quiet <<< "${safeQuery.replace(/"/g, '\\"')}"`; // This is a simplified implementation // Real implementation would need proper SQL connection handling return { content: [ { type: 'text', text: `⚠️ Cloud SQL 직접 연결 기능\n\n현재 구현에서는 Cloud SQL Proxy 또는 직접 연결이 필요합니다.\n\n실행하려던 쿼리:\n${safeQuery}\n\n대안:\n1. Cloud SQL Studio 사용 (GCP Console)\n2. Cloud SQL Proxy 설정 후 로컬에서 연결\n3. gcloud sql connect ${args.instance} --database=${args.database} 명령어 직접 실행`, }, ], }; } catch (error: any) { return { content: [ { type: 'text', text: formatError(error), }, ], isError: true, }; } }
- src/gcp/sql.ts:4-42 (schema)The tool schema definition, including name, description, annotations, and detailed inputSchema with properties for instance, database, query, optional project_id and format.export const gcpSqlQueryDefinition = { name: 'gcp_sql_query', description: 'Cloud SQL 쿼리|DB 조회|sql query - Cloud SQL에서 읽기 전용 쿼리를 실행합니다', annotations: { title: 'Cloud SQL 쿼리 실행', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true, }, inputSchema: { type: 'object' as const, properties: { instance: { type: 'string', description: 'Cloud SQL 인스턴스 이름', }, database: { type: 'string', description: '데이터베이스 이름', }, query: { type: 'string', description: 'SELECT 쿼리 (읽기 전용만 허용)', }, project_id: { type: 'string', description: 'GCP 프로젝트 ID (기본: 현재 설정된 프로젝트)', }, format: { type: 'string', enum: ['text', 'json'], description: '출력 형식 (기본: text)', default: 'text', }, }, required: ['instance', 'database', 'query'], }, };
- src/index.ts:77-89 (registration)Registration of all tools including gcpSqlQueryDefinition in the tools array used by ListToolsRequestSchema handler.const tools = [ gcpSetupDefinition, gcpLogsReadDefinition, gcpRunStatusDefinition, gcpRunLogsDefinition, gcpSqlQueryDefinition, gcpSqlProxyDefinition, gcpStorageListDefinition, gcpSecretListDefinition, gcpAuthStatusDefinition, gcpServicesListDefinition, gcpBillingInfoDefinition, ];
- src/index.ts:221-222 (registration)Dispatch/execution registration in the CallToolRequestSchema switch statement, mapping 'gcp_sql_query' to the gcpSqlQuery handler.case 'gcp_sql_query': return await gcpSqlQuery(args as any) as CallToolResult;
- src/gcp/sql.ts:44-50 (schema)TypeScript interface defining the arguments for the gcpSqlQuery handler, matching the inputSchema.interface GcpSqlQueryArgs { instance: string; database: string; query: string; project_id?: string; format?: 'text' | 'json'; }