<<<<<<< HEAD
# MCP SQL Server Gateway

Enterprise-safe MCP server for Claude Enterprise access to approved on-prem SQL Server data.

## Goal

Expose governed, auditable, read-only SQL Server tools through a remote MCP endpoint.

## First principles

- SQL Server remains private.
- Claude never connects directly to SQL.
- MCP gateway enforces authentication, authorization, query controls, logging, timeouts, and row limits.
- Start with metadata, saved reports, and read-only SELECT access.
- Prefer approved SQL views over raw tables.

## Initial MCP tools

- `sql_list_databases`
- `sql_list_schemas`
- `sql_list_tables`
- `sql_describe_table`
- `sql_sample_rows`
- `sql_query_readonly`
- `sql_saved_report`

## Suggested phases

1. Project scaffold and local mock MCP server.
2. Read-only SQL connector against dev SQL.
3. AuthN/AuthZ and allowlist policy.
4. AKS deployment behind existing MCP ingress pattern.
5. Claude Enterprise custom connector registration.
6. Observability, audit, and production hardening.
=======
# cp-apps-mcp-onpremsql
>>>>>>> a09eb63f3769fc96fe2e82314af1d8c0db9aa3bb