Skip to main content
Glama
RithikSDev

permit-db

by RithikSDev
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

permit-query-agent

A read-only, natural-language interface to a permit database. Ask a question in plain English; the local Claude Code CLI writes a SELECT, runs it through a validated MCP tool (permit-db), and explains the result. A Streamlit UI wraps it with deterministic Discover/Analytics pages that never call the LLM.

Project Structure

permit-query-agent/
│
├── app/                  # Application source
│   ├── agent/            # PermitAgent — drives the `claude` CLI + MCP tools
│   ├── config/           # Query-safety / logging settings
│   ├── database/         # Engine, session, schema init (connection.py)
│   ├── logging/          # Logging setup
│   ├── mcp/              # MCP server + tool layer (SQL entry point)
│   ├── models/           # SQLAlchemy models
│   ├── repositories/     # Data access layer (queries)
│   ├── security/         # SQL Guard, audit, table allowlist
│   ├── services/         # Query / schema / statistics services
│   └── utils/            # Shared helpers
│
├── ui/                   # Streamlit app (app.py) + deterministic reads (data.py)
├── scripts/              # Setup: init_db, create_readonly_user, seed_data
├── certs/                # DB TLS certs (e.g. Aiven ca.pem) — git-ignored
├── tests/                # Test suite
│
├── .env                  # Local secrets (git-ignored)
├── .env.example          # Copy to .env and fill in
├── .mcp.json             # MCP server configuration
└── requirements.txt

Related MCP server: MCP MySQL Server

Database

MySQL 8, database permit_system (or Aiven's defaultdb). All connection settings are read from .env — see .env.example. Two supported targets:

  • Local MySQL — DB_HOST=localhost, DB_PORT=3306, DB_SSL unset.

  • Aiven for MySQL — the service host/port, DB_SSL=true. Aiven requires TLS; to verify the server cert, download ca.pem into certs/ and set DB_SSL_CA=./certs/aiven-ca.pem.

The app connects as a least-privilege read-only user (DB_USER); setup scripts use the admin credentials (DB_ADMIN_USER / DB_ADMIN_PASSWORD).

Setup

pip install -r requirements.txt
cp .env.example .env            # then fill in host / credentials

python -m app.database.init_db  # create the tables (admin creds)

# create the read-only app user (name defaults to permit_ro)
RO_DB_PASSWORD=your_ro_password python -m scripts.create_readonly_user

python -m scripts.seed_data     # load ~1,000 sample permits

Run

streamlit run ui/app.py         # UI — needs the `claude` CLI on PATH for Ask AI
pytest                          # test suite

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivitySlowing
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • MCP MySQL Server

    keleshteri
    A
    license
    Not graded
    quality
    D
    maintenance
    Enables Claude Desktop to interact with MySQL databases through secure query execution, schema discovery, and multi-database support with configurable read/write permissions and built-in SQL injection protection.
    188 npm
    MIT

  • MySQL MCP Server

    hovecapital
    A
    license
    A
    quality
    B
    maintenance
    Enables Claude Desktop to execute read-only SQL queries on MySQL databases via natural language, with dynamic connection switching and built-in security.
    3
    153 npm
    7
    MIT

  • mcp-mysql-server

    81832310
    A
    license
    A
    quality
    D
    maintenance
    Enables Claude Code to directly operate MySQL databases through natural language, supporting multi-environment profiles, security modes, and 11 tools.
    11
    22 npm
    2
    Apache 2.0